Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1-ZzmXJj6xUZjqOjo9KmH6v3YHNM.roa
File: 1-ZzmXJj6xUZjqOjo9KmH6v3YHNM.roa (raw, json)
Hash identifier: GmpHOTEnhPba5m0S3oypSfNOZqkoVRBNNdPmDFM4Vhk=
Subject key identifier: F9:9C:E6:5C:98:FA:C5:46:63:A8:E8:E8:F4:A9:87:EA:FD:D8:1C:D3
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 018CC7273F4C5C490C910EC877AA97019EA8
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1-ZzmXJj6xUZjqOjo9KmH6v3YHNM.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204715
IP address blocks: 194.183.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3f:4c:5c:49:0c:91:0e:c8:77:aa:97:01:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f99ce65c98fac54663a8e8e8f4a987eafdd81cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3c:7e:ff:46:7c:97:18:47:0a:43:fe:d5:d8:
0f:55:ae:7a:87:2a:4d:80:fc:df:5b:b5:f9:2c:84:
a9:6c:08:38:31:43:96:7d:d8:9f:8b:4b:c1:9a:5a:
88:6f:08:c5:1f:93:8f:b1:ca:eb:71:92:be:56:e0:
fe:88:db:6a:a0:1c:af:d5:dc:62:3b:73:25:22:de:
84:7d:9d:e4:00:68:72:0e:d1:d7:eb:7d:7f:f9:b0:
b1:7d:e1:93:c0:06:ea:ea:b1:8b:f0:0a:7b:3f:91:
c8:d2:19:03:0c:94:f0:7d:44:2b:87:48:a2:a1:92:
47:25:d5:26:36:92:57:f8:60:64:dd:5a:d4:67:b9:
14:a0:b1:29:1a:d8:dd:a7:8d:1f:2a:16:d7:a7:e1:
9b:48:ed:88:c6:eb:76:9b:76:98:54:4c:54:a2:b9:
22:43:6c:82:19:a2:ee:d9:0a:7d:a8:ea:ad:ef:fa:
27:5c:5b:96:f0:93:52:6a:a6:e6:c6:6c:0f:a1:0d:
8b:9e:c3:6f:87:df:49:66:a4:89:19:67:88:1a:b0:
e5:3c:2e:59:d3:c4:96:e5:01:a0:19:6d:7d:23:35:
ef:b7:fa:30:70:bf:64:11:5b:f1:31:26:c0:9b:17:
59:1f:c9:eb:d3:b9:bf:37:5d:f9:6d:a3:c2:60:b7:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:E6:5C:98:FA:C5:46:63:A8:E8:E8:F4:A9:87:EA:FD:D8:1C:D3
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/1-ZzmXJj6xUZjqOjo9KmH6v3YHNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.163.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4d:9e:5e:a5:ce:cd:1e:19:c5:cf:76:de:7a:26:52:f5:86:
5b:7a:fe:b8:3e:7c:ef:65:e1:0f:98:79:d4:bd:06:2c:fc:16:
9f:bd:0a:fa:e6:52:f1:24:be:9b:b7:79:d0:74:b2:ca:e7:20:
62:17:0f:64:ae:4c:60:1b:69:38:fb:9e:4a:f9:e5:a9:1e:cf:
30:00:a8:7c:c2:fd:fc:57:e4:50:af:53:c2:47:b2:39:40:b7:
4f:77:53:2b:cd:d4:f0:e5:3a:48:4d:ce:98:03:5e:93:8b:ab:
0d:ac:ec:1d:51:a5:30:45:a4:79:cf:c6:32:58:e2:97:e7:ae:
27:0f:19:9d:a1:32:ba:25:dd:6f:f0:f5:d2:85:c1:28:ab:cc:
98:87:f2:73:c7:f4:86:6a:95:a6:c5:c8:56:58:31:b5:f9:0c:
dc:86:a9:15:8d:1d:49:e7:12:e3:f1:d3:7f:51:7b:e5:60:38:
fd:a4:ba:93:d3:f9:c1:59:30:29:41:32:41:0f:fd:96:ec:fb:
52:9f:bd:d0:9a:a0:39:4a:c3:80:da:c6:06:08:1f:67:cf:f2:
52:0b:98:b2:89:84:ae:3c:e8:4a:55:6f:c7:67:66:aa:83:aa:
e7:6f:c8:91:b0:35:ee:09:ca:bd:2a:fd:70:54:13:89:58:bd:
9b:26:6c:84
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzHJz9MXEkMkQ7Id6qXAZ6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjQwMTAxMjIzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTljZTY1Yzk4ZmFjNTQ2NjNhOGU4ZThmNGE5ODdlYWZkZDgxY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDx+/0Z8lxhHCkP+1dgPVa56hypN
gPzfW7X5LISpbAg4MUOWfdifi0vBmlqIbwjFH5OPscrrcZK+VuD+iNtqoByv1dxi
O3MlIt6EfZ3kAGhyDtHX631/+bCxfeGTwAbq6rGL8Ap7P5HI0hkDDJTwfUQrh0ii
oZJHJdUmNpJX+GBk3VrUZ7kUoLEpGtjdp40fKhbXp+GbSO2Ixut2m3aYVExUorki
Q2yCGaLu2Qp9qOqt7/onXFuW8JNSaqbmxmwPoQ2LnsNvh99JZqSJGWeIGrDlPC5Z
08SW5QGgGW19IzXvt/owcL9kEVvxMSbAmxdZH8nr07m/N135baPCYLeK6wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmc5lyY+sVGY6jo6PSph+r92BzTMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEvMS1aem1YSmo2eFVaanFPam85S21INnYzWUhOTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2YvMThjNDk4LTIxNzEtNGUxYy04ZDgwLWE2YzQ5ZWIyODI4
Ny8xL2RPUEROcGNnbExHb3dUMUJnV2hYMFplanF1ay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMK3ozAN
BgkqhkiG9w0BAQsFAAOCAQEAaE2eXqXOzR4Zxc923nomUvWGW3r+uD5872XhD5h5
1L0GLPwWn70K+uZS8SS+m7d50HSyyucgYhcPZK5MYBtpOPueSvnlqR7PMACofML9
/FfkUK9TwkeyOUC3T3dTK83U8OU6SE3OmANek4urDazsHVGlMEWkec/GMljil+eu
Jw8ZnaEyuiXdb/D10oXBKKvMmIfyc8f0hmqVpsXIVlgxtfkM3IapFY0dSecS4/HT
f1F75WA4/aS6k9P5wVkwKUEyQQ/9luz7Up+90JqgOUrDgNrGBggfZ8/yUguYsomE
rjzoSlVvx2dmqoOq52/IkbA17gnKvSr9cFQTiVi9myZshA==
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:20:04 2024 by rpki-client on console-ams.rpki-client.org