Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/zBfwc67C2gcCEJfkCXZ9GVpkpsU.roa
File: zBfwc67C2gcCEJfkCXZ9GVpkpsU.roa (raw, json)
Hash identifier: Z/GWZy0VgB6+jNeO62y33o7X5zFIj6J4Q4p2bJ7HUNQ=
Subject key identifier: CC:17:F0:73:AE:C2:DA:07:02:10:97:E4:09:76:7D:19:5A:64:A6:C5
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 018CC4933CD887E47A1BE644ED149D877C64
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/zBfwc67C2gcCEJfkCXZ9GVpkpsU.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208149
IP address blocks: 45.140.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3c:d8:87:e4:7a:1b:e6:44:ed:14:9d:87:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc17f073aec2da07021097e409767d195a64a6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:2e:71:fb:b2:d7:98:71:75:a0:84:35:6c:
9e:d9:29:64:c7:89:42:d0:6d:24:5b:fa:6b:be:a3:
ff:11:2c:94:eb:63:26:4f:9b:c4:b2:34:45:85:79:
3c:2c:53:7c:68:ac:d9:67:f3:95:34:40:4a:1a:11:
4c:e0:fb:23:46:e9:b0:9d:2c:38:9d:30:fe:af:86:
7c:85:a6:c0:c2:86:fa:05:45:1a:d7:88:88:58:b7:
ee:6c:cd:60:5f:e3:63:2f:24:5e:d4:25:74:f4:cf:
91:23:5c:be:1d:65:a6:11:99:b7:2b:f5:d3:fd:1a:
c1:04:fc:94:65:0d:ad:c2:8f:20:52:d4:df:97:e0:
4b:eb:3b:1f:93:c1:b4:f4:0b:2f:1b:a8:0a:1d:8d:
05:37:07:36:0f:94:6e:da:d7:94:74:96:6f:60:44:
ef:11:f2:43:69:89:d6:18:6f:75:87:b5:8e:34:2c:
a8:c7:65:85:a2:2a:ac:df:c1:80:62:ee:7d:0c:b8:
42:f1:76:3b:61:9e:85:3f:75:60:49:d3:d6:f9:5e:
01:82:aa:90:a9:de:50:69:02:0a:3a:fb:13:8e:53:
27:f6:6d:b0:d4:20:7a:b6:fa:db:51:08:5e:4b:86:
c5:a7:d4:5c:20:c3:c6:ea:0e:a6:56:1f:6a:d5:b9:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:17:F0:73:AE:C2:DA:07:02:10:97:E4:09:76:7D:19:5A:64:A6:C5
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/zBfwc67C2gcCEJfkCXZ9GVpkpsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:66:ff:5c:f5:98:7c:5e:dc:3d:c5:34:04:ee:c7:e0:23:b8:
6c:50:d5:dc:e7:48:32:32:73:d4:52:f7:9d:73:64:2a:d2:ba:
7e:77:06:99:45:11:66:eb:7c:6e:7f:23:59:85:2c:9b:a8:5e:
8e:8a:48:79:11:4b:03:3c:31:63:a4:d3:08:17:1e:d9:d8:c2:
d0:59:6a:01:6f:7e:7c:00:8b:08:2b:3d:97:08:77:eb:ab:4e:
46:14:c4:ad:ef:0a:77:fd:3b:0c:5b:14:44:50:50:14:a8:1d:
46:44:e2:ee:ab:cd:0c:5e:4a:2b:c5:04:08:35:1b:2c:b6:56:
d5:47:1d:3f:0b:39:14:3b:54:ab:bc:74:40:a3:37:31:df:47:
e4:22:be:ae:01:1c:8d:38:4a:74:77:3c:c1:ae:32:a9:37:4c:
fb:d1:40:f2:e4:8d:78:4a:fa:c6:af:f9:35:52:6b:54:08:b6:
90:a3:e9:15:24:2f:a0:93:c8:a5:34:aa:3f:6a:aa:90:e5:24:
3e:17:15:b2:50:a5:a9:4c:e6:ec:67:7c:41:a7:ac:97:4d:32:
0d:01:16:e0:9d:83:27:48:13:d5:00:46:e7:20:09:01:b2:8b:
5f:e5:cc:83:53:a4:c7:46:c8:07:1e:f3:66:48:60:af:51:25:
1f:42:0b:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkzzYh+R6G+ZE7RSdh3xkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3
NmFlYjIwHhcNMjQwMTAxMTAzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzE3ZjA3M2FlYzJkYTA3MDIxMDk3ZTQwOTc2N2QxOTVhNjRhNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhboucfuy15hxdaCENWye2Slkx4lC
0G0kW/prvqP/ESyU62MmT5vEsjRFhXk8LFN8aKzZZ/OVNEBKGhFM4PsjRumwnSw4
nTD+r4Z8habAwob6BUUa14iIWLfubM1gX+NjLyRe1CV09M+RI1y+HWWmEZm3K/XT
/RrBBPyUZQ2two8gUtTfl+BL6zsfk8G09AsvG6gKHY0FNwc2D5Ru2teUdJZvYETv
EfJDaYnWGG91h7WONCyox2WFoiqs38GAYu59DLhC8XY7YZ6FP3VgSdPW+V4BgqqQ
qd5QaQIKOvsTjlMn9m2w1CB6tvrbUQheS4bFp9RcIMPG6g6mVh9q1bnvpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwX8HOuwtoHAhCX5Al2fRlaZKbFMB8GA1UdIwQY
MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt
N2UwNWFkMDE5MGNlLzEvekJmd2M2N0MyZ2NDRUpma0NYWjlHVnBrcHNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl
LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYwpMA0G
CSqGSIb3DQEBCwUAA4IBAQBsZv9c9Zh8Xtw9xTQE7sfgI7hsUNXc50gyMnPUUved
c2Qq0rp+dwaZRRFm63xufyNZhSybqF6Oikh5EUsDPDFjpNMIFx7Z2MLQWWoBb358
AIsIKz2XCHfrq05GFMSt7wp3/TsMWxREUFAUqB1GROLuq80MXkorxQQINRsstlbV
Rx0/CzkUO1SrvHRAozcx30fkIr6uARyNOEp0dzzBrjKpN0z70UDy5I14SvrGr/k1
UmtUCLaQo+kVJC+gk8ilNKo/aqqQ5SQ+FxWyUKWpTObsZ3xBp6yXTTINARbgnYMn
SBPVAEbnIAkBsotf5cyDU6THRsgHHvNmSGCvUSUfQgvE
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:52 2024 by rpki-client on console-fra.rpki-client.org