Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/Z6979OdNnC7o4gzMXz4_7QmuU-o.roa
File: Z6979OdNnC7o4gzMXz4_7QmuU-o.roa (raw, json)
Hash identifier: qsc3x8LNra/hSjKudULb+841CdEJpZMfJ24ldnoetIc=
Subject key identifier: 67:AF:7B:F4:E7:4D:9C:2E:E8:E2:0C:CC:5F:3E:3F:ED:09:AE:53:EA
Certificate issuer: /CN=d3bca2b8b27193069902a7c666436edc04ebfbc7
Certificate serial: 018CC8DF6CE4563B60B046060E52240FCEFC
Authority key identifier: D3:BC:A2:B8:B2:71:93:06:99:02:A7:C6:66:43:6E:DC:04:EB:FB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07yiuLJxkwaZAqfGZkNu3ATr-8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/Z6979OdNnC7o4gzMXz4_7QmuU-o.roa
Signing time: Tue 02 Jan 2024 06:32:14 +0000
ROA not before: Tue 02 Jan 2024 06:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 185.33.24.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/07yiuLJxkwaZAqfGZkNu3ATr-8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6c:e4:56:3b:60:b0:46:06:0e:52:24:0f:ce:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bca2b8b27193069902a7c666436edc04ebfbc7
Validity
Not Before: Jan 2 06:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67af7bf4e74d9c2ee8e20ccc5f3e3fed09ae53ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:b0:ee:31:ad:bb:84:20:40:29:cc:c8:ee:
30:8f:07:66:6b:35:86:77:d7:48:27:da:d0:ec:70:
a2:e1:b6:9c:15:f6:2f:e1:4c:22:83:29:6a:15:b2:
0f:8d:ba:2d:c0:7f:c0:75:c1:b2:b1:46:02:bc:15:
a2:49:3a:18:e4:a3:ac:aa:de:1f:c3:a2:ea:db:9e:
4e:58:f0:aa:5c:c2:b4:22:b9:b6:18:91:be:4b:d2:
4d:63:18:1e:11:b5:b2:97:e4:81:6b:3d:d5:ea:68:
e7:ac:2d:be:42:74:cc:85:ef:b5:14:cf:9f:a6:d6:
ac:10:01:5b:d9:1d:7a:85:3b:d0:39:78:79:9d:a9:
e1:d3:94:dc:7b:7a:66:ed:3e:87:1f:51:10:2c:6c:
df:29:a9:61:c2:8b:24:4c:f6:ea:78:52:83:ff:77:
a6:36:30:1c:1e:e9:d9:b2:2f:79:de:d5:bb:e6:b3:
85:70:c1:1c:d3:25:a0:bc:4b:a9:f5:41:9c:2f:cc:
eb:a8:b7:88:bb:1b:8b:d2:98:f4:31:fd:c1:e5:71:
c7:b3:a6:67:66:5a:06:7f:8f:c9:0b:82:9d:43:92:
86:e3:75:aa:a8:00:ac:1c:c0:53:6d:c7:4b:dc:89:
1b:b0:94:cb:84:76:f0:be:aa:2f:3b:c2:4d:36:b9:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AF:7B:F4:E7:4D:9C:2E:E8:E2:0C:CC:5F:3E:3F:ED:09:AE:53:EA
X509v3 Authority Key Identifier:
keyid:D3:BC:A2:B8:B2:71:93:06:99:02:A7:C6:66:43:6E:DC:04:EB:FB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07yiuLJxkwaZAqfGZkNu3ATr-8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/Z6979OdNnC7o4gzMXz4_7QmuU-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.24.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1f:75:aa:ce:81:28:f9:fa:45:94:25:8c:71:17:d7:2c:6a:
