Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/ZBUtiXovihhwUJJ79b7RG2wS3MY.roa
File: ZBUtiXovihhwUJJ79b7RG2wS3MY.roa (raw, json)
Hash identifier: Piy/S+odqn/djOQTB8CzAnIpSa554+QSHHCMzaTgtFY=
Subject key identifier: 64:15:2D:89:7A:2F:8A:18:70:50:92:7B:F5:BE:D1:1B:6C:12:DC:C6
Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial: 0190E3F5563F4AE4C8F2A3A9CE72D52C76C7
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/ZBUtiXovihhwUJJ79b7RG2wS3MY.roa
Signing time: Wed 24 Jul 2024 08:57:04 +0000
ROA not before: Wed 24 Jul 2024 08:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 185.162.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:f5:56:3f:4a:e4:c8:f2:a3:a9:ce:72:d5:2c:76:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Validity
Not Before: Jul 24 08:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64152d897a2f8a187050927bf5bed11b6c12dcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:ac:40:65:c1:9b:d6:25:a4:b6:99:d9:01:
55:40:a1:d3:5a:11:66:cb:c7:30:6f:3e:8b:8c:f6:
ef:f1:6f:c0:97:90:83:ab:27:fe:9b:9f:5c:56:89:
58:7a:aa:7e:52:3d:14:a3:be:7d:32:87:4a:df:29:
e0:4d:36:4f:01:ee:0e:e1:f0:27:8d:65:a5:67:ed:
44:5e:f0:f4:a7:d8:e4:07:c5:c4:9e:07:b6:34:15:
17:79:25:c3:2c:c1:4d:f9:d8:f5:35:0c:78:a4:e4:
37:31:95:13:42:81:d4:3a:2c:ff:27:73:c5:11:d6:
7b:2c:36:4f:42:b1:79:eb:ab:d6:23:61:d2:f9:68:
c0:e1:72:9c:9c:3e:62:cd:ac:2c:57:14:0f:1f:f1:
b0:15:fc:8d:df:4a:b4:e5:4a:9c:d3:17:38:94:00:
0a:19:10:c3:f2:ee:d1:b7:83:8a:b0:e2:c7:af:7c:
36:7f:bc:f0:fb:49:6f:7f:f1:4a:49:45:68:ef:7d:
87:0b:b2:7a:64:e9:38:9f:b2:49:32:ae:9c:c0:40:
12:0a:ea:5a:71:3b:d9:e6:5c:4f:33:71:8f:be:c3:
7f:4b:c6:f7:2e:42:7b:78:56:9b:81:d6:c4:6e:f6:
f7:a8:10:55:e3:3c:f5:f6:e3:8c:bb:1f:27:fc:f0:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:15:2D:89:7A:2F:8A:18:70:50:92:7B:F5:BE:D1:1B:6C:12:DC:C6
X509v3 Authority Key Identifier:
keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/ZBUtiXovihhwUJJ79b7RG2wS3MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.103.0/24
Signature Algorithm: sha256WithRSAEncryption
55:98:d1:e2:1f:81:2b:24:7d:fa:89:e5:e4:03:19:d2:5e:c3:
c2:cc:a6:fa:a6:96:6c:57:5f:21:d4:5b:7b:c7:e1:97:91:c0:
06:ae:7f:f2:e2:60:7a:e5:7c:25:67:76:fd:6b:d2:d4:a5:92:
6b:bd:07:d0:21:f2:d2:e8:22:2f:ff:80:78:3e:19:24:f4:0c:
9c:56:36:00:65:21:a3:de:67:75:3b:27:a2:c8:25:cb:8e:be:
48:e7:d9:67:96:38:9f:1a:15:25:37:0d:29:e4:4b:13:5d:13:
5d:1e:d9:91:29:5c:fc:c4:b4:ef:bb:3b:2d:e1:9c:4a:ab:a1:
fd:f7:da:c1:59:57:4d:9b:59:9f:f4:0f:0b:4e:25:7d:1c:48:
30:d4:2b:8e:d3:d4:87:0a:6c:e1:64:c0:0c:ce:4a:c0:0f:ac:
e1:b8:e4:6f:85:b2:d0:e9:0f:98:3b:85:27:8b:5d:1b:08:80:
26:55:35:b6:25:2a:0d:e0:df:7d:ff:87:d2:a0:70:5b:4e:19:
a2:c2:f0:7b:90:d9:80:93:93:81:e9:71:25:1d:14:fe:f7:5e:
1e:eb:bb:c3:c0:61:35:5a:9c:14:5a:2d:8a:6f:f4:7a:96:af:
ca:8b:4a:1a:b8:86:e7:26:ca:e4:f1:11:63:18:75:b8:0e:96:
13:0e:82:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDj9VY/SuTI8qOpznLVLHbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODA3YTNkY2JjMDI1YWNmNjk3YmVmODFlNDAzYjRhOTZj
ZmJiNTEwHhcNMjQwNzI0MDg1NzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDE1MmQ4OTdhMmY4YTE4NzA1MDkyN2JmNWJlZDExYjZjMTJkY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38asQGXBm9YlpLaZ2QFVQKHTWhFm
y8cwbz6LjPbv8W/Al5CDqyf+m59cVolYeqp+Uj0Uo759ModK3yngTTZPAe4O4fAn
jWWlZ+1EXvD0p9jkB8XEnge2NBUXeSXDLMFN+dj1NQx4pOQ3MZUTQoHUOiz/J3PF
EdZ7LDZPQrF566vWI2HS+WjA4XKcnD5izawsVxQPH/GwFfyN30q05Uqc0xc4lAAK
GRDD8u7Rt4OKsOLHr3w2f7zw+0lvf/FKSUVo732HC7J6ZOk4n7JJMq6cwEASCupa
cTvZ5lxPM3GPvsN/S8b3LkJ7eFabgdbEbvb3qBBV4zz19uOMux8n/PBR+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQVLYl6L4oYcFCSe/W+0RtsEtzGMB8GA1UdIwQY
MBaAFFWAej3LwCWs9pe++B5AO0qWz7tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTct
N2UyMTdiZWYyZDllLzEvWkJVdGlYb3ZpaGh3VUpKNzliN1JHMndTM01ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTctN2UyMTdiZWYyZDll
LzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaJnMA0G
CSqGSIb3DQEBCwUAA4IBAQBVmNHiH4ErJH36ieXkAxnSXsPCzKb6ppZsV18h1Ft7
x+GXkcAGrn/y4mB65XwlZ3b9a9LUpZJrvQfQIfLS6CIv/4B4Phkk9AycVjYAZSGj
3md1OyeiyCXLjr5I59lnljifGhUlNw0p5EsTXRNdHtmRKVz8xLTvuzst4ZxKq6H9
99rBWVdNm1mf9A8LTiV9HEgw1CuO09SHCmzhZMAMzkrAD6zhuORvhbLQ6Q+YO4Un
i10bCIAmVTW2JSoN4N99/4fSoHBbThmiwvB7kNmAk5OB6XElHRT+914e67vDwGE1
WpwUWi2Kb/R6lq/Ki0oauIbnJsrk8RFjGHW4DpYTDoKj
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:17:52 2024 by rpki-client on console-fra.rpki-client.org