Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/ZS6dKKwZu5-EtCZ9_hfgHywFr6E.roa
File: ZS6dKKwZu5-EtCZ9_hfgHywFr6E.roa (raw, json)
Hash identifier: OwYgbbsTPT4S0QG6xIbxQYfwQYgmTCG3CpUFJg/mTEs=
Subject key identifier: 65:2E:9D:28:AC:19:BB:9F:84:B4:26:7D:FE:17:E0:1F:2C:05:AF:A1
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 018CC8712FBE29D4109B11A1E42A06A25912
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/ZS6dKKwZu5-EtCZ9_hfgHywFr6E.roa
Signing time: Tue 02 Jan 2024 04:31:50 +0000
ROA not before: Tue 02 Jan 2024 04:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20926
IP address blocks: 185.47.240.0/22 maxlen: 24
79.98.16.0/21 maxlen: 24
84.239.64.0/18 maxlen: 24
80.74.64.0/20 maxlen: 24
185.10.176.0/22 maxlen: 24
141.101.56.0/22 maxlen: 24
2a00:6901::/32 maxlen: 48
2a00:6900::/44 maxlen: 48
2a00:6900:f0::/48 maxlen: 48
2a03:5d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:2f:be:29:d4:10:9b:11:a1:e4:2a:06:a2:59:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 2 04:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=652e9d28ac19bb9f84b4267dfe17e01f2c05afa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e7:84:85:24:2f:24:9e:85:9a:b2:64:27:c2:
9c:fa:03:a3:c6:a8:62:ed:c1:50:95:f2:04:9b:40:
38:06:8e:38:20:80:34:e4:bc:04:b1:8f:2f:5f:44:
db:27:f7:9e:a0:36:09:b7:59:c7:c4:dd:45:96:e9:
75:74:d9:9e:da:9b:6f:1e:f1:ee:2d:79:39:53:59:
5d:b3:46:78:e0:4b:fa:5b:ed:92:ed:33:d4:fc:34:
75:c0:b5:80:eb:b4:5e:04:ab:b6:b6:bc:1d:7d:e8:
13:93:37:48:dc:73:61:2b:0f:c6:bb:12:1e:ca:af:
a5:0d:72:09:01:7b:30:fe:62:98:3c:3c:e0:23:29:
17:5b:ab:71:ff:d9:77:42:86:58:1a:9a:5c:df:20:
fa:10:f0:a6:08:f1:2c:09:5a:ba:81:d7:19:60:5d:
92:af:a2:90:5b:fd:24:fd:46:a1:a5:db:91:68:25:
cb:f1:6c:b5:b4:f0:76:be:7b:a0:7a:32:28:c4:83:
04:3b:5a:bd:35:f1:de:f1:d0:98:38:1c:da:df:cd:
1e:fd:d1:67:9b:64:ac:f9:6f:de:05:50:aa:06:6e:
e2:65:57:97:73:bb:dd:ee:8c:19:1c:8b:0e:56:17:
9f:a1:77:f4:2f:cf:e3:6d:03:a2:20:8e:46:6d:fa:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:9D:28:AC:19:BB:9F:84:B4:26:7D:FE:17:E0:1F:2C:05:AF:A1
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/ZS6dKKwZu5-EtCZ9_hfgHywFr6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.16.0/21
80.74.64.0/20
84.239.64.0/18
141.101.56.0/22
185.10.176.0/22
185.47.240.0/22
IPv6:
2a00:6900::/44
2a00:6900:f0::/48
2a00:6901::/32
2a03:5d40::/32
Signature Algorithm: sha256WithRSAEncryption
