Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/_zN_4uH4GtgbRLivLtXCWeZoK6Y.roa
File: _zN_4uH4GtgbRLivLtXCWeZoK6Y.roa (raw, json)
Hash identifier: Kb/XNyAPEGQCJM58/ma9C6UQDIiJF9hzvSZrs8z4BTI=
Subject key identifier: FF:33:7F:E2:E1:F8:1A:D8:1B:44:B8:AF:2E:D5:C2:59:E6:68:2B:A6
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 018CC5DCA9473B4A3C8F6D9A685244D02BBE
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/_zN_4uH4GtgbRLivLtXCWeZoK6Y.roa
Signing time: Mon 01 Jan 2024 16:30:21 +0000
ROA not before: Mon 01 Jan 2024 16:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15020
IP address blocks: 185.82.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a9:47:3b:4a:3c:8f:6d:9a:68:52:44:d0:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 16:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff337fe2e1f81ad81b44b8af2ed5c259e6682ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:29:04:ad:db:38:93:1d:04:10:65:ef:e8:
10:bb:8f:ae:36:6b:69:4c:06:2e:97:eb:94:2c:ba:
81:10:86:95:90:5a:ef:9b:68:02:e5:08:d0:c8:4b:
c2:97:b2:4b:ff:8e:06:27:f8:9a:cf:51:69:e8:e7:
72:5a:02:94:79:83:75:b8:2b:05:f1:69:47:9a:eb:
11:0f:82:22:88:42:40:ee:79:c8:99:85:3e:7b:7b:
44:cf:d5:82:7f:d5:b3:5a:be:2a:3e:3a:bc:ca:23:
e3:49:f9:a3:f2:57:90:0f:58:7f:eb:be:f1:b2:4a:
3e:84:92:64:d3:2c:8e:65:9f:32:8b:4f:3d:69:18:
fa:fe:c5:91:50:d9:b4:d5:1f:0c:7d:3f:08:1e:53:
35:0b:07:46:0c:e9:f1:99:05:e3:89:c8:ba:5e:54:
03:eb:27:c8:28:4a:d2:5a:66:8a:72:05:e7:ca:84:
87:5e:c1:2d:87:1d:05:0b:c8:10:50:ce:82:9d:7c:
48:ba:97:0f:6c:fb:d0:ca:67:0b:64:99:db:5e:3c:
ca:3d:cc:b5:7e:92:96:4b:0a:45:a3:e6:b2:56:e5:
3c:5f:94:ba:54:6e:6a:43:d3:0e:fd:bd:8f:51:5a:
a7:68:73:99:bf:6d:8b:07:d4:1f:37:85:13:84:5b:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:7F:E2:E1:F8:1A:D8:1B:44:B8:AF:2E:D5:C2:59:E6:68:2B:A6
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/_zN_4uH4GtgbRLivLtXCWeZoK6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.73.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cf:72:f9:ec:e3:8c:23:32:f6:60:df:b4:37:37:71:d5:6f:
4b:4b:93:fb:f4:96:6f:49:e8:19:d6:bf:6b:6e:55:d3:69:3b:
2c:8d:67:6c:41:fd:41:15:2f:da:35:33:6c:23:74:04:89:b0:
53:08:c3:35:a1:0e:dc:3a:de:e8:12:77:51:2a:72:83:7b:05:
3e:4b:d8:75:db:3a:47:14:b9:21:be:48:5b:5f:36:a3:5a:ba:
1c:f3:ba:d5:c4:fb:17:1e:9a:7c:d4:e7:0a:e4:15:a0:23:12:
41:61:67:c2:b2:a9:79:3a:2c:42:fa:e2:4e:74:1f:02:eb:dd:
3e:69:1e:b5:ac:5f:bb:0a:ff:90:8c:fe:e8:28:90:91:3d:71:
b9:4f:0d:78:03:3b:80:82:48:10:ef:c6:22:30:33:ef:05:c1:
17:01:07:09:22:29:a8:f1:68:96:b4:37:5f:ac:e6:59:41:27:
1f:dd:45:be:f9:f9:55:3e:9c:87:52:c2:df:25:6f:6b:fd:80:
2b:80:3b:a7:62:1d:b6:7b:3d:8b:a7:20:b0:64:14:ef:4d:60:
4a:d9:c0:61:54:94:67:13:2c:9f:c1:96:6c:af:ac:8e:4f:d3:
82:5a:d2:45:ec:ad:2f:ce:90:4b:b0:a2:9e:0f:74:28:15:ea:
68:25:48:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3KlHO0o8j22aaFJE0Cu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm
NGQ5ZTAwHhcNMjQwMTAxMTYzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjMzN2ZlMmUxZjgxYWQ4MWI0NGI4YWYyZWQ1YzI1OWU2NjgyYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9spBK3bOJMdBBBl7+gQu4+uNmtp
TAYul+uULLqBEIaVkFrvm2gC5QjQyEvCl7JL/44GJ/iaz1Fp6OdyWgKUeYN1uCsF
8WlHmusRD4IiiEJA7nnImYU+e3tEz9WCf9WzWr4qPjq8yiPjSfmj8leQD1h/677x
sko+hJJk0yyOZZ8yi089aRj6/sWRUNm01R8MfT8IHlM1CwdGDOnxmQXjici6XlQD
6yfIKErSWmaKcgXnyoSHXsEthx0FC8gQUM6CnXxIupcPbPvQymcLZJnbXjzKPcy1
fpKWSwpFo+ayVuU8X5S6VG5qQ9MO/b2PUVqnaHOZv22LB9QfN4UThFuz+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8zf+Lh+BrYG0S4ry7VwlnmaCumMB8GA1UdIwQY
MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt
ZTljOTEzMjgzNmZmLzEvX3pOXzR1SDRHdGdiUkxpdkx0WENXZVpvSzZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm
LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVJJMA0G
CSqGSIb3DQEBCwUAA4IBAQCbz3L57OOMIzL2YN+0Nzdx1W9LS5P79JZvSegZ1r9r
blXTaTssjWdsQf1BFS/aNTNsI3QEibBTCMM1oQ7cOt7oEndRKnKDewU+S9h12zpH
FLkhvkhbXzajWroc87rVxPsXHpp81OcK5BWgIxJBYWfCsql5OixC+uJOdB8C690+
aR61rF+7Cv+QjP7oKJCRPXG5Tw14AzuAgkgQ78YiMDPvBcEXAQcJIimo8WiWtDdf
rOZZQScf3UW++flVPpyHUsLfJW9r/YArgDunYh22ez2LpyCwZBTvTWBK2cBhVJRn
EyyfwZZsr6yOT9OCWtJF7K0vzpBLsKKeD3QoFepoJUjO
-----END CERTIFICATE-----
Generated at Sun May 19 13:56:19 2024 by rpki-client on console-fra.rpki-client.org