Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/pztGol9_kQSDejcvkPHrZh7X364.roa
File: pztGol9_kQSDejcvkPHrZh7X364.roa (raw, json)
Hash identifier: TENDw5E9AJEpjeVjlAhf6Izk3pcb4XwPkGVHpkPeVhk=
Subject key identifier: A7:3B:46:A2:5F:7F:91:04:83:7A:37:2F:90:F1:EB:66:1E:D7:DF:AE
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018CC56EFFA9395F2A03E4A696ACF0ACDB09
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/pztGol9_kQSDejcvkPHrZh7X364.roa
Signing time: Mon 01 Jan 2024 14:30:35 +0000
ROA not before: Mon 01 Jan 2024 14:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216205
IP address blocks: 46.36.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ff:a9:39:5f:2a:03:e4:a6:96:ac:f0:ac:db:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a73b46a25f7f9104837a372f90f1eb661ed7dfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:20:fb:e0:5f:f5:7e:6a:94:0c:16:33:dd:
32:b5:0c:6c:6f:40:74:81:94:c1:28:1c:4d:c6:67:
06:2f:ef:86:bf:76:6f:98:62:58:54:b8:90:aa:80:
46:1e:29:ff:1a:c3:69:c3:2c:4a:7b:8a:32:ee:fe:
94:01:44:e4:07:ff:e2:95:db:4d:8e:a1:72:c3:bf:
f5:3f:4c:8e:16:d3:6d:87:d5:f5:70:7d:0c:5f:ad:
cd:a9:28:47:d6:66:da:67:7b:67:3d:ac:11:f4:70:
ae:47:ad:5b:2f:c2:3a:61:88:0c:a9:3e:da:68:d2:
5c:51:72:98:a8:bd:ab:75:75:9f:88:61:79:82:0f:
43:da:56:81:74:9a:4b:1d:93:ff:b9:be:fa:c9:51:
26:9c:8f:f5:77:d0:6b:83:0a:ad:d6:10:5d:c0:28:
1d:b8:05:c3:78:a3:a2:24:e6:1c:66:a4:8c:f6:66:
e1:1e:26:18:19:5f:c8:d3:f3:57:c9:6d:56:cc:e0:
cc:46:4a:ad:32:e1:93:0f:8c:62:db:fd:b9:e5:73:
27:62:27:9e:90:e8:bf:4f:d4:e6:b3:0e:74:10:ca:
2f:4e:f9:0e:79:1f:7b:fb:c8:b4:21:86:62:00:51:
51:58:d1:71:88:fd:fc:4e:85:a5:d2:58:ec:c1:20:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:46:A2:5F:7F:91:04:83:7A:37:2F:90:F1:EB:66:1E:D7:DF:AE
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/pztGol9_kQSDejcvkPHrZh7X364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e5:f9:c6:2e:eb:75:61:32:4d:3a:49:7c:98:69:7c:e7:99:
1b:22:70:8e:01:07:94:c0:03:5f:76:1a:1c:b8:16:90:ed:25:
cc:e8:6b:66:2d:d3:f6:97:69:7e:c8:d0:7c:2f:15:80:5f:25:
d6:c2:bf:35:f3:1c:9d:ed:72:c4:b8:ca:01:e3:f6:fd:f1:8f:
f4:ec:a5:57:d4:5b:f7:88:87:30:ac:bf:cd:96:cc:3a:c9:ad:
92:b2:a0:77:a4:ed:b7:3a:04:da:3c:8f:5f:9a:27:f2:7b:0e:
f4:23:7c:1c:47:a3:fb:91:fc:a9:59:ef:04:29:33:f6:53:f3:
28:23:d7:3d:7e:53:93:c6:3f:d5:fa:e1:a6:de:ae:c1:d0:05:
6c:10:00:93:36:dc:9f:02:ac:9c:11:14:f5:13:a3:9c:a7:5a:
88:79:28:3c:00:c9:60:a9:1d:9d:55:03:24:9d:10:88:42:a9:
b4:a9:2f:ca:c3:64:5e:de:1e:fa:3a:1d:e7:b7:5b:5e:54:1b:
6d:4e:48:40:15:78:47:40:ed:c8:03:83:b5:16:33:d3:af:66:
e0:7f:d8:e7:5c:b3:6f:79:92:43:50:dc:f7:9e:9f:6f:4c:fa:
51:dd:dd:e6:21:0a:11:bd:83:70:a1:1c:b2:0b:f7:1b:58:91:
17:8a:18:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbv+pOV8qA+SmlqzwrNsJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDY2MmRjYzZmZTNiODFlZjNkZTJmY2EzY2ZjZWRjMTFl
YmFhNDMwHhcNMjQwMTAxMTQzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzNiNDZhMjVmN2Y5MTA0ODM3YTM3MmY5MGYxZWI2NjFlZDdkZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC8g++Bf9X5qlAwWM90ytQxsb0B0
gZTBKBxNxmcGL++Gv3ZvmGJYVLiQqoBGHin/GsNpwyxKe4oy7v6UAUTkB//ildtN
jqFyw7/1P0yOFtNth9X1cH0MX63NqShH1mbaZ3tnPawR9HCuR61bL8I6YYgMqT7a
aNJcUXKYqL2rdXWfiGF5gg9D2laBdJpLHZP/ub76yVEmnI/1d9Brgwqt1hBdwCgd
uAXDeKOiJOYcZqSM9mbhHiYYGV/I0/NXyW1WzODMRkqtMuGTD4xi2/255XMnYiee
kOi/T9Tmsw50EMovTvkOeR97+8i0IYZiAFFRWNFxiP38ToWl0ljswSBBcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKc7RqJff5EEg3o3L5Dx62Ye19+uMB8GA1UdIwQY
MBaAFNjWYtzG/juB7z3i/KPPztwR66pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGZmZjUtZGZkOS00MDA4LTk1Yjct
Nzg1ZTU4ODM2NDRkLzEvcHp0R29sOV9rUVNEZWpjdmtQSHJaaDdYMzY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGZmZjUtZGZkOS00MDA4LTk1YjctNzg1ZTU4ODM2NDRk
LzEvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiRjMA0G
CSqGSIb3DQEBCwUAA4IBAQB95fnGLut1YTJNOkl8mGl855kbInCOAQeUwANfdhoc
uBaQ7SXM6GtmLdP2l2l+yNB8LxWAXyXWwr818xyd7XLEuMoB4/b98Y/07KVX1Fv3
iIcwrL/Nlsw6ya2SsqB3pO23OgTaPI9fmifyew70I3wcR6P7kfypWe8EKTP2U/Mo
I9c9flOTxj/V+uGm3q7B0AVsEACTNtyfAqycERT1E6Ocp1qIeSg8AMlgqR2dVQMk
nRCIQqm0qS/Kw2Re3h76Oh3nt1teVBttTkhAFXhHQO3IA4O1FjPTr2bgf9jnXLNv
eZJDUNz3np9vTPpR3d3mIQoRvYNwoRyyC/cbWJEXihhG
-----END CERTIFICATE-----
Generated at Sat May 25 18:53:03 2024 by rpki-client on console-fra.rpki-client.org