Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/zJ8Dd8LN1iK95S-B4UFLyKnUYKM.roa
File: zJ8Dd8LN1iK95S-B4UFLyKnUYKM.roa (raw, json)
Hash identifier: Q3VNujEYEPh4DDkEJDzwVsX+/AUougIqO0bqqs14X+k=
Subject key identifier: CC:9F:03:77:C2:CD:D6:22:BD:E5:2F:81:E1:41:4B:C8:A9:D4:60:A3
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 018CC64B461CF7701F595C9E8CB33E9ADBFB
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/zJ8Dd8LN1iK95S-B4UFLyKnUYKM.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212186
IP address blocks: 194.169.190.0/24 maxlen: 24
194.169.196.0/24 maxlen: 24
194.169.193.0/24 maxlen: 24
194.169.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:46:1c:f7:70:1f:59:5c:9e:8c:b3:3e:9a:db:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc9f0377c2cdd622bde52f81e1414bc8a9d460a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:56:94:7f:ee:bd:21:2b:49:16:19:c7:c9:
d5:83:82:5d:27:78:4d:9b:17:db:ff:9d:dc:3c:2c:
03:60:5e:6e:1f:07:0b:1c:54:6b:34:09:42:d7:00:
60:7f:05:22:58:5c:3a:0a:c9:1d:b2:71:69:c1:b6:
c8:1e:25:d4:32:a5:6a:b0:1c:dd:d5:32:c2:5f:91:
cc:e3:db:6a:3b:87:9d:80:b8:3e:f5:61:f3:2c:33:
02:7f:1c:b2:a4:99:07:19:3e:05:c9:e6:4a:b7:09:
91:6a:45:13:4e:85:eb:f5:2d:fb:3a:78:87:aa:fa:
c7:cc:36:95:9d:1c:1e:0b:bb:45:79:b1:ec:c9:b7:
7c:3d:ad:59:df:d0:24:19:4d:81:32:81:bf:b4:f9:
cc:76:f8:c6:3d:97:f6:ad:60:18:74:1f:a5:29:b9:
59:f8:7b:12:79:87:e7:29:87:3a:de:9d:44:7f:c7:
71:63:ad:6f:bc:82:19:13:4c:26:a6:a5:46:b8:bf:
46:61:25:1f:9f:27:27:ae:db:27:d5:a3:9b:45:fa:
05:ba:44:cc:d2:63:4b:27:a8:db:8b:c2:c6:e0:88:
f9:32:5d:38:4d:b4:f3:3a:26:83:55:40:79:fb:1c:
ef:b3:2a:40:7c:21:b4:1c:6c:27:6c:6a:55:06:af:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9F:03:77:C2:CD:D6:22:BD:E5:2F:81:E1:41:4B:C8:A9:D4:60:A3
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/zJ8Dd8LN1iK95S-B4UFLyKnUYKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.190.0/24
194.169.193.0/24
194.169.196.0/24
194.169.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d9:42:9c:9d:49:8e:fa:f0:6c:a3:09:43:24:ed:a7:9c:2d:
9d:20:a8:49:e2:c0:73:00:86:b0:5f:66:54:ce:74:1f:b5:6b:
9e:7e:4b:88:eb:c4:0a:a2:0a:61:fb:5c:28:18:9d:b7:52:28:
07:b3:fb:7b:2f:51:81:4c:5e:e5:93:17:35:f7:5b:dc:a4:a1:
94:5b:64:dd:e1:b9:bb:19:f6:2f:95:3a:95:d6:92:f3:5e:41:
ca:91:b7:d3:0a:dc:aa:2b:1b:d8:9d:64:b4:8a:53:b9:d7:7a:
15:21:ae:ad:10:cf:a5:08:25:37:32:0f:29:f8:c1:8c:c1:73:
96:1f:45:66:d0:a4:cd:13:cc:44:98:4e:37:fe:98:ae:8a:f6:
7e:53:0b:4a:4e:fa:56:49:eb:82:a6:fc:10:d1:2c:59:17:44:
ce:a7:34:29:a9:bb:ec:9d:95:96:d5:c3:64:30:ae:fa:d6:33:
7c:8a:2f:98:65:10:65:e0:7d:66:d9:ef:92:03:3f:ae:af:d8:
9c:98:89:d2:60:6e:28:fb:34:65:a9:3c:33:b5:eb:d2:09:02:
48:f6:6a:e2:1e:73:3d:cd:e0:75:85:5e:56:ad:c6:93:d2:a7:
7b:1a:c0:5c:0b:35:c6:c4:50:15:cf:7a:e1:0f:46:5f:93:13:
37:2b:b6:81
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzGS0Yc93AfWVyejLM+mtv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjQwMTAxMTgzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzlmMDM3N2MyY2RkNjIyYmRlNTJmODFlMTQxNGJjOGE5ZDQ2MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaVWlH/uvSErSRYZx8nVg4JdJ3hN
mxfb/53cPCwDYF5uHwcLHFRrNAlC1wBgfwUiWFw6CskdsnFpwbbIHiXUMqVqsBzd
1TLCX5HM49tqO4edgLg+9WHzLDMCfxyypJkHGT4FyeZKtwmRakUTToXr9S37OniH
qvrHzDaVnRweC7tFebHsybd8Pa1Z39AkGU2BMoG/tPnMdvjGPZf2rWAYdB+lKblZ
+HsSeYfnKYc63p1Ef8dxY61vvIIZE0wmpqVGuL9GYSUfnycnrtsn1aObRfoFukTM
0mNLJ6jbi8LG4Ij5Ml04TbTzOiaDVUB5+xzvsypAfCG0HGwnbGpVBq+y3QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMyfA3fCzdYiveUvgeFBS8ip1GCjMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEveko4RGQ4TE4xaUs5NVMtQjRVRkx5S25VWUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwqm+AwQA
wqnBAwQAwqnEAwQAwqnVMA0GCSqGSIb3DQEBCwUAA4IBAQA92UKcnUmO+vBsowlD
JO2nnC2dIKhJ4sBzAIawX2ZUznQftWuefkuI68QKogph+1woGJ23UigHs/t7L1GB
TF7lkxc191vcpKGUW2Td4bm7GfYvlTqV1pLzXkHKkbfTCtyqKxvYnWS0ilO513oV
Ia6tEM+lCCU3Mg8p+MGMwXOWH0Vm0KTNE8xEmE43/piuivZ+UwtKTvpWSeuCpvwQ
0SxZF0TOpzQpqbvsnZWW1cNkMK761jN8ii+YZRBl4H1m2e+SAz+ur9icmInSYG4o
+zRlqTwztevSCQJI9mriHnM9zeB1hV5WrcaT0qd7GsBcCzXGxFAVz3rhD0ZfkxM3
K7aB
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:08:26 2024 by rpki-client on console-fra.rpki-client.org