Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_Zov4OVWR2RJofvKeVGMZ902y1c.roa
File: _Zov4OVWR2RJofvKeVGMZ902y1c.roa (raw, json)
Hash identifier: cijd3KM7N3gKf9LKNg3wSBcEDOn12qOrD60SSmK4SF4=
Subject key identifier: FD:9A:2F:E0:E5:56:47:64:49:A1:FB:CA:79:51:8C:67:DD:36:CB:57
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A7D1A0FEB2D8ACA4117D09559C4F2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_Zov4OVWR2RJofvKeVGMZ902y1c.roa
Signing time: Tue 02 Jan 2024 12:33:51 +0000
ROA not before: Tue 02 Jan 2024 12:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 212.192.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7d:1a:0f:eb:2d:8a:ca:41:17:d0:95:59:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd9a2fe0e556476449a1fbca79518c67dd36cb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:25:34:2e:e1:aa:ba:5e:08:67:93:99:c1:
b9:7f:6c:bd:ec:b8:af:96:b1:2b:5e:17:b8:ca:db:
2d:05:5f:35:a5:c5:b2:42:ea:d6:9f:3f:e4:36:fd:
b0:60:47:4a:74:8c:e2:96:52:92:e9:65:25:3d:b0:
0e:ea:b3:af:39:e0:df:c3:42:8c:e9:e1:93:7e:e6:
4a:d1:b8:a9:c8:85:d1:42:4a:a5:e1:0f:69:30:b9:
38:79:91:29:d1:05:15:a4:bf:05:ee:41:02:04:d9:
fc:12:01:53:ab:07:1d:60:18:2d:86:32:b5:88:ab:
99:ed:1a:a8:f6:29:41:81:e0:98:41:75:aa:fb:2f:
c3:b4:c4:9c:88:51:00:19:62:5d:8e:86:c9:02:53:
a8:b0:20:42:af:bc:3d:9e:37:d3:77:74:62:64:bf:
dd:9f:cd:ac:f5:77:82:a9:bf:61:f2:8b:6b:2f:3c:
38:26:80:bf:ce:c2:22:6b:67:a9:ee:03:3d:72:7c:
4d:2e:6a:62:ab:85:05:94:41:2f:65:e0:62:03:e3:
c4:5d:03:39:18:8c:60:84:85:f7:49:06:12:7f:1c:
e7:d8:b9:9a:70:39:28:5a:51:d7:c2:1f:93:24:d0:
90:8c:65:29:55:06:23:3a:d4:ab:72:27:2b:e2:08:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:2F:E0:E5:56:47:64:49:A1:FB:CA:79:51:8C:67:DD:36:CB:57
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_Zov4OVWR2RJofvKeVGMZ902y1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:08:33:8c:d6:37:80:07:75:5e:bd:c2:5a:d4:94:2f:1c:de:
ef:4a:cc:a5:ff:93:f6:d8:ce:f1:54:16:98:a2:e1:76:27:70:
cc:1c:4b:13:07:79:ae:36:9f:50:ad:c4:6c:ab:01:3b:32:92:
c7:c3:ea:f6:c4:25:63:bd:25:44:45:d7:10:d1:c4:49:f6:bb:
8d:dc:ac:8f:9b:b4:09:33:c7:68:92:13:88:f6:f3:81:68:79:
a4:73:2d:38:05:df:38:30:f2:62:57:28:75:70:f1:02:c9:c3:
b2:3c:9d:8f:fd:be:6f:96:fc:7f:1d:2d:0e:7c:01:da:bd:18:
23:c5:61:7c:fb:b1:35:d1:90:2d:03:58:cc:3b:0e:94:67:71:
86:10:c3:3f:db:86:9c:2e:3f:87:ef:22:b8:ec:cd:11:52:3a:
e1:a6:09:d9:bc:74:6d:a8:72:82:ca:b5:53:44:73:98:47:0b:
a9:e8:61:9c:a1:ab:7d:dc:e0:85:2f:5e:8c:c6:b2:18:29:e2:
18:f8:72:fb:34:d2:e4:11:35:d6:e6:d7:1e:e1:a2:3e:51:b8:
ad:98:9b:22:97:3b:88:f1:0f:8f:31:32:a6:01:8c:43:1d:30:
a8:5e:0c:64:a4:33:59:6f:16:77:5e:39:04:4a:bc:4f:9b:8a:
5e:25:a1:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKn0aD+stispBF9CVWcTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDlhMmZlMGU1NTY0NzY0NDlhMWZiY2E3OTUxOGM2N2RkMzZjYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiAlNC7hqrpeCGeTmcG5f2y97Liv
lrErXhe4ytstBV81pcWyQurWnz/kNv2wYEdKdIzillKS6WUlPbAO6rOvOeDfw0KM
6eGTfuZK0bipyIXRQkql4Q9pMLk4eZEp0QUVpL8F7kECBNn8EgFTqwcdYBgthjK1
iKuZ7Rqo9ilBgeCYQXWq+y/DtMSciFEAGWJdjobJAlOosCBCr7w9njfTd3RiZL/d
n82s9XeCqb9h8otrLzw4JoC/zsIia2ep7gM9cnxNLmpiq4UFlEEvZeBiA+PEXQM5
GIxghIX3SQYSfxzn2LmacDkoWlHXwh+TJNCQjGUpVQYjOtSrcicr4gieOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP2aL+DlVkdkSaH7ynlRjGfdNstXMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvX1pvdjRPVldSMlJKb2Z2S2VWR01aOTAyeTFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MD7MA0G
CSqGSIb3DQEBCwUAA4IBAQBKCDOM1jeAB3VevcJa1JQvHN7vSsyl/5P22M7xVBaY
ouF2J3DMHEsTB3muNp9QrcRsqwE7MpLHw+r2xCVjvSVERdcQ0cRJ9ruN3KyPm7QJ
M8dokhOI9vOBaHmkcy04Bd84MPJiVyh1cPECycOyPJ2P/b5vlvx/HS0OfAHavRgj
xWF8+7E10ZAtA1jMOw6UZ3GGEMM/24acLj+H7yK47M0RUjrhpgnZvHRtqHKCyrVT
RHOYRwup6GGcoat93OCFL16MxrIYKeIY+HL7NNLkETXW5tce4aI+UbitmJsilzuI
8Q+PMTKmAYxDHTCoXgxkpDNZbxZ3XjkESrxPm4peJaH9
-----END CERTIFICATE-----
Generated at Sun May 5 18:36:16 2024 by rpki-client on console-fra.rpki-client.org