Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZnKrIT2cMvguzIGg0ayur3J_Sk4.roa
File: ZnKrIT2cMvguzIGg0ayur3J_Sk4.roa (raw, json)
Hash identifier: JgodFo/FWtmXTTannAhWaCKXBxecI1inZaGh4l2NDkg=
Subject key identifier: 66:72:AB:21:3D:9C:32:F8:2E:CC:81:A0:D1:AC:AE:AF:72:7F:4A:4E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CF56BA23D0374C2ADF64990173FDA3B99
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZnKrIT2cMvguzIGg0ayur3J_Sk4.roa
Signing time: Wed 10 Jan 2024 22:08:40 +0000
ROA not before: Wed 10 Jan 2024 22:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212396
IP address blocks: 185.150.1.0/24 maxlen: 24
45.83.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:6b:a2:3d:03:74:c2:ad:f6:49:90:17:3f:da:3b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 10 22:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6672ab213d9c32f82ecc81a0d1acaeaf727f4a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:ab:41:09:0c:01:c0:9a:fb:a9:3d:3d:91:
22:35:a3:0d:b7:bc:4f:8f:1c:f2:68:b5:18:e6:98:
2d:7c:e6:a7:92:a9:ca:e0:e5:1c:26:50:fb:e0:c4:
28:36:7a:d9:78:d5:52:f3:67:f6:da:da:05:bf:da:
fd:0d:e5:c4:66:05:60:0d:f2:c4:56:bf:f0:6b:13:
23:79:24:94:19:cc:50:0a:94:ab:11:70:50:12:e6:
60:e2:8f:c7:94:97:4f:7c:a3:0d:89:eb:e0:8c:40:
d8:42:1f:e0:6f:8c:ab:6d:a2:2d:37:a7:d9:8c:97:
fd:35:c1:c5:69:72:3a:cb:04:0f:02:b9:dd:31:4b:
08:9c:21:1e:7a:9c:c0:90:45:b6:a8:19:08:86:32:
28:b7:57:13:30:2d:14:b6:f9:bb:26:09:2b:a6:39:
34:f2:09:04:73:24:5f:64:94:71:04:8d:d4:ee:22:
f1:9f:ef:39:b0:33:91:9b:c5:a1:e3:3d:eb:9c:8e:
e6:58:ec:23:4a:d9:92:88:8c:aa:35:d3:50:12:d9:
98:93:5f:9f:ea:21:95:41:11:d0:6f:ee:31:6c:bd:
35:9d:db:c8:e1:f7:f1:ed:3e:ee:90:c2:b0:06:7e:
97:f1:8a:21:90:28:78:3c:f0:2d:89:5f:b6:80:2d:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:AB:21:3D:9C:32:F8:2E:CC:81:A0:D1:AC:AE:AF:72:7F:4A:4E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZnKrIT2cMvguzIGg0ayur3J_Sk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.30.0/24
185.150.1.0/24
Signature Algorithm: sha256WithRSAEncryption
11:97:f9:23:18:88:ce:8a:42:23:2c:9f:a4:f9:78:24:03:01:
7a:78:18:70:fd:65:0f:ea:a9:6c:28:75:65:75:72:d4:76:74:
32:2c:03:e7:af:da:6e:fd:b3:1c:24:12:3a:37:a2:ad:31:39:
3c:dd:2c:c2:5a:a3:8e:e8:d6:ee:0e:46:2a:37:e5:77:28:3d:
ea:ae:21:a0:0e:95:e9:d5:5d:5e:01:03:4b:d8:ea:ff:2c:b4:
b3:f6:15:47:98:61:2d:d2:ea:ff:b4:89:85:d5:cd:92:07:65:
3e:ce:df:e5:85:a2:bb:1a:a4:5f:5e:59:1d:a9:6b:35:21:97:
3c:45:92:59:cb:fd:41:44:ec:7e:50:f0:04:63:25:67:b8:d0:
75:af:a7:33:be:b6:e2:ea:a8:ee:b8:1d:66:97:3a:00:1b:d2:
25:b2:38:fb:98:60:96:1d:b9:34:86:48:1d:f8:25:e7:ba:60:
43:ae:a7:a1:b2:c4:e0:51:bb:34:7e:6b:25:55:b5:0d:2f:65:
9b:e0:10:4b:b5:4b:5f:52:5d:f7:27:87:b7:5c:0d:04:60:e7:
df:55:e9:ba:d0:b3:00:cb:97:c8:3d:db:71:b2:54:28:60:ad:
27:06:a5:6e:bc:74:c7:ca:c1:98:6a:72:88:ec:f9:c4:00:43:
68:3a:bc:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYz1a6I9A3TCrfZJkBc/2juZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTEwMjIwODQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjcyYWIyMTNkOWMzMmY4MmVjYzgxYTBkMWFjYWVhZjcyN2Y0YTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYKrQQkMAcCa+6k9PZEiNaMNt7xP
jxzyaLUY5pgtfOankqnK4OUcJlD74MQoNnrZeNVS82f22toFv9r9DeXEZgVgDfLE
Vr/waxMjeSSUGcxQCpSrEXBQEuZg4o/HlJdPfKMNievgjEDYQh/gb4yrbaItN6fZ
jJf9NcHFaXI6ywQPArndMUsInCEeepzAkEW2qBkIhjIot1cTMC0Utvm7Jgkrpjk0
8gkEcyRfZJRxBI3U7iLxn+85sDORm8Wh4z3rnI7mWOwjStmSiIyqNdNQEtmYk1+f
6iGVQRHQb+4xbL01ndvI4ffx7T7ukMKwBn6X8YohkCh4PPAtiV+2gC39RwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGZyqyE9nDL4LsyBoNGsrq9yf0pOMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvWm5LcklUMmNNdmd1eklHZzBheXVyM0pfU2s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVMeAwQA
uZYBMA0GCSqGSIb3DQEBCwUAA4IBAQARl/kjGIjOikIjLJ+k+XgkAwF6eBhw/WUP
6qlsKHVldXLUdnQyLAPnr9pu/bMcJBI6N6KtMTk83SzCWqOO6NbuDkYqN+V3KD3q
riGgDpXp1V1eAQNL2Or/LLSz9hVHmGEt0ur/tImF1c2SB2U+zt/lhaK7GqRfXlkd
qWs1IZc8RZJZy/1BROx+UPAEYyVnuNB1r6czvrbi6qjuuB1mlzoAG9Ilsjj7mGCW
Hbk0hkgd+CXnumBDrqehssTgUbs0fmslVbUNL2Wb4BBLtUtfUl33J4e3XA0EYOff
Vem60LMAy5fIPdtxslQoYK0nBqVuvHTHysGYanKI7PnEAENoOrzl
-----END CERTIFICATE-----
Generated at Thu May 2 13:14:16 2024 by rpki-client on console-fra.rpki-client.org