94:2c:b1:c8:50:6b:f3:e5:44:d0:3d:e1:40:d0:d2:f0:08:ac:
85:0f:d8:df:80:be:bf:0f:fa:64:48:03:7d:ef:3e:1b:2f:e5:
a7:24:41:50:64:f0:df:cb:26:7b:42:45:2d:d3:6f:bd:0a:47:
8d:7f:3a:7f:75:df:de:5b:6f:4d:24:1e:38:49:69:a7:48:8b:
77:bb:76:59:79:5b:ab:02:9f:cb:45:63:b4:48:fd:91:6f:ac:
7a:ca:98:86:38:8e:8b:14:11:b2:2e:c0:b4:25:a5:a2:db:f5:
ec:98:00:5f:d9:11:e7:ba:ed:6e:1a:1d:87:43:a0:93:98:a4:
e8:d6:72:86:ae:73:eb:6a:a1:4c:02:56:40:ed:cb:b1:3c:76:
e8:11:77:d8:f3:e6:18:09:17:bd:a4:6c:f4:d6:7a:84:b6:b3:
76:f5:b0:3a:76:8d:78:fb:a7:12:b3:87:a9:4c:5a:c1:1c:f6:
09:c8:9b:f6:62:f9:21:bb:b0:a2:d4:a5:8c:db:54:b9:fd:44:
85:b7:c3:4a:b1:e9:8b:12:d8:1a:80:08:03:fb:ce:43:5d:59:
18:5e:e2:0c:85:20:ff:bd:54:ea:66:8e:4c:83:f0:9c:28:12:
85:2b:c5:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI32zkVjtgsEYGDlIkD878MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYmNhMmI4YjI3MTkzMDY5OTAyYTdjNjY2NDM2ZWRjMDRl
YmZiYzcwHhcNMjQwMTAyMDYzMjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2FmN2JmNGU3NGQ5YzJlZThlMjBjY2M1ZjNlM2ZlZDA5YWU1M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcmw7jGtu4QgQCnMyO4wjwdmazWG
d9dIJ9rQ7HCi4bacFfYv4UwigylqFbIPjbotwH/AdcGysUYCvBWiSToY5KOsqt4f
w6Lq255OWPCqXMK0Irm2GJG+S9JNYxgeEbWyl+SBaz3V6mjnrC2+QnTMhe+1FM+f
ptasEAFb2R16hTvQOXh5nanh05Tce3pm7T6HH1EQLGzfKalhwoskTPbqeFKD/3em
NjAcHunZsi953tW75rOFcMEc0yWgvEup9UGcL8zrqLeIuxuL0pj0Mf3B5XHHs6Zn
ZloGf4/JC4KdQ5KG43WqqACsHMBTbcdL3IkbsJTLhHbwvqovO8JNNrmxiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGeve/TnTZwu6OIMzF8+P+0JrlPqMB8GA1UdIwQY
MBaAFNO8oriycZMGmQKnxmZDbtwE6/vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDd5aXVMSnhrd2FaQXFmR1prTnUzQVRyLThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yYmRjZmUtMTcyYS00MjNlLTgwNTct
YzkyNGY4NjMwZmU0LzEvWjY5NzlPZE5uQzdvNGd6TVh6NF83UW11VS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8yYmRjZmUtMTcyYS00MjNlLTgwNTctYzkyNGY4NjMwZmU0
LzEvMDd5aXVMSnhrd2FaQXFmR1prTnUzQVRyLThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSEYMA0G
CSqGSIb3DQEBCwUAA4IBAQARH3WqzoEo+fpFlCWMcRfXLGqULLHIUGvz5UTQPeFA
0NLwCKyFD9jfgL6/D/pkSAN97z4bL+WnJEFQZPDfyyZ7QkUt02+9CkeNfzp/dd/e
W29NJB44SWmnSIt3u3ZZeVurAp/LRWO0SP2Rb6x6ypiGOI6LFBGyLsC0JaWi2/Xs
mABf2RHnuu1uGh2HQ6CTmKTo1nKGrnPraqFMAlZA7cuxPHboEXfY8+YYCRe9pGz0
1nqEtrN29bA6do14+6cSs4epTFrBHPYJyJv2Yvkhu7Ci1KWM21S5/USFt8NKsemL
EtgagAgD+85DXVkYXuIMhSD/vVTqZo5Mg/CcKBKFK8Ur
-----END CERTIFICATE-----
Generated at Sun May 19 07:43:11 2024 by rpki-client on console-fra.rpki-client.org