Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Za0YRSs1VPqH6S1ElzHu74k9ZVY.roa
File: Za0YRSs1VPqH6S1ElzHu74k9ZVY.roa (raw, json)
Hash identifier: 4KTgYkWL5XOeW3MmqQLa07FUgxxJFwUnupA7Uo7kl3c=
Subject key identifier: 65:AD:18:45:2B:35:54:FA:87:E9:2D:44:97:31:EE:EF:89:3D:65:56
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192581E887362E16625AB9195F07152A2C7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Za0YRSs1VPqH6S1ElzHu74k9ZVY.roa
Signing time: Fri 04 Oct 2024 15:20:48 +0000
ROA not before: Fri 04 Oct 2024 15:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214194
IP address blocks: 77.90.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:58:1e:88:73:62:e1:66:25:ab:91:95:f0:71:52:a2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 4 15:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65ad18452b3554fa87e92d449731eeef893d6556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:d6:6b:61:ab:14:ae:2b:e7:c0:9b:56:46:
fe:52:24:e0:ad:8b:dd:34:50:0d:c8:04:b9:14:ef:
f1:ad:60:58:2f:07:81:10:6c:d7:13:ae:d2:28:aa:
b2:4a:a0:d2:88:ac:67:8b:6b:df:9a:b3:25:09:78:
8c:0f:a7:ab:44:1f:ce:ba:1f:e5:4b:9e:b4:44:d9:
f3:0e:ac:51:ca:17:e8:a4:85:06:25:77:ff:f9:3d:
29:6c:9a:f3:38:2a:f6:72:03:3a:c5:50:f9:4e:e0:
14:ff:18:63:d3:fa:cb:fb:7c:7e:f0:25:27:36:4b:
84:ae:49:15:30:05:b4:ce:39:ba:bf:8d:9b:a0:85:
25:c0:83:6f:79:49:81:38:f7:91:83:2b:b3:d6:d3:
a9:a9:cc:7c:fb:06:92:10:65:94:71:a5:a2:5d:cf:
87:a9:53:0f:50:a5:c5:6b:b5:40:63:d0:18:57:ff:
94:71:fc:a9:a8:75:0d:79:7c:41:74:e1:29:a9:65:
24:b2:65:dd:4b:14:80:02:85:b8:e4:07:99:c5:e6:
53:24:f5:88:b3:53:e2:33:38:00:92:eb:bb:cd:b0:
3e:5d:de:4a:56:1f:13:27:04:f3:4a:c0:f2:ff:fb:
a7:b6:e3:f8:fd:1c:65:aa:79:d3:27:ec:b3:d4:5e:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:18:45:2B:35:54:FA:87:E9:2D:44:97:31:EE:EF:89:3D:65:56
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Za0YRSs1VPqH6S1ElzHu74k9ZVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.36.0/24
Signature Algorithm: sha256WithRSAEncryption
90:82:63:43:29:3c:16:fe:91:dd:cd:5d:af:c5:7b:7a:16:c7:
e2:89:33:08:8a:e2:ff:59:b5:35:55:9d:54:46:16:bf:68:7e:
70:40:c3:fe:34:1c:e8:37:51:df:1f:64:99:0c:dc:3f:1d:b3:
1b:9f:03:4d:3d:18:37:26:bb:c7:54:93:42:93:e7:68:22:c4:
2e:04:6e:1a:0e:13:5e:dd:b3:16:f9:84:c9:77:d3:80:d8:e1:
06:49:ec:91:0d:b1:32:73:ab:80:2a:38:ae:eb:46:11:25:a6:
5c:ef:c5:9d:48:78:b5:54:48:45:9e:3f:67:67:49:62:5f:08:
31:e9:b5:85:3a:62:8b:ce:c4:dc:e2:a0:90:79:94:2b:14:9a:
97:a4:04:61:d1:48:78:e8:73:ff:fb:b9:09:f7:b9:f1:61:7d:
f7:b1:92:30:2b:f1:bb:54:2e:6e:11:ed:40:7f:86:c4:41:b8:
d8:34:78:68:19:34:b3:bb:68:2b:41:ed:59:06:f9:ec:ca:99:
e1:f3:32:45:cb:29:6f:d8:41:a6:f7:b6:a4:b9:f2:51:00:97:
92:a7:49:b4:06:1f:81:65:c1:31:df:59:99:55:4b:2f:df:b9:
02:36:cf:f5:6a:f7:a4:58:31:30:2a:f4:cd:2a:23:46:62:88:
5b:81:5d:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJYHohzYuFmJauRlfBxUqLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDA0MTUyMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWFkMTg0NTJiMzU1NGZhODdlOTJkNDQ5NzMxZWVlZjg5M2Q2NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6/Wa2GrFK4r58CbVkb+UiTgrYvd
NFANyAS5FO/xrWBYLweBEGzXE67SKKqySqDSiKxni2vfmrMlCXiMD6erRB/Ouh/l
S560RNnzDqxRyhfopIUGJXf/+T0pbJrzOCr2cgM6xVD5TuAU/xhj0/rL+3x+8CUn
NkuErkkVMAW0zjm6v42boIUlwINveUmBOPeRgyuz1tOpqcx8+waSEGWUcaWiXc+H
qVMPUKXFa7VAY9AYV/+UcfypqHUNeXxBdOEpqWUksmXdSxSAAoW45AeZxeZTJPWI
s1PiMzgAkuu7zbA+Xd5KVh8TJwTzSsDy//untuP4/RxlqnnTJ+yz1F64UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWtGEUrNVT6h+ktRJcx7u+JPWVWMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvWmEwWVJTczFWUHFINlMxRWx6SHU3NGs5WlZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVokMA0G
CSqGSIb3DQEBCwUAA4IBAQCQgmNDKTwW/pHdzV2vxXt6FsfiiTMIiuL/WbU1VZ1U
Rha/aH5wQMP+NBzoN1HfH2SZDNw/HbMbnwNNPRg3JrvHVJNCk+doIsQuBG4aDhNe
3bMW+YTJd9OA2OEGSeyRDbEyc6uAKjiu60YRJaZc78WdSHi1VEhFnj9nZ0liXwgx
6bWFOmKLzsTc4qCQeZQrFJqXpARh0Uh46HP/+7kJ97nxYX33sZIwK/G7VC5uEe1A
f4bEQbjYNHhoGTSzu2grQe1ZBvnsypnh8zJFyylv2EGm97akufJRAJeSp0m0Bh+B
ZcEx31mZVUsv37kCNs/1avekWDEwKvTNKiNGYohbgV35
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org