Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/2zbxm2_IB0O6xaREiM3hfMW1PAM.roa
File: 2zbxm2_IB0O6xaREiM3hfMW1PAM.roa (raw, json)
Hash identifier: G0F7eibHh8+xH9dYwLRg8g1X2M8g9OQXdb3qX4F4PQw=
Subject key identifier: DB:36:F1:9B:6F:C8:07:43:BA:C5:A4:44:88:CD:E1:7C:C5:B5:3C:03
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018CC9BC948BB3F7FE4334B6B70AB8C1BD72
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/2zbxm2_IB0O6xaREiM3hfMW1PAM.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209915
IP address blocks: 212.119.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:94:8b:b3:f7:fe:43:34:b6:b7:0a:b8:c1:bd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db36f19b6fc80743bac5a44488cde17cc5b53c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:d9:f5:ed:26:50:c7:ec:1f:76:f9:af:94:
32:0a:de:95:5f:bc:75:e8:89:08:bd:7c:ec:ef:ba:
45:e1:88:ca:04:7b:47:5d:ae:04:81:7e:bc:80:6b:
0d:6d:ac:e9:18:da:b7:1d:47:c5:f4:55:bb:9f:76:
06:00:94:48:c4:4f:c6:d9:3e:b2:bc:c1:d4:ce:e4:
b4:68:d1:a0:08:a4:0e:e2:86:c1:77:78:c2:de:5f:
60:f4:c2:1b:0f:36:17:fe:4c:e6:2b:56:77:c1:36:
0b:d9:f1:7d:d2:69:51:ef:5a:af:db:d5:39:a3:6a:
56:87:b6:2a:37:87:f9:d7:d2:b4:3b:fa:b1:11:73:
a2:a4:91:e2:94:93:4e:3c:35:3c:ea:23:51:98:0c:
91:8e:c8:f7:aa:c3:20:c3:d9:f0:50:33:9f:88:01:
d3:49:72:a4:50:8b:4d:83:6a:78:f5:14:08:cc:db:
51:76:6b:c7:f5:50:24:f6:9f:b2:0f:3c:e9:11:51:
d3:60:2f:1f:8f:ac:f9:76:a2:c3:45:86:ce:79:4d:
f8:bd:7f:06:27:17:ec:a0:cd:d0:30:f7:eb:cd:04:
db:0f:dc:82:3f:ec:ec:a4:95:2f:53:29:b3:63:aa:
d9:98:9a:75:68:2a:db:49:59:40:a5:2d:55:3a:f3:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:F1:9B:6F:C8:07:43:BA:C5:A4:44:88:CD:E1:7C:C5:B5:3C:03
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/2zbxm2_IB0O6xaREiM3hfMW1PAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cb:52:e4:69:91:42:1b:fd:ad:04:d4:b8:a6:f4:de:4c:8e:
5f:96:1a:c2:4c:c5:0d:56:7b:bd:13:a6:f7:29:36:98:42:0f:
ec:61:fa:39:8c:8f:2a:80:e4:51:7b:e0:a6:0a:2e:9a:28:05:
2c:89:45:ed:26:5b:38:94:bd:7b:e4:91:7c:94:1c:c3:41:eb:
b4:54:4d:36:f5:4f:e5:de:f3:64:55:b8:2e:6f:a8:b1:d3:2d:
21:6b:1b:91:99:a3:2d:72:e7:a3:ce:41:f8:50:85:2a:79:a9:
29:13:fd:1c:fe:71:19:2e:ec:4e:58:5f:66:20:a6:61:c7:45:
99:3e:16:04:ce:e8:a4:1d:a0:7f:55:13:aa:f5:80:46:27:2f:
98:ec:c0:2a:a9:79:62:a3:68:f0:d1:17:94:13:37:df:ef:17:
c7:02:9b:5a:9d:6c:06:c6:be:5b:69:e6:39:23:9f:79:92:e8:
d8:e5:77:44:c0:ef:65:47:f1:e1:b1:fb:36:51:16:ec:5c:63:
b0:c0:f8:4e:78:de:69:de:9d:7b:98:73:33:fa:0a:4f:83:32:
f1:11:19:50:65:ce:ed:05:55:32:e4:41:0e:7e:4b:e2:fc:ef:
1e:ce:e2:bc:79:db:ac:30:1a:58:70:0b:c1:e7:32:98:f2:00:
f9:5f:15:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvJSLs/f+QzS2twq4wb1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjQwMTAyMTAzMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjM2ZjE5YjZmYzgwNzQzYmFjNWE0NDQ4OGNkZTE3Y2M1YjUzYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nfZ9e0mUMfsH3b5r5QyCt6VX7x1
6IkIvXzs77pF4YjKBHtHXa4EgX68gGsNbazpGNq3HUfF9FW7n3YGAJRIxE/G2T6y
vMHUzuS0aNGgCKQO4obBd3jC3l9g9MIbDzYX/kzmK1Z3wTYL2fF90mlR71qv29U5
o2pWh7YqN4f519K0O/qxEXOipJHilJNOPDU86iNRmAyRjsj3qsMgw9nwUDOfiAHT
SXKkUItNg2p49RQIzNtRdmvH9VAk9p+yDzzpEVHTYC8fj6z5dqLDRYbOeU34vX8G
JxfsoM3QMPfrzQTbD9yCP+zspJUvUymzY6rZmJp1aCrbSVlApS1VOvNhEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNs28ZtvyAdDusWkRIjN4XzFtTwDMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvMnpieG0yX0lCME82eGFSRWlNM2hmTVcxUEFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HcFMA0G
CSqGSIb3DQEBCwUAA4IBAQCsy1LkaZFCG/2tBNS4pvTeTI5flhrCTMUNVnu9E6b3
KTaYQg/sYfo5jI8qgORRe+CmCi6aKAUsiUXtJls4lL175JF8lBzDQeu0VE029U/l
3vNkVbgub6ix0y0haxuRmaMtcuejzkH4UIUqeakpE/0c/nEZLuxOWF9mIKZhx0WZ
PhYEzuikHaB/VROq9YBGJy+Y7MAqqXlio2jw0ReUEzff7xfHAptanWwGxr5baeY5
I595kujY5XdEwO9lR/Hhsfs2URbsXGOwwPhOeN5p3p17mHMz+gpPgzLxERlQZc7t
BVUy5EEOfkvi/O8ezuK8edusMBpYcAvB5zKY8gD5XxV7
-----END CERTIFICATE-----
Generated at Mon May 20 04:54:02 2024 by rpki-client on console-ams.rpki-client.org