Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Z19eOoLED2ZmZClRzO2f0_Nxkiw.roa
File: Z19eOoLED2ZmZClRzO2f0_Nxkiw.roa (raw, json)
Hash identifier: pin5dHW/JROXfl9HBG23/q/Oyxr+z4kH5lMf3dxcUR0=
Subject key identifier: 67:5F:5E:3A:82:C4:0F:66:66:64:29:51:CC:ED:9F:D3:F3:71:92:2C
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D026F688FDF3344898ABCB160F516
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Z19eOoLED2ZmZClRzO2f0_Nxkiw.roa
Signing time: Tue 02 Jan 2024 08:31:56 +0000
ROA not before: Tue 02 Jan 2024 08:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199514
IP address blocks: 2a0a:280:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:02:6f:68:8f:df:33:44:89:8a:bc:b1:60:f5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675f5e3a82c40f6666642951cced9fd3f371922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:d3:ca:0f:20:40:f8:43:bd:dc:d2:5d:33:
2b:a4:01:06:a9:86:dd:cb:4a:b7:06:40:c0:f2:7c:
3e:eb:7d:66:46:99:50:96:73:a3:a6:b3:f6:c3:e1:
39:42:b1:0e:dc:e6:c3:ee:e0:41:a7:04:5f:5d:ba:
d7:8e:61:66:2e:50:fe:14:d6:4f:56:69:e4:d3:73:
93:40:ee:c2:14:f8:00:b6:6a:0f:75:6f:07:55:c3:
8a:4d:39:19:14:4e:89:02:55:af:74:59:7c:3e:32:
51:28:ce:78:38:90:67:d3:d5:dd:7c:6c:a6:66:45:
4a:49:3d:90:eb:0c:db:ba:f8:b5:81:f2:55:1a:40:
69:d9:cb:e6:0e:38:64:0f:3f:79:5c:4c:72:e0:9b:
f9:b0:ae:8e:61:37:ea:ae:2c:dd:4b:94:73:c3:a9:
5f:95:1a:84:f5:dd:93:a6:f9:8c:dc:88:9a:3d:fc:
86:c0:06:b5:22:1e:3d:b3:a3:9d:29:74:85:9d:a7:
b5:75:9f:9e:5c:ac:3f:5e:d6:35:90:d4:1c:19:8f:
06:1e:bb:6d:93:c1:c9:51:48:58:a1:4a:76:84:e3:
79:54:61:a8:32:d8:69:59:f8:9e:77:f8:c5:29:f1:
23:a7:cd:55:58:84:38:11:b2:47:28:5b:c3:de:d2:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5F:5E:3A:82:C4:0F:66:66:64:29:51:CC:ED:9F:D3:F3:71:92:2C
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Z19eOoLED2ZmZClRzO2f0_Nxkiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:b000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:72:64:4a:76:fa:cb:1a:1c:4e:26:24:90:28:6f:21:01:da:
90:3e:cd:b3:4a:4a:66:8f:1c:e9:bf:5b:4d:3b:8a:68:ab:66:
6a:53:84:5d:98:4b:34:a2:aa:2e:4c:76:27:04:8b:99:f6:b3:
8a:77:07:d9:24:2c:94:d7:4b:b4:67:4c:15:42:ff:92:b9:b5:
18:84:b3:3d:43:0a:1a:34:bb:fa:99:a5:f3:35:8b:84:30:ac:
90:36:2d:16:12:0c:90:13:41:6f:96:c7:71:22:17:33:ce:ec:
58:31:fd:e1:f2:bd:d3:06:e3:c3:13:6d:41:3f:23:8b:ab:65:
57:d5:a8:f9:96:4d:0c:ce:e4:68:81:03:df:c6:8c:68:02:41:
de:da:16:ce:f0:26:48:11:3b:51:10:1b:74:03:d5:99:8a:24:
de:4b:fe:56:68:a6:96:43:92:e4:8c:3b:66:20:50:2f:66:89:
c5:82:de:4b:1f:9d:21:51:58:0c:c6:38:2b:cd:32:c1:9c:91:
cf:34:0e:34:db:94:1f:d4:d9:58:86:39:88:7d:a6:5e:e4:81:
a7:bb:ea:1e:74:f7:f0:7e:96:ef:6b:35:99:bc:1a:4d:6e:64:
cc:4a:8b:20:5b:c3:c3:1d:91:cd:3f:bf:27:4f:22:c0:6b:9b:
f2:e7:ee:9f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzJTQJvaI/fM0SJiryxYPUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjQwMTAyMDgzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzVmNWUzYTgyYzQwZjY2NjY2NDI5NTFjY2VkOWZkM2YzNzE5MjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy3Tyg8gQPhDvdzSXTMrpAEGqYbd
y0q3BkDA8nw+631mRplQlnOjprP2w+E5QrEO3ObD7uBBpwRfXbrXjmFmLlD+FNZP
Vmnk03OTQO7CFPgAtmoPdW8HVcOKTTkZFE6JAlWvdFl8PjJRKM54OJBn09XdfGym
ZkVKST2Q6wzbuvi1gfJVGkBp2cvmDjhkDz95XExy4Jv5sK6OYTfqrizdS5Rzw6lf
lRqE9d2TpvmM3IiaPfyGwAa1Ih49s6OdKXSFnae1dZ+eXKw/XtY1kNQcGY8GHrtt
k8HJUUhYoUp2hON5VGGoMthpWfied/jFKfEjp81VWIQ4EbJHKFvD3tK6jQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGdfXjqCxA9mZmQpUcztn9PzcZIsMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvWjE5ZU9vTEVEMlptWkNsUnpPMmYwX054a2l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgoCgLAw
DQYJKoZIhvcNAQELBQADggEBAKFyZEp2+ssaHE4mJJAobyEB2pA+zbNKSmaPHOm/
W007imirZmpThF2YSzSiqi5MdicEi5n2s4p3B9kkLJTXS7RnTBVC/5K5tRiEsz1D
Cho0u/qZpfM1i4QwrJA2LRYSDJATQW+Wx3EiFzPO7Fgx/eHyvdMG48MTbUE/I4ur
ZVfVqPmWTQzO5GiBA9/GjGgCQd7aFs7wJkgRO1EQG3QD1ZmKJN5L/lZoppZDkuSM
O2YgUC9micWC3ksfnSFRWAzGOCvNMsGckc80DjTblB/U2ViGOYh9pl7kgae76h50
9/B+lu9rNZm8Gk1uZMxKiyBbw8Mdkc0/vydPIsBrm/Ln7p8=
-----END CERTIFICATE-----
Generated at Sat May 4 00:08:47 2024 by rpki-client on console-fra.rpki-client.org