Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zHaA5qiiv3GOVc8aio8MBZUwseM.roa
File: zHaA5qiiv3GOVc8aio8MBZUwseM.roa (raw, json)
Hash identifier: 3c3SZzG5p606Eu0lSOcp8icKzogOv24gbha2bSCmlOI=
Subject key identifier: CC:76:80:E6:A8:A2:BF:71:8E:55:CF:1A:8A:8F:0C:05:95:30:B1:E3
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018CC79353A7FD969C9152A408308167B26F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zHaA5qiiv3GOVc8aio8MBZUwseM.roa
Signing time: Tue 02 Jan 2024 00:29:30 +0000
ROA not before: Tue 02 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.195.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:53:a7:fd:96:9c:91:52:a4:08:30:81:67:b2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc7680e6a8a2bf718e55cf1a8a8f0c059530b1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:48:c1:ff:b7:15:17:b5:91:6a:4e:a2:9a:
c0:89:a2:b8:5a:51:96:0e:a8:79:87:78:18:f2:26:
83:9e:28:3e:55:34:0a:e9:4d:46:b4:4c:36:8d:b7:
9f:b6:c3:b5:de:cb:48:fc:ef:07:03:7e:30:5f:d9:
04:8a:af:94:cf:68:47:4c:02:b8:f7:64:1b:54:14:
73:4d:9e:1d:92:b0:6a:60:28:fc:0b:74:ca:d7:19:
94:bf:9b:b2:87:0b:77:2f:6b:a3:dd:55:6b:4d:3b:
68:85:e2:a3:42:cb:2b:ed:30:06:b1:10:2e:b4:ee:
cb:1b:40:0a:40:4e:4c:64:78:da:c0:d3:49:ee:5e:
ff:64:b2:a4:41:8f:9f:81:e8:09:35:32:91:0d:12:
ac:fb:c6:b9:9d:d8:f0:80:fc:87:94:f3:88:7c:ac:
2a:29:82:71:c8:37:47:e2:0a:8e:d1:53:f9:80:a2:
35:5e:5a:64:52:ab:cd:33:57:10:d7:39:5b:c2:99:
98:6b:db:46:ed:dd:9a:9b:58:59:d6:f3:8d:fc:cd:
2e:80:a7:89:e9:99:8e:0c:45:a4:ac:13:39:0a:19:
5c:11:3e:88:48:05:7a:d2:66:4d:34:c3:36:6f:cd:
26:dd:65:05:e8:e1:60:b8:b6:29:59:8d:38:a2:55:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:76:80:E6:A8:A2:BF:71:8E:55:CF:1A:8A:8F:0C:05:95:30:B1:E3
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zHaA5qiiv3GOVc8aio8MBZUwseM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.101.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cc:f0:13:58:37:85:ad:fb:89:e6:91:59:db:c8:ce:f3:f6:
5d:e7:e4:0c:3f:78:f3:fe:86:13:d4:fb:58:6c:6d:e5:49:6f:
95:97:c7:cb:42:d5:70:e1:0a:ab:47:49:e9:48:32:e3:3f:cb:
2c:17:63:2c:60:b1:73:71:8c:41:e1:94:94:88:51:d0:6c:b6:
57:ef:56:1b:b5:c0:95:c3:d0:f1:a1:42:72:f1:3b:06:7c:bf:
22:f7:31:c4:34:45:b9:39:4d:6d:90:b7:da:08:5b:72:64:63:
1e:4d:14:6c:20:2b:ea:02:d0:39:30:27:87:25:7e:19:65:de:
c6:2e:0d:55:35:67:86:89:81:e5:8a:fc:d1:d7:58:64:15:1d:
ae:7e:17:f1:d5:d9:54:86:a1:74:09:95:10:ab:eb:be:d6:cc:
b2:26:62:fc:78:73:b2:e7:7f:ed:5c:b9:f4:dd:ec:30:25:fc:
a1:95:da:ee:97:f5:c0:5a:57:52:5a:29:8c:ef:21:d7:45:b7:
6b:d5:28:87:7a:08:65:17:0d:84:f2:21:52:38:9c:ff:09:96:
30:24:79:52:66:a1:25:d7:9f:92:e4:5c:ad:34:88:df:41:84:
9b:d0:0c:9d:dd:f3:13:ba:b6:ed:b9:08:2f:54:95:0a:09:41:
47:06:1d:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHk1On/ZackVKkCDCBZ7JvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjQwMTAyMDAyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzc2ODBlNmE4YTJiZjcxOGU1NWNmMWE4YThmMGMwNTk1MzBiMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyZIwf+3FRe1kWpOoprAiaK4WlGW
Dqh5h3gY8iaDnig+VTQK6U1GtEw2jbeftsO13stI/O8HA34wX9kEiq+Uz2hHTAK4
92QbVBRzTZ4dkrBqYCj8C3TK1xmUv5uyhwt3L2uj3VVrTTtoheKjQssr7TAGsRAu
tO7LG0AKQE5MZHjawNNJ7l7/ZLKkQY+fgegJNTKRDRKs+8a5ndjwgPyHlPOIfKwq
KYJxyDdH4gqO0VP5gKI1XlpkUqvNM1cQ1zlbwpmYa9tG7d2am1hZ1vON/M0ugKeJ
6ZmODEWkrBM5ChlcET6ISAV60mZNNMM2b80m3WUF6OFguLYpWY04olVlFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMx2gOaoor9xjlXPGoqPDAWVMLHjMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvekhhQTVxaWl2M0dPVmM4YWlvOE1CWlV3c2VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwsNlMA0G
CSqGSIb3DQEBCwUAA4IBAQAEzPATWDeFrfuJ5pFZ28jO8/Zd5+QMP3jz/oYT1PtY
bG3lSW+Vl8fLQtVw4QqrR0npSDLjP8ssF2MsYLFzcYxB4ZSUiFHQbLZX71YbtcCV
w9DxoUJy8TsGfL8i9zHENEW5OU1tkLfaCFtyZGMeTRRsICvqAtA5MCeHJX4ZZd7G
Lg1VNWeGiYHlivzR11hkFR2ufhfx1dlUhqF0CZUQq+u+1syyJmL8eHOy53/tXLn0
3ewwJfyhldrul/XAWldSWimM7yHXRbdr1SiHeghlFw2E8iFSOJz/CZYwJHlSZqEl
15+S5FytNIjfQYSb0Ayd3fMTurbtuQgvVJUKCUFHBh2l
-----END CERTIFICATE-----
Generated at Thu May 2 08:11:42 2024 by rpki-client on console-ams.rpki-client.org