Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2tG8X5q47BBtDnyzaSQ6kSWXi4.roa
File: z2tG8X5q47BBtDnyzaSQ6kSWXi4.roa (raw, json)
Hash identifier: imSCuS1+S32uzRi66cffgVsQq3usrDNSG/cOFQWHHlA=
Subject key identifier: CF:6B:46:F1:7E:6A:E3:B0:41:B4:39:F2:CD:A4:90:EA:44:96:5E:2E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A7C29877114498E442A389CBD8BEB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2tG8X5q47BBtDnyzaSQ6kSWXi4.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60528
IP address blocks: 194.87.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7c:29:87:71:14:49:8e:44:2a:38:9c:bd:8b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf6b46f17e6ae3b041b439f2cda490ea44965e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:fc:91:8b:6f:04:b9:19:98:df:a8:78:cf:
d8:b2:50:fd:17:f0:0a:77:5a:ff:9a:42:8d:e1:78:
0e:d1:aa:26:77:a4:85:49:db:33:ab:e3:4d:c5:77:
ea:13:20:83:90:6f:a6:5a:b7:fc:1b:88:c3:5d:39:
42:7f:de:86:dd:39:28:dd:14:4f:bd:c0:6a:64:fe:
e3:ef:1b:16:d1:70:92:92:3c:62:cb:cf:b7:69:61:
f8:cc:e6:cf:05:fc:3b:af:8d:81:c0:8c:7d:61:a5:
e7:e5:2c:c9:e2:c5:41:e8:e4:03:cf:dc:08:d1:81:
df:5c:48:c6:78:1f:b1:98:04:bf:6c:94:4a:29:f6:
e8:00:20:72:a9:00:c2:bd:36:ab:cb:b0:86:b5:b5:
c1:75:c4:81:24:da:6e:e5:07:cd:89:57:4e:71:cd:
bc:dd:85:ec:de:a1:5d:b2:43:2d:c9:03:75:95:9a:
51:07:4f:0f:f5:19:c4:74:33:17:81:7f:4c:c7:79:
15:76:0c:ff:7d:bd:18:7b:57:1d:26:ad:07:dd:c0:
83:e5:27:11:0a:5f:ae:f2:81:57:f5:60:9b:0e:3c:
8b:b7:2f:07:ed:a1:ca:c5:b9:94:b2:fb:cb:5e:4a:
0f:10:b7:5e:d3:80:5c:16:47:ae:33:63:f6:89:bc:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6B:46:F1:7E:6A:E3:B0:41:B4:39:F2:CD:A4:90:EA:44:96:5E:2E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z2tG8X5q47BBtDnyzaSQ6kSWXi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2a:2e:01:e4:99:7e:27:1e:3e:09:5b:50:87:1d:72:7b:ac:
b6:af:41:a6:f8:8f:83:bf:ad:ee:f4:9b:bc:64:15:9c:af:bd:
d2:2f:42:25:98:10:a8:e4:90:8e:54:b2:17:95:36:c1:3f:89:
19:3c:3f:a7:d3:59:6a:20:6b:5c:50:6b:03:84:19:98:de:be:
f1:a4:48:df:b1:3e:11:ff:0a:85:48:d0:68:85:f7:8e:6d:8d:
8f:57:64:06:18:b5:0a:7e:38:3d:47:20:4e:1f:58:54:41:5c:
4c:3f:3c:2f:12:36:e6:8c:46:90:ca:0c:ce:88:56:52:74:38:
02:37:57:c2:a7:86:91:c9:c8:b6:83:e7:ac:b6:48:62:0f:40:
05:a5:7c:bb:f1:14:d1:d3:a9:2f:9c:3b:68:3f:61:75:c5:62:
1e:44:ba:cf:5e:44:64:79:90:d2:bf:78:b9:d5:72:56:af:11:
7b:76:3a:07:83:e3:d5:30:fd:9f:f8:fb:cd:df:93:7d:b8:2e:
e5:a1:88:4d:79:98:08:e0:fa:fb:94:6b:5b:8b:91:09:c9:ad:
47:64:a4:da:be:62:3c:6e:ca:83:f7:73:14:6b:c7:74:f1:6c:
75:67:17:36:f2:0e:34:85:f6:13:bf:54:42:ba:5b:61:18:0d:
92:c8:d9:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKnwph3EUSY5EKjicvYvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjZiNDZmMTdlNmFlM2IwNDFiNDM5ZjJjZGE0OTBlYTQ0OTY1ZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK78kYtvBLkZmN+oeM/YslD9F/AK
d1r/mkKN4XgO0aomd6SFSdszq+NNxXfqEyCDkG+mWrf8G4jDXTlCf96G3Tko3RRP
vcBqZP7j7xsW0XCSkjxiy8+3aWH4zObPBfw7r42BwIx9YaXn5SzJ4sVB6OQDz9wI
0YHfXEjGeB+xmAS/bJRKKfboACByqQDCvTary7CGtbXBdcSBJNpu5QfNiVdOcc28
3YXs3qFdskMtyQN1lZpRB08P9RnEdDMXgX9Mx3kVdgz/fb0Ye1cdJq0H3cCD5ScR
Cl+u8oFX9WCbDjyLty8H7aHKxbmUsvvLXkoPELde04BcFkeuM2P2iby1NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9rRvF+auOwQbQ58s2kkOpEll4uMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvejJ0RzhYNXE0N0JCdERueXphU1E2a1NXWGk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfeMA0G
CSqGSIb3DQEBCwUAA4IBAQAfKi4B5Jl+Jx4+CVtQhx1ye6y2r0Gm+I+Dv63u9Ju8
ZBWcr73SL0IlmBCo5JCOVLIXlTbBP4kZPD+n01lqIGtcUGsDhBmY3r7xpEjfsT4R
/wqFSNBohfeObY2PV2QGGLUKfjg9RyBOH1hUQVxMPzwvEjbmjEaQygzOiFZSdDgC
N1fCp4aRyci2g+estkhiD0AFpXy78RTR06kvnDtoP2F1xWIeRLrPXkRkeZDSv3i5
1XJWrxF7djoHg+PVMP2f+PvN35N9uC7loYhNeZgI4Pr7lGtbi5EJya1HZKTavmI8
bsqD93MUa8d08Wx1Zxc28g40hfYTv1RCulthGA2SyNkI
-----END CERTIFICATE-----
Generated at Sat May 18 01:45:41 2024 by rpki-client on console-fra.rpki-client.org