Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zd7lGmNkZtVVG4nU6471biPk3x8.roa
File: zd7lGmNkZtVVG4nU6471biPk3x8.roa (raw, json)
Hash identifier: 3cOPhl3d2RKBpcq46OS2X4xjN3iT6COaOjnfryHyNMc=
Subject key identifier: CD:DE:E5:1A:63:64:66:D5:55:1B:89:D4:EB:8E:F5:6E:23:E4:DF:1F
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018F2F540C503313E6FF874B10C80CA1778C
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zd7lGmNkZtVVG4nU6471biPk3x8.roa
Signing time: Tue 30 Apr 2024 14:06:28 +0000
ROA not before: Tue 30 Apr 2024 14:06:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 87.248.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:54:0c:50:33:13:e6:ff:87:4b:10:c8:0c:a1:77:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Apr 30 14:06:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cddee51a636466d5551b89d4eb8ef56e23e4df1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:e6:99:2b:45:9f:06:6d:c6:1c:a0:b4:0d:
68:4e:28:3a:40:55:f4:1f:7a:eb:18:b5:8f:e2:25:
92:4a:85:83:30:a5:a7:10:1d:35:88:65:bb:2f:9c:
e3:88:5c:7e:94:b0:bf:64:18:1e:bf:cb:4f:92:4c:
66:50:9f:67:08:13:80:b5:50:7a:ad:91:6a:fb:c9:
db:e7:a4:75:cd:e7:44:ec:73:e5:72:3b:6d:15:16:
be:d6:a0:81:f8:e5:06:3e:01:cf:77:76:1c:2e:2d:
fa:ea:eb:fd:2f:d3:92:ae:5b:da:c6:bf:bd:f5:32:
bc:46:23:15:91:41:82:1b:9f:9b:71:35:67:21:01:
be:cf:02:31:b2:08:e4:e5:6b:46:f8:4f:a7:6e:e4:
32:5c:a9:9e:04:b4:6f:35:09:11:2e:71:e5:f8:b3:
91:03:ed:a6:00:4b:32:b9:0f:99:23:c5:7b:ce:eb:
d5:9d:c4:0b:f0:d3:06:38:50:fd:dc:9d:da:36:12:
c6:8f:6b:27:c3:67:15:bc:b7:62:4f:04:f3:83:53:
e7:16:82:e3:3c:8a:29:52:c4:c1:9c:0b:30:2e:23:
2a:41:71:f2:d8:f6:70:2c:d2:06:7e:7c:04:b6:4d:
31:66:48:ee:53:8a:84:a7:ed:d7:15:6d:44:0d:bb:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:E5:1A:63:64:66:D5:55:1B:89:D4:EB:8E:F5:6E:23:E4:DF:1F
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zd7lGmNkZtVVG4nU6471biPk3x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.136.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ed:d9:c7:5e:48:29:d0:ad:a6:81:31:01:8e:2a:9a:2a:4a:
4e:63:98:b8:d4:0b:b7:7d:81:bc:b9:08:50:49:7c:7b:42:65:
0d:04:bc:24:61:fb:fd:f3:e2:c5:c8:fd:04:3d:a1:a8:38:19:
aa:2e:72:ba:e3:f0:95:63:93:fd:f0:bc:3a:e5:1b:04:7d:d4:
a8:52:46:19:1e:0e:a8:52:ba:e1:36:8a:90:84:a6:7c:7e:d6:
ec:d6:29:92:36:95:01:b4:e2:df:e2:fd:fd:94:d0:7b:7f:90:
12:94:39:4d:6f:ea:24:c9:23:49:a0:cf:03:5a:e6:22:a4:b1:
8d:95:2a:66:11:bc:42:c6:28:d9:4e:78:ee:70:a1:bf:28:ba:
9d:25:dd:af:74:03:02:d8:d7:06:6e:c0:54:4b:1a:c2:ce:21:
1e:ed:16:61:fb:01:6d:ec:fb:0c:89:64:50:40:3c:73:b6:67:
91:01:1f:2b:c0:7b:62:5f:38:85:c9:c0:fb:2d:05:4a:21:cf:
25:08:0e:3f:a1:ef:d6:70:fe:3f:36:7d:13:37:f0:21:f0:20:
01:83:55:51:22:7c:30:4f:0c:d1:7b:10:3d:95:74:86:00:16:
72:b4:06:48:f7:c0:44:bd:c0:80:52:75:4a:9b:67:1e:89:4e:
f3:59:24:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8vVAxQMxPm/4dLEMgMoXeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjQwNDMwMTQwNjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGRlZTUxYTYzNjQ2NmQ1NTUxYjg5ZDRlYjhlZjU2ZTIzZTRkZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW7mmStFnwZtxhygtA1oTig6QFX0
H3rrGLWP4iWSSoWDMKWnEB01iGW7L5zjiFx+lLC/ZBgev8tPkkxmUJ9nCBOAtVB6
rZFq+8nb56R1zedE7HPlcjttFRa+1qCB+OUGPgHPd3YcLi366uv9L9OSrlvaxr+9
9TK8RiMVkUGCG5+bcTVnIQG+zwIxsgjk5WtG+E+nbuQyXKmeBLRvNQkRLnHl+LOR
A+2mAEsyuQ+ZI8V7zuvVncQL8NMGOFD93J3aNhLGj2snw2cVvLdiTwTzg1PnFoLj
PIopUsTBnAswLiMqQXHy2PZwLNIGfnwEtk0xZkjuU4qEp+3XFW1EDbsr2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM3e5RpjZGbVVRuJ1OuO9W4j5N8fMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvemQ3bEdtTmtadFZWRzRuVTY0NzFiaVBrM3g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iIMA0G
CSqGSIb3DQEBCwUAA4IBAQBz7dnHXkgp0K2mgTEBjiqaKkpOY5i41Au3fYG8uQhQ
SXx7QmUNBLwkYfv98+LFyP0EPaGoOBmqLnK64/CVY5P98Lw65RsEfdSoUkYZHg6o
UrrhNoqQhKZ8ftbs1imSNpUBtOLf4v39lNB7f5ASlDlNb+okySNJoM8DWuYipLGN
lSpmEbxCxijZTnjucKG/KLqdJd2vdAMC2NcGbsBUSxrCziEe7RZh+wFt7PsMiWRQ
QDxztmeRAR8rwHtiXziFycD7LQVKIc8lCA4/oe/WcP4/Nn0TN/Ah8CABg1VRInww
TwzRexA9lXSGABZytAZI98BEvcCAUnVKm2ceiU7zWSTz
-----END CERTIFICATE-----
Generated at Mon May 27 12:05:59 2024 by rpki-client on console-ams.rpki-client.org