Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Zsl203PnuBDj54gkT5X2UnsDFUw.roa
File: Zsl203PnuBDj54gkT5X2UnsDFUw.roa (raw, json)
Hash identifier: 6R8IollvFkmeRmgmp+RbFfm1S4Z2LnAmlna37ivHyk0=
Subject key identifier: 66:C9:76:D3:73:E7:B8:10:E3:E7:88:24:4F:95:F6:52:7B:03:15:4C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018DD6D2A05B0CDA7B84A54CCF8FCEA4EDD9
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Zsl203PnuBDj54gkT5X2UnsDFUw.roa
Signing time: Fri 23 Feb 2024 16:35:44 +0000
ROA not before: Fri 23 Feb 2024 16:35:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.132.80.0/22 maxlen: 24
81.28.253.0/24 maxlen: 24
91.238.92.0/24 maxlen: 24
91.239.149.0/24 maxlen: 24
91.244.198.0/24 maxlen: 24
176.105.228.0/24 maxlen: 24
185.177.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:d2:a0:5b:0c:da:7b:84:a5:4c:cf:8f:ce:a4:ed:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Feb 23 16:35:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c976d373e7b810e3e788244f95f6527b03154c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:b9:a8:8a:d2:35:5f:eb:14:d4:59:b0:c1:
f5:c9:68:df:6e:12:39:71:47:55:84:24:81:a4:0e:
a9:d9:6f:a4:57:2d:12:d0:f9:12:b7:fd:6f:24:8e:
39:48:43:94:e6:15:b7:bb:d8:03:9a:5d:16:f8:1f:
f8:ca:92:03:fd:bf:01:c2:1d:5a:b2:15:05:06:c1:
7e:15:57:34:8d:08:3c:e6:d4:d6:be:52:60:e8:4b:
18:43:05:85:53:a7:da:95:21:91:92:31:11:d1:af:
01:16:49:0d:76:0b:4a:57:c2:2a:29:86:8e:b9:5a:
08:53:91:01:59:e2:ac:79:96:e6:f2:d3:45:85:ee:
b7:1f:db:49:3f:c3:53:6b:b3:a3:29:52:8a:2a:59:
f9:d2:e4:5c:07:6b:41:d2:7f:06:04:ea:96:04:55:
63:e2:bb:7d:f9:bf:81:35:07:8a:0b:3b:e7:da:2a:
47:ea:da:80:67:33:1b:ee:19:74:1d:06:9b:0e:d4:
a0:f7:8e:ae:57:57:73:13:48:0f:b0:9e:ac:29:78:
88:fc:b8:27:99:3f:6d:8d:5d:f1:34:f5:2e:75:d1:
51:97:ad:ca:db:6f:79:bd:f4:69:44:67:86:07:72:
38:9a:a2:37:86:b2:83:51:33:e0:4e:90:bf:e4:0b:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:76:D3:73:E7:B8:10:E3:E7:88:24:4F:95:F6:52:7B:03:15:4C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Zsl203PnuBDj54gkT5X2UnsDFUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
81.28.253.0/24
91.238.92.0/24
91.239.149.0/24
91.244.198.0/24
176.105.228.0/24
185.177.27.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0c:f8:65:55:12:36:e1:20:af:f9:69:b8:aa:6b:12:30:49:
8f:bd:f3:9e:f5:8d:0a:87:0a:bf:28:60:57:ff:3e:21:9a:5b:
5a:11:6f:a4:09:1d:63:59:8c:58:4a:ce:65:8a:4a:06:a9:bf:
2e:71:ae:66:75:83:ca:33:f0:36:a7:b8:4d:0d:86:26:13:81:
40:1a:17:17:a2:ab:59:fc:fc:7d:3d:44:f1:d1:ba:84:24:90:
92:49:59:67:55:7b:f1:46:17:e8:0d:c3:3a:d6:e3:87:18:8e:
74:3f:8a:3c:ff:72:29:c6:62:29:8f:6c:cd:09:64:1f:1b:e7:
10:50:54:4a:79:ef:8b:d0:6e:bd:aa:64:fa:37:94:c3:57:cb:
40:77:be:5e:dd:76:82:64:2c:47:fc:96:51:90:3e:ba:1b:89:
cd:a9:b8:8a:df:2d:ef:c9:f9:ee:84:15:e6:9f:6f:d7:ce:de:
99:b7:3b:a4:26:21:a8:c1:00:de:92:9f:d4:d9:54:cc:1b:c4:
e3:ce:a8:7f:27:1f:fe:9a:94:f3:8c:fd:55:b0:b9:f7:e5:d4:
95:eb:57:68:ae:35:41:94:bb:42:7c:c5:52:dc:35:a6:d9:99:
24:41:50:b3:7b:28:b0:e5:f1:6e:b0:57:43:72:d6:a1:a2:fe:
74:c4:53:51
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY3W0qBbDNp7hKVMz4/OpO3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwMjIzMTYzNTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmM5NzZkMzczZTdiODEwZTNlNzg4MjQ0Zjk1ZjY1MjdiMDMxNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMC5qIrSNV/rFNRZsMH1yWjfbhI5
cUdVhCSBpA6p2W+kVy0S0PkSt/1vJI45SEOU5hW3u9gDml0W+B/4ypID/b8Bwh1a
shUFBsF+FVc0jQg85tTWvlJg6EsYQwWFU6falSGRkjER0a8BFkkNdgtKV8IqKYaO
uVoIU5EBWeKseZbm8tNFhe63H9tJP8NTa7OjKVKKKln50uRcB2tB0n8GBOqWBFVj
4rt9+b+BNQeKCzvn2ipH6tqAZzMb7hl0HQabDtSg946uV1dzE0gPsJ6sKXiI/Lgn
mT9tjV3xNPUuddFRl63K2295vfRpRGeGB3I4mqI3hrKDUTPgTpC/5As93QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFGbJdtNz57gQ4+eIJE+V9lJ7AxVMMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvWnNsMjAzUG51QkRqNTRna1Q1WDJVbnNERlV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLYRQAwQA
URz9AwQAW+5cAwQAW++VAwQAW/TGAwQAsGnkAwQAubEbMA0GCSqGSIb3DQEBCwUA
A4IBAQAQDPhlVRI24SCv+Wm4qmsSMEmPvfOe9Y0Khwq/KGBX/z4hmltaEW+kCR1j
WYxYSs5likoGqb8uca5mdYPKM/A2p7hNDYYmE4FAGhcXoqtZ/Px9PUTx0bqEJJCS
SVlnVXvxRhfoDcM61uOHGI50P4o8/3IpxmIpj2zNCWQfG+cQUFRKee+L0G69qmT6
N5TDV8tAd75e3XaCZCxH/JZRkD66G4nNqbiK3y3vyfnuhBXmn2/Xzt6ZtzukJiGo
wQDekp/U2VTMG8Tjzqh/Jx/+mpTzjP1VsLn35dSV61dorjVBlLtCfMVS3DWm2Zkk
QVCzeyiw5fFusFdDctahov50xFNR
-----END CERTIFICATE-----
Generated at Sat May 4 04:54:32 2024 by rpki-client on console-fra.rpki-client.org