Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZTIhHcKSG8MWZJImxEAgloMER60.roa
File: ZTIhHcKSG8MWZJImxEAgloMER60.roa (raw, json)
Hash identifier: jgJFA24I+YwKi7YBH+/nN5hGBAeW14spICh/0+aBBrc=
Subject key identifier: 65:32:21:1D:C2:92:1B:C3:16:64:92:26:C4:40:20:96:83:04:47:AD
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D9467EDAC02B865F16090DC370B2717F8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZTIhHcKSG8MWZJImxEAgloMER60.roa
Signing time: Sat 10 Feb 2024 19:04:15 +0000
ROA not before: Sat 10 Feb 2024 19:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201842
IP address blocks: 147.45.206.0/24 maxlen: 24
193.233.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:94:67:ed:ac:02:b8:65:f1:60:90:dc:37:0b:27:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 10 19:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6532211dc2921bc316649226c4402096830447ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f0:4f:bf:bf:a5:dd:85:7e:98:8b:c4:7e:e8:
27:be:88:c6:12:2d:ab:a3:2a:a3:91:5d:54:06:ce:
82:af:96:f1:03:b2:11:ff:b0:a5:7a:f1:d0:6c:47:
5e:c0:63:34:30:2a:cf:1f:b8:ef:38:5c:d4:d9:b0:
3d:b1:1c:9f:6f:d7:a2:d3:dd:e1:a8:06:97:60:db:
29:a5:28:d1:ff:91:ab:f6:7d:55:38:55:83:5d:8a:
14:79:21:50:52:e9:ff:be:56:87:bd:70:5b:a1:e0:
b5:8d:9a:37:7a:49:b3:d0:4c:64:2a:9c:31:c1:b9:
78:3d:8c:8e:48:58:27:4f:89:6f:a3:a8:63:45:a2:
f6:b0:1e:79:a1:68:e4:7b:19:bd:2e:57:7c:28:9f:
20:90:d3:c7:4e:1e:7a:ac:8d:12:32:f8:08:1b:9c:
46:5c:cb:e8:c2:7a:20:03:d3:06:22:c0:98:92:cd:
9f:c6:fe:60:f5:9d:36:9e:aa:c2:28:1f:42:60:44:
bf:3e:21:ef:38:87:80:a2:b4:55:92:bf:51:a6:5a:
b9:dd:19:62:6c:a8:85:d9:2f:cc:84:55:e4:45:87:
d7:fc:db:1b:5b:99:f9:5f:98:c1:bb:5f:b9:2b:c7:
91:51:9c:17:63:0c:ae:d9:55:f5:5c:f1:35:da:36:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:21:1D:C2:92:1B:C3:16:64:92:26:C4:40:20:96:83:04:47:AD
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZTIhHcKSG8MWZJImxEAgloMER60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.206.0/24
193.233.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7f:8d:a8:28:65:12:c7:f0:f6:9f:4e:07:aa:6f:6e:1c:70:
ad:a6:d5:33:83:68:96:8f:78:53:9c:cb:64:ef:a4:0e:65:e3:
ce:ff:97:d7:98:63:a5:1a:36:74:2a:bc:5a:7d:50:16:9e:fc:
0f:78:0d:90:f2:5a:80:29:60:92:9a:01:2d:af:2c:3d:a4:08:
ec:99:1d:f7:88:78:71:07:41:4c:a5:d4:a9:5f:d9:10:17:96:
35:58:2a:1d:20:20:84:fd:4f:b9:6d:7d:61:5b:52:16:45:ed:
8b:09:3d:61:30:a6:06:04:a7:49:ed:0f:a9:1e:a6:96:59:e6:
21:c1:8e:f2:53:9f:7d:42:46:68:35:99:36:68:b6:64:1d:70:
38:40:41:7e:d5:f2:21:bb:00:45:28:5b:22:d3:d8:31:e7:14:
9e:6e:d8:7d:cc:4c:be:c7:f6:24:80:0a:22:91:f6:ec:b3:1b:
f5:81:3e:55:eb:3f:75:5c:e8:c7:89:0b:83:71:7d:2f:a8:b8:
92:64:61:9a:9e:ff:d1:18:bb:77:de:b2:02:0c:bf:8e:6a:09:
e5:53:e6:ec:30:1d:46:5b:8b:c9:98:66:e1:b3:58:de:77:b0:
04:a6:62:55:43:fe:99:02:7d:90:0c:4a:bf:e1:52:1e:02:71:
f2:69:29:0d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY2UZ+2sArhl8WCQ3DcLJxf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwMjEwMTkwNDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTMyMjExZGMyOTIxYmMzMTY2NDkyMjZjNDQwMjA5NjgzMDQ0N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/BPv7+l3YV+mIvEfugnvojGEi2r
oyqjkV1UBs6Cr5bxA7IR/7ClevHQbEdewGM0MCrPH7jvOFzU2bA9sRyfb9ei093h
qAaXYNsppSjR/5Gr9n1VOFWDXYoUeSFQUun/vlaHvXBboeC1jZo3ekmz0ExkKpwx
wbl4PYyOSFgnT4lvo6hjRaL2sB55oWjkexm9Lld8KJ8gkNPHTh56rI0SMvgIG5xG
XMvownogA9MGIsCYks2fxv5g9Z02nqrCKB9CYES/PiHvOIeAorRVkr9Rplq53Rli
bKiF2S/MhFXkRYfX/NsbW5n5X5jBu1+5K8eRUZwXYwyu2VX1XPE12jY8zQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGUyIR3CkhvDFmSSJsRAIJaDBEetMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvWlRJaEhjS1NHOE1XWkpJbXhFQWdsb01FUjYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAky3OAwQA
welPMA0GCSqGSIb3DQEBCwUAA4IBAQAMf42oKGUSx/D2n04Hqm9uHHCtptUzg2iW
j3hTnMtk76QOZePO/5fXmGOlGjZ0KrxafVAWnvwPeA2Q8lqAKWCSmgEtryw9pAjs
mR33iHhxB0FMpdSpX9kQF5Y1WCodICCE/U+5bX1hW1IWRe2LCT1hMKYGBKdJ7Q+p
HqaWWeYhwY7yU599QkZoNZk2aLZkHXA4QEF+1fIhuwBFKFsi09gx5xSebth9zEy+
x/YkgAoikfbssxv1gT5V6z91XOjHiQuDcX0vqLiSZGGanv/RGLt33rICDL+Oagnl
U+bsMB1GW4vJmGbhs1jed7AEpmJVQ/6ZAn2QDEq/4VIeAnHyaSkN
-----END CERTIFICATE-----
Generated at Sat May 4 18:05:14 2024 by rpki-client on console-fra.rpki-client.org