Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/zoGIyV1IOyNkkhE89Udsw2K-7D4.roa
File: zoGIyV1IOyNkkhE89Udsw2K-7D4.roa (raw, json)
Hash identifier: odvte4x/8Xt2r3Sdjs2M/W547EDORk7OhEKGosP9d3g=
Subject key identifier: CE:81:88:C9:5D:48:3B:23:64:92:11:3C:F5:47:6C:C3:62:BE:EC:3E
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 018CC870437770C5832A75E888DFBFA247E8
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/zoGIyV1IOyNkkhE89Udsw2K-7D4.roa
Signing time: Tue 02 Jan 2024 04:30:49 +0000
ROA not before: Tue 02 Jan 2024 04:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203108
IP address blocks: 185.144.220.0/22 maxlen: 24
2a07:5b00::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:43:77:70:c5:83:2a:75:e8:88:df:bf:a2:47:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jan 2 04:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8188c95d483b236492113cf5476cc362beec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:3a:a7:19:3d:47:6d:e8:fe:61:16:89:0c:
dc:07:40:40:d7:d4:87:57:6d:e8:3a:9b:70:9a:20:
2d:06:6c:75:85:fb:c4:3a:84:b5:83:c3:01:bd:3d:
63:cf:3b:5b:ae:f0:5b:f2:9d:bd:55:9a:88:cf:b5:
63:7a:54:4f:1e:27:05:50:29:94:06:39:21:08:a8:
31:9f:c3:e8:5a:3b:09:ef:78:ff:1d:94:3a:86:df:
f3:a5:80:d9:dc:6d:c8:4c:b0:48:34:08:8d:a8:05:
e1:73:0a:90:c5:c4:07:10:50:6b:79:c9:74:74:57:
44:29:25:97:3f:c6:51:38:a9:e2:a2:9e:7a:b0:54:
65:7d:a0:ff:a6:48:e9:8c:d3:bd:cd:5a:87:7b:f6:
a7:27:10:c2:a0:0d:8e:15:cc:fd:41:8d:21:ea:1b:
6d:0f:cf:1b:b2:a9:ac:85:60:57:0d:7c:14:6b:6a:
52:d1:75:39:1c:42:35:ea:c5:8e:14:1a:20:ad:29:
23:92:06:e5:c5:83:f2:0b:84:7f:1f:33:a7:c3:f0:
a3:fb:0e:68:19:02:6b:f6:de:79:26:5e:66:bd:5e:
1d:2c:3e:4b:44:3f:97:9a:fc:ae:0e:e6:e8:ec:6f:
57:67:75:02:76:61:c2:8a:5a:2e:93:de:c4:d6:4e:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:88:C9:5D:48:3B:23:64:92:11:3C:F5:47:6C:C3:62:BE:EC:3E
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/zoGIyV1IOyNkkhE89Udsw2K-7D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.220.0/22
IPv6:
2a07:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
7f:09:14:25:c8:b0:cd:3e:1b:a4:5c:48:08:83:d4:20:4a:3b:
3d:7d:b5:8d:d1:cf:8b:ea:1d:0b:88:b1:d1:6e:e7:06:b0:cc:
bc:ef:54:10:c7:d2:9f:7b:4c:41:42:9a:9f:4f:e6:6f:ad:6b:
a0:58:bf:93:bb:03:58:1a:3b:5a:1d:b6:87:84:b7:d3:27:d2:
f4:0a:f3:40:34:38:fa:5b:d1:82:64:8c:da:f4:8c:81:42:a4:
24:ef:b0:22:fe:ca:5c:29:08:51:2e:88:53:c6:db:3b:b9:ac:
23:07:29:e0:d4:13:22:30:18:75:fd:b9:42:aa:48:4e:13:e5:
4c:30:7d:c1:84:23:fb:e1:be:49:9b:51:cf:e2:57:e8:32:66:
1c:a2:ea:e5:e4:e1:47:97:c9:b2:a0:ad:ff:91:af:e4:ec:56:
6a:d9:d6:4f:7b:15:4b:6d:ec:50:1a:80:a2:4b:3c:56:19:7d:
4a:52:eb:95:8f:c6:b8:89:d4:05:87:8f:4b:52:16:6b:26:94:
f0:33:19:cf:12:19:a3:2a:23:8d:84:82:86:a2:79:0a:77:37:
b1:5c:96:03:ba:26:79:11:85:3e:9e:c0:39:c6:a7:61:20:f3:
db:a8:06:e4:4e:76:cf:10:de:83:6b:ee:4a:6f:53:6c:07:b4:
80:dd:aa:7b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIcEN3cMWDKnXoiN+/okfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjU4OTFhMjZjZmE0MzZhMjNlN2UxZmY5NzY2NDhiZWU3
OWVmNzcwHhcNMjQwMTAyMDQzMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTgxODhjOTVkNDgzYjIzNjQ5MjExM2NmNTQ3NmNjMzYyYmVlYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvow6pxk9R23o/mEWiQzcB0BA19SH
V23oOptwmiAtBmx1hfvEOoS1g8MBvT1jzztbrvBb8p29VZqIz7VjelRPHicFUCmU
BjkhCKgxn8PoWjsJ73j/HZQ6ht/zpYDZ3G3ITLBINAiNqAXhcwqQxcQHEFBrecl0
dFdEKSWXP8ZROKniop56sFRlfaD/pkjpjNO9zVqHe/anJxDCoA2OFcz9QY0h6htt
D88bsqmshWBXDXwUa2pS0XU5HEI16sWOFBogrSkjkgblxYPyC4R/HzOnw/Cj+w5o
GQJr9t55Jl5mvV4dLD5LRD+XmvyuDubo7G9XZ3UCdmHCilouk97E1k4iOQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFM6BiMldSDsjZJIRPPVHbMNivuw+MB8GA1UdIwQY
MBaAFJH1iRomz6Q2oj5+H/l2ZIvuee93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzkt
ZGFhNzM5MGI1YmE3LzEvem9HSXlWMUlPeU5ra2hFODlVZHN3MkstN0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzktZGFhNzM5MGI1YmE3
LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZDcMA0E
AgACMAcDBQMqB1sAMA0GCSqGSIb3DQEBCwUAA4IBAQB/CRQlyLDNPhukXEgIg9Qg
Sjs9fbWN0c+L6h0LiLHRbucGsMy871QQx9Kfe0xBQpqfT+ZvrWugWL+TuwNYGjta
HbaHhLfTJ9L0CvNANDj6W9GCZIza9IyBQqQk77Ai/spcKQhRLohTxts7uawjByng
1BMiMBh1/blCqkhOE+VMMH3BhCP74b5Jm1HP4lfoMmYcourl5OFHl8myoK3/ka/k
7FZq2dZPexVLbexQGoCiSzxWGX1KUuuVj8a4idQFh49LUhZrJpTwMxnPEhmjKiON
hIKGonkKdzexXJYDuiZ5EYU+nsA5xqdhIPPbqAbkTnbPEN6Da+5Kb1NsB7SA3ap7
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:44:47 2024 by rpki-client on console-fra.rpki-client.org