0e:e1:6f:41:10:8c:9e:23:6e:5e:ad:cc:3e:71:be:30:1e:2f:
9e:42:76:05:97:2f:38:86:8c:35:39:2e:2f:32:95:67:2d:d8:
3c:b3:16:d3:86:50:50:d1:be:0d:6a:50:b9:ab:ac:75:80:0a:
26:47:fd:c9:9c:8d:bb:19:88:71:cd:4c:d0:3d:dd:e7:c7:16:
02:03:2b:47:26:7a:a1:39:be:a4:ac:33:8e:4e:47:cb:d1:21:
ab:f3:36:cc:73:3e:1a:93:8b:f4:51:5a:7b:87:1d:03:ec:9c:
58:41:4b:d2:f0:3d:6e:17:db:66:74:75:3e:cf:23:7b:53:0e:
71:02:70:65:24:33:5a:e7:85:2c:81:71:ee:65:ae:41:01:33:
c1:39:76:d5:14:14:88:5b:de:ab:09:00:62:e5:b7:b1:ca:f3:
a6:4e:99:8d:12:eb:79:48:b3:49:2a:0d:e7:91:00:c7:48:87:
00:68:0a:d0:14:b2:92:fe:3a:77:4c:46:da:25:43:69:19:5d:
9f:6f:7a:d1:49:17:7a:9d:f6:25:5a:b8:48:7a:77:51:06:0f:
ea:e2:d7:64:78:eb:b7:d0:11:5e:7b:c7:1b:f0:6d:a7:7e:0f:
31:f6:1c:ab:44:3f:f7:c1:91:04:f9:5a:88:f8:2b:dd:e0:43:
c6:df:42:22
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYzIcS++KdQQmxGh5CoGolkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx
MjdiOGMwHhcNMjQwMTAyMDQzMTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTJlOWQyOGFjMTliYjlmODRiNDI2N2RmZTE3ZTAxZjJjMDVhZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+eEhSQvJJ6FmrJkJ8Kc+gOjxqhi
7cFQlfIEm0A4Bo44IIA05LwEsY8vX0TbJ/eeoDYJt1nHxN1Flul1dNme2ptvHvHu
LXk5U1lds0Z44Ev6W+2S7TPU/DR1wLWA67ReBKu2trwdfegTkzdI3HNhKw/GuxIe
yq+lDXIJAXsw/mKYPDzgIykXW6tx/9l3QoZYGppc3yD6EPCmCPEsCVq6gdcZYF2S
r6KQW/0k/UahpduRaCXL8Wy1tPB2vnugejIoxIMEO1q9NfHe8dCYOBza380e/dFn
m2Ss+W/eBVCqBm7iZVeXc7vd7owZHIsOVhefoXf0L8/jbQOiII5GbfqbIQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFGUunSisGbufhLQmff4X4B8sBa+hMB8GA1UdIwQY
MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt
MzZlOWE3OWJkOTUwLzEvWlM2ZEtLd1p1NS1FdENaOV9oZmdIeXdGcjZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw
LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDAqBAIAATAkAwQDT2IQAwQE
UEpAAwQGVO9AAwQCjWU4AwQCuQqwAwQCuS/wMCYEAgACMCADBwQqAGkAAAADBwAq
AGkAAPADBQAqAGkBAwUAKgNdQDANBgkqhkiG9w0BAQsFAAOCAQEADuFvQRCMniNu
Xq3MPnG+MB4vnkJ2BZcvOIaMNTkuLzKVZy3YPLMW04ZQUNG+DWpQuausdYAKJkf9
yZyNuxmIcc1M0D3d58cWAgMrRyZ6oTm+pKwzjk5Hy9Ehq/M2zHM+GpOL9FFae4cd
A+ycWEFL0vA9bhfbZnR1Ps8je1MOcQJwZSQzWueFLIFx7mWuQQEzwTl21RQUiFve
qwkAYuW3scrzpk6ZjRLreUizSSoN55EAx0iHAGgK0BSykv46d0xG2iVDaRldn296
0UkXep32JVq4SHp3UQYP6uLXZHjrt9ARXnvHG/Btp34PMfYcq0Q/98GRBPlaiPgr
3eBDxt9CIg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 21:02:51 2024 by rpki-client on console-ams.rpki-client.org