Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/ZTlGc_8YpPcmvwCJzSww-IaSn7Y.roa
File: ZTlGc_8YpPcmvwCJzSww-IaSn7Y.roa (raw, json)
Hash identifier: xzl5G9nqCp+ywJUIEt9XmQIAgxL67eQHDgLkpZzj54o=
Subject key identifier: 65:39:46:73:FF:18:A4:F7:26:BF:00:89:CD:2C:30:F8:86:92:9F:B6
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 018CC500BB2BF5FAAC37B018DE32FEDA06E3
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/ZTlGc_8YpPcmvwCJzSww-IaSn7Y.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60513
IP address blocks: 109.236.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bb:2b:f5:fa:ac:37:b0:18:de:32:fe:da:06:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65394673ff18a4f726bf0089cd2c30f886929fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:99:f7:36:09:a8:0d:f8:f9:d9:31:c0:d8:
1b:6e:b3:3c:71:00:ec:93:cb:af:0a:56:1a:b2:4e:
48:94:b4:ea:3e:e9:1a:98:c6:8b:d5:2d:57:d3:37:
08:d0:4b:5a:4a:e7:10:e8:22:ac:07:db:df:e4:83:
6a:3c:31:fe:04:be:51:dd:8c:99:f2:72:d2:db:d9:
84:4d:61:ab:5b:8a:e9:44:36:36:f6:ab:b3:e5:3d:
c0:6f:e3:66:22:59:0c:de:d0:26:4f:f4:d2:2a:fe:
27:2e:80:46:8f:23:52:7f:5a:c9:da:98:c6:41:e4:
c7:35:07:a1:52:6d:99:0a:0a:4e:eb:ac:3c:0a:f4:
3e:53:31:bc:20:89:78:e8:a4:01:78:a4:36:d5:5a:
9e:ad:73:52:bb:02:de:4c:25:2f:48:27:24:6c:09:
aa:57:ab:db:02:f9:1d:24:26:2b:1c:32:43:9b:f4:
84:69:b9:3b:a0:82:18:4f:90:0f:fb:0c:65:63:9c:
69:21:a8:75:d0:0d:c4:e5:5c:f0:b4:12:45:1d:66:
0b:7d:b3:e6:e1:88:bf:8e:0f:e1:27:08:c3:42:a3:
51:0e:b8:7e:0d:44:7d:cd:d7:b0:22:e9:21:36:8e:
da:fa:0a:e1:33:39:6b:e2:b1:b9:ed:74:f9:93:bd:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:46:73:FF:18:A4:F7:26:BF:00:89:CD:2C:30:F8:86:92:9F:B6
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/ZTlGc_8YpPcmvwCJzSww-IaSn7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b1:af:5d:bb:67:3b:97:02:b5:88:c4:d9:a3:f1:53:87:35:
1a:42:a2:a6:ad:f2:49:ae:8f:63:40:2e:24:e7:44:b1:ee:1d:
72:df:60:98:bb:f6:91:bf:a0:ce:cc:12:97:35:cc:a6:74:4a:
df:6a:c0:da:41:37:c5:48:9f:eb:9b:a6:eb:f8:2c:9a:dd:3f:
59:2c:47:c2:3b:5f:aa:f9:b3:2c:69:60:48:10:fd:3a:81:48:
b4:1f:1c:f1:f0:69:89:70:97:5b:b8:cd:26:f5:38:54:bc:63:
0b:bc:b3:84:f7:c3:45:16:9a:e1:ee:df:21:22:6e:0b:2d:43:
b8:c9:70:4b:e9:b0:08:27:4b:77:b4:1f:5d:23:33:26:c3:ad:
a0:78:54:ba:a2:53:5d:fa:58:dc:21:9e:5f:a2:4d:67:de:2e:
0a:6d:a2:ae:6f:38:62:ca:4d:c5:fb:b8:76:96:ba:9b:c1:cd:
f5:31:de:eb:8a:34:1f:0a:28:dc:81:a0:80:da:25:32:09:c1:
7f:01:b6:27:49:be:6c:57:e7:a2:7f:68:38:42:98:96:8e:d1:
b5:72:3e:c1:44:19:80:46:b2:8f:b5:12:78:c1:3c:8e:70:11:
e9:d8:fc:8b:d4:cb:17:5b:86:93:0d:20:e3:33:68:97:a7:6a:
5b:4e:34:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFALsr9fqsN7AY3jL+2gbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4
NzU3NDgwHhcNMjQwMTAxMTIzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTM5NDY3M2ZmMThhNGY3MjZiZjAwODljZDJjMzBmODg2OTI5ZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpaZ9zYJqA34+dkxwNgbbrM8cQDs
k8uvClYask5IlLTqPukamMaL1S1X0zcI0EtaSucQ6CKsB9vf5INqPDH+BL5R3YyZ
8nLS29mETWGrW4rpRDY29quz5T3Ab+NmIlkM3tAmT/TSKv4nLoBGjyNSf1rJ2pjG
QeTHNQehUm2ZCgpO66w8CvQ+UzG8IIl46KQBeKQ21VqerXNSuwLeTCUvSCckbAmq
V6vbAvkdJCYrHDJDm/SEabk7oIIYT5AP+wxlY5xpIah10A3E5VzwtBJFHWYLfbPm
4Yi/jg/hJwjDQqNRDrh+DUR9zdewIukhNo7a+grhMzlr4rG57XT5k72tiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGU5RnP/GKT3Jr8Aic0sMPiGkp+2MB8GA1UdIwQY
MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt
N2YyMzMzNjA0OTk3LzEvWlRsR2NfOFlwUGNtdndDSnpTd3ctSWFTbjdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3
LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbez9MA0G
CSqGSIb3DQEBCwUAA4IBAQBqsa9du2c7lwK1iMTZo/FThzUaQqKmrfJJro9jQC4k
50Sx7h1y32CYu/aRv6DOzBKXNcymdErfasDaQTfFSJ/rm6br+Cya3T9ZLEfCO1+q
+bMsaWBIEP06gUi0Hxzx8GmJcJdbuM0m9ThUvGMLvLOE98NFFprh7t8hIm4LLUO4
yXBL6bAIJ0t3tB9dIzMmw62geFS6olNd+ljcIZ5fok1n3i4KbaKubzhiyk3F+7h2
lrqbwc31Md7rijQfCijcgaCA2iUyCcF/AbYnSb5sV+eif2g4QpiWjtG1cj7BRBmA
RrKPtRJ4wTyOcBHp2PyL1MsXW4aTDSDjM2iXp2pbTjTU
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:28 2024 by rpki-client on console-ams.rpki-client.org