Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZG9oP5csBKwjoqegD-r82uAGI-s.roa
File: ZG9oP5csBKwjoqegD-r82uAGI-s.roa (raw, json)
Hash identifier: yH6n07sd6pWCAQA/dU8wZ9ROBd6jUKPVylpkpiXaGKg=
Subject key identifier: 64:6F:68:3F:97:2C:04:AC:23:A2:A7:A0:0F:EA:FC:DA:E0:06:23:EB
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018CC86F2D0D6BCB85290067AC8D306455F1
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZG9oP5csBKwjoqegD-r82uAGI-s.roa
Signing time: Tue 02 Jan 2024 04:29:38 +0000
ROA not before: Tue 02 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 194.143.211.0/24 maxlen: 24
194.143.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2d:0d:6b:cb:85:29:00:67:ac:8d:30:64:55:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=646f683f972c04ac23a2a7a00feafcdae00623eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:68:16:ed:0c:b0:17:c0:6d:6b:71:c7:8a:
d7:ed:8b:b1:94:c1:c7:8b:2a:dc:fa:fe:4a:bf:6c:
a5:99:56:9a:c4:ae:17:fb:31:b7:43:06:39:17:23:
fb:b7:21:b0:77:eb:16:47:76:3d:67:8a:d8:6a:0f:
32:51:97:51:df:bc:ae:9a:06:fc:dc:0d:b4:8e:57:
b1:c5:cb:1d:8a:0b:b6:20:02:ee:88:9c:35:18:6b:
3e:ae:8d:00:26:43:3a:7a:1d:e4:1b:6e:d9:23:ba:
db:a7:d1:44:73:58:0c:81:a0:b2:67:5b:e6:3c:02:
a8:1a:03:00:ca:bc:df:a6:6e:0a:a7:a5:c2:6e:2b:
ea:dc:df:6b:e3:38:52:82:d0:23:06:11:f9:35:54:
fa:33:42:08:82:95:b2:d1:53:57:be:20:b1:4f:6c:
13:13:c5:c1:68:4c:c2:da:24:4b:c0:45:a4:5f:0c:
6c:70:06:bb:cd:9d:cf:e2:e0:18:92:29:58:af:14:
9c:62:2d:be:d7:f1:7e:09:b4:27:31:82:69:f2:47:
80:43:99:2c:09:c6:e8:8d:bb:39:45:34:a6:b6:c7:
cd:ae:04:a4:96:8e:55:26:69:bc:3a:31:4f:b7:89:
52:00:37:2c:58:1f:b8:b5:1d:c8:5d:59:13:11:0b:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6F:68:3F:97:2C:04:AC:23:A2:A7:A0:0F:EA:FC:DA:E0:06:23:EB
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZG9oP5csBKwjoqegD-r82uAGI-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.210.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:a4:81:51:0e:79:e8:41:92:69:dc:c3:58:3a:71:10:3c:32:
7d:cc:24:fb:73:d7:0a:4f:e1:34:80:ad:1d:71:60:ef:c9:ac:
fd:b6:be:17:14:f0:92:18:84:dc:d4:56:35:8d:fc:df:3e:b1:
0e:1e:ed:1e:1f:07:a5:67:f8:77:69:b3:eb:42:cd:92:59:06:
54:1b:d7:a4:6d:36:32:fc:af:1d:d2:b4:62:d6:3e:67:70:ca:
25:53:83:a4:db:d5:f6:bd:19:b0:b2:50:07:ac:ff:ce:58:0a:
09:28:e3:ad:1d:f6:ee:3a:73:6e:4e:3b:0e:bb:1b:77:9d:10:
8f:cd:7b:22:16:8c:94:fa:fc:44:0d:70:66:48:23:e1:16:40:
8c:ce:85:5b:cf:4f:a2:3d:0b:bc:11:86:09:06:0d:ab:e0:6c:
81:16:a9:e0:be:ad:cd:45:c3:d8:12:9f:25:51:a8:2c:44:c0:
32:33:36:a9:d3:f3:9c:0f:bd:48:5e:eb:d8:26:38:29:f8:89:
81:18:1f:df:34:57:52:7d:e2:13:f1:c6:80:84:62:ab:f5:0d:
28:d5:04:ca:89:02:51:13:19:39:86:24:f0:05:96:64:55:99:
dc:f5:2d:34:1f:f7:b0:16:e2:35:31:9c:85:49:03:56:c9:30:
fe:95:c5:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIby0Na8uFKQBnrI0wZFXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjQwMTAyMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDZmNjgzZjk3MmMwNGFjMjNhMmE3YTAwZmVhZmNkYWUwMDYyM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcNoFu0MsBfAbWtxx4rX7YuxlMHH
iyrc+v5Kv2ylmVaaxK4X+zG3QwY5FyP7tyGwd+sWR3Y9Z4rYag8yUZdR37yumgb8
3A20jlexxcsdigu2IALuiJw1GGs+ro0AJkM6eh3kG27ZI7rbp9FEc1gMgaCyZ1vm
PAKoGgMAyrzfpm4Kp6XCbivq3N9r4zhSgtAjBhH5NVT6M0IIgpWy0VNXviCxT2wT
E8XBaEzC2iRLwEWkXwxscAa7zZ3P4uAYkilYrxScYi2+1/F+CbQnMYJp8keAQ5ks
Ccbojbs5RTSmtsfNrgSklo5VJmm8OjFPt4lSADcsWB+4tR3IXVkTEQt6HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRvaD+XLASsI6KnoA/q/NrgBiPrMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvWkc5b1A1Y3NCS3dqb3FlZ0QtcjgydUFHSS1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwo/SMA0G
CSqGSIb3DQEBCwUAA4IBAQBupIFRDnnoQZJp3MNYOnEQPDJ9zCT7c9cKT+E0gK0d
cWDvyaz9tr4XFPCSGITc1FY1jfzfPrEOHu0eHwelZ/h3abPrQs2SWQZUG9ekbTYy
/K8d0rRi1j5ncMolU4Ok29X2vRmwslAHrP/OWAoJKOOtHfbuOnNuTjsOuxt3nRCP
zXsiFoyU+vxEDXBmSCPhFkCMzoVbz0+iPQu8EYYJBg2r4GyBFqngvq3NRcPYEp8l
UagsRMAyMzap0/OcD71IXuvYJjgp+ImBGB/fNFdSfeIT8caAhGKr9Q0o1QTKiQJR
Exk5hiTwBZZkVZnc9S00H/ewFuI1MZyFSQNWyTD+lcWB
-----END CERTIFICATE-----
Generated at Sat May 4 09:57:58 2024 by rpki-client on console-ams.rpki-client.org