Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/zUZFJRV34pWHa1fr94IxRW769hI.roa
File: zUZFJRV34pWHa1fr94IxRW769hI.roa (raw, json)
Hash identifier: VE2QLyx4iMNkYO7PZQxM0S1bsRUDIUPBDBIHjJOpcV8=
Subject key identifier: CD:46:45:25:15:77:E2:95:87:6B:57:EB:F7:82:31:45:6E:FA:F6:12
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018CC9BCBF02B00666862E1F8B230E4EA7AD
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/zUZFJRV34pWHa1fr94IxRW769hI.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61102
IP address blocks: 185.104.195.0/24 maxlen: 24
2a01:8640:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bf:02:b0:06:66:86:2e:1f:8b:23:0e:4e:a7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd4645251577e295876b57ebf78231456efaf612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:06:ec:e6:77:62:4b:2c:97:89:3c:a3:f9:
9d:cc:c1:b8:ab:69:b3:21:cd:eb:10:e8:80:65:8e:
3d:f2:7f:b1:c6:68:c5:83:6c:a7:78:02:62:41:f2:
30:6f:02:aa:e7:8b:d5:d9:08:cc:60:94:66:ef:b6:
98:10:4f:46:82:c6:3a:d4:01:86:4b:43:64:7c:af:
81:b5:17:da:72:26:c7:42:58:d8:a6:19:9f:7a:e7:
86:c9:a4:a8:c3:2a:28:7d:95:f1:7c:1c:75:7b:af:
84:0d:cd:1a:57:0b:cb:f1:2c:87:9f:0e:57:5f:93:
9c:d2:7e:32:e0:65:5c:1c:0f:fc:53:54:e3:7a:37:
a4:b7:ec:f8:ed:2f:cc:61:d5:12:36:c7:8f:e3:e2:
0d:93:a9:70:e4:96:5f:ce:e0:3e:a0:71:d9:c4:43:
dd:c4:65:3f:5d:72:41:8b:2e:10:5d:83:02:86:dc:
ad:0f:bf:62:d8:9d:ca:3a:73:60:7c:f0:f8:ee:39:
b1:9b:46:3c:92:6c:32:a4:3b:d0:cc:6a:0c:f4:52:
14:bd:b3:95:88:ba:e0:46:94:66:e4:85:a7:fd:1a:
e5:d6:d0:b1:39:9c:51:88:5e:64:68:c8:f4:0f:57:
87:e1:e1:42:ac:c4:85:58:90:3b:2e:22:d6:61:94:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:46:45:25:15:77:E2:95:87:6B:57:EB:F7:82:31:45:6E:FA:F6:12
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/zUZFJRV34pWHa1fr94IxRW769hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.195.0/24
IPv6:
2a01:8640:c::/48
Signature Algorithm: sha256WithRSAEncryption
64:84:05:f9:60:71:92:18:b4:76:01:a8:f4:7b:59:92:a4:7c:
97:d4:f0:04:63:e4:ba:ac:a1:7d:92:ac:19:ea:1e:56:74:44:
6c:f8:17:1b:cd:ec:99:90:c5:18:8b:ac:b6:7c:45:8b:d6:ec:
7b:de:73:70:a2:aa:cb:35:40:30:a0:4b:b3:d5:8f:63:ea:4d:
7b:83:87:52:7d:bd:92:66:13:7e:11:29:8f:c9:ca:5f:95:f3:
c8:65:75:c8:48:ea:b8:96:24:33:03:4b:23:68:f7:93:9e:a1:
1e:13:f5:75:3c:b5:42:b5:04:4c:6b:61:55:34:4c:85:80:20:
a2:08:ad:86:b3:4c:c8:32:eb:1c:2c:9c:f5:45:e0:69:df:06:
99:21:74:a9:d1:2d:25:df:a5:29:f0:10:47:f3:2d:1e:62:56:
fe:cf:dc:1f:19:0c:a3:bf:2d:d1:c8:eb:99:af:0e:7e:b2:5b:
29:d9:fc:db:f9:23:a6:bd:70:71:57:b7:3f:c7:6b:38:71:47:
b6:57:5b:fa:8a:95:85:3c:57:84:f7:46:aa:c3:e7:34:90:87:
b4:48:4b:af:83:e6:d5:21:8a:2b:27:94:de:6e:74:5b:81:af:
f2:86:ab:a8:19:ed:d4:a1:d3:26:bc:d6:35:e6:57:fd:0d:5c:
24:f7:d6:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzJvL8CsAZmhi4fiyMOTqetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjQwMTAyMTAzMzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDQ2NDUyNTE1NzdlMjk1ODc2YjU3ZWJmNzgyMzE0NTZlZmFmNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzMG7OZ3Ykssl4k8o/mdzMG4q2mz
Ic3rEOiAZY498n+xxmjFg2yneAJiQfIwbwKq54vV2QjMYJRm77aYEE9GgsY61AGG
S0NkfK+BtRfacibHQljYphmfeueGyaSowyoofZXxfBx1e6+EDc0aVwvL8SyHnw5X
X5Oc0n4y4GVcHA/8U1Tjejekt+z47S/MYdUSNseP4+INk6lw5JZfzuA+oHHZxEPd
xGU/XXJBiy4QXYMChtytD79i2J3KOnNgfPD47jmxm0Y8kmwypDvQzGoM9FIUvbOV
iLrgRpRm5IWn/Rrl1tCxOZxRiF5kaMj0D1eH4eFCrMSFWJA7LiLWYZTvCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM1GRSUVd+KVh2tX6/eCMUVu+vYSMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvelVaRkpSVjM0cFdIYTFmcjk0SXhSVzc2OWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWjDMA8E
AgACMAkDBwAqAYZAAAwwDQYJKoZIhvcNAQELBQADggEBAGSEBflgcZIYtHYBqPR7
WZKkfJfU8ARj5LqsoX2SrBnqHlZ0RGz4FxvN7JmQxRiLrLZ8RYvW7Hvec3Ciqss1
QDCgS7PVj2PqTXuDh1J9vZJmE34RKY/Jyl+V88hldchI6riWJDMDSyNo95OeoR4T
9XU8tUK1BExrYVU0TIWAIKIIrYazTMgy6xwsnPVF4GnfBpkhdKnRLSXfpSnwEEfz
LR5iVv7P3B8ZDKO/LdHI65mvDn6yWynZ/Nv5I6a9cHFXtz/HazhxR7ZXW/qKlYU8
V4T3RqrD5zSQh7RIS6+D5tUhiisnlN5udFuBr/KGq6gZ7dSh0ya81jXmV/0NXCT3
1qA=
-----END CERTIFICATE-----
Generated at Wed Jun 26 13:48:13 2024 by rpki-client on console-ams.rpki-client.org