Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zA3I63Idda3lePMw--61fwIc4oA.roa
File: zA3I63Idda3lePMw--61fwIc4oA.roa (raw, json)
Hash identifier: AuDqxdejDmMsNJT0/OQc251ls4w/z3lr7g+wKjTokMA=
Subject key identifier: CC:0D:C8:EB:72:1D:75:AD:E5:78:F3:30:FB:EE:B5:7F:02:1C:E2:80
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 018CC4938BA69240B9CD88818C4BC47797C1
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zA3I63Idda3lePMw--61fwIc4oA.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12859
IP address blocks: 82.150.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8b:a6:92:40:b9:cd:88:81:8c:4b:c4:77:97:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc0dc8eb721d75ade578f330fbeeb57f021ce280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:01:87:59:08:c2:a9:59:d1:54:0a:23:51:
71:bc:1d:41:0c:dd:ce:8e:d5:26:d3:cc:da:3e:09:
18:c5:7e:8b:5b:5e:15:21:0f:1b:b2:04:57:98:c6:
1c:be:9f:5b:e0:c7:68:8e:6f:b5:a2:6f:b0:24:2e:
95:72:b6:41:26:4b:83:97:61:43:02:0f:64:28:59:
ae:44:9d:c1:73:41:ff:27:09:9a:99:6d:98:a9:c7:
bd:ad:b7:6b:df:6c:f4:ca:9a:42:f6:c6:41:a2:a8:
66:ef:bf:70:2b:be:e3:fb:26:5a:18:b2:0f:da:72:
01:34:1d:32:4b:22:d8:6d:d0:1e:52:b6:ed:f8:69:
64:9b:5d:a4:49:fc:b8:8b:73:ca:0d:5e:40:76:a6:
e5:fc:3b:c1:6b:0f:d8:61:ae:d3:b5:e3:15:3c:b8:
34:5c:62:ba:f5:8b:21:7f:b7:22:57:10:2f:5a:e0:
d2:73:d8:fd:1b:66:58:cc:b2:57:72:8a:69:e3:cb:
75:52:2d:e7:d8:9a:8c:5d:f9:8b:ea:3b:a3:48:14:
a0:d0:d5:a8:8a:14:05:1a:d0:93:30:86:50:34:38:
af:09:8e:ef:8a:22:43:ca:c6:03:f5:9f:ae:74:29:
b3:d7:5b:e7:89:97:62:33:89:02:27:83:52:87:55:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:C8:EB:72:1D:75:AD:E5:78:F3:30:FB:EE:B5:7F:02:1C:E2:80
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zA3I63Idda3lePMw--61fwIc4oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:da:2f:0e:96:b8:50:55:06:7a:7b:fc:4e:e2:e7:50:79:df:
c9:9f:1a:09:f8:d7:cb:e9:b8:6c:36:b7:ee:b7:ef:08:fa:44:
b3:2a:17:ec:2d:12:ce:1d:c2:75:62:14:7d:9f:be:21:d8:40:
a9:c7:1e:83:86:ba:b9:bf:bf:13:31:52:4c:44:c3:ae:26:7f:
2d:d0:1d:bd:14:31:26:78:f9:c4:5c:ce:10:98:74:ce:8c:8a:
33:b4:05:6c:8c:93:bb:46:c6:5b:2d:29:18:03:e3:00:a6:7e:
cf:7b:0f:ec:d7:f4:ec:c9:23:74:0d:4b:a9:66:39:98:69:eb:
30:f1:d4:33:c1:0a:1d:e3:47:72:5a:89:6b:2a:51:bb:b5:80:
52:7c:25:b7:78:79:13:ad:44:90:96:27:34:2c:7b:00:7f:1e:
39:cb:1b:81:94:dd:11:8e:1b:22:d7:09:61:84:f6:fd:07:3e:
1a:93:1a:c7:cd:28:9b:8e:96:f5:57:d3:67:0d:af:d0:8d:a0:
a4:6b:17:df:6e:f8:6d:e1:32:11:d3:0e:ad:b3:e4:41:cd:2d:
32:f6:19:97:8f:a2:98:f6:d3:bc:db:54:c2:e4:6b:5b:d1:da:
f9:82:01:b0:22:85:8b:b5:d5:e5:14:03:ac:fa:c8:7d:e6:0d:
ca:a7:17:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk4umkkC5zYiBjEvEd5fBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjQwMTAxMTAzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzBkYzhlYjcyMWQ3NWFkZTU3OGYzMzBmYmVlYjU3ZjAyMWNlMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiwBh1kIwqlZ0VQKI1FxvB1BDN3O
jtUm08zaPgkYxX6LW14VIQ8bsgRXmMYcvp9b4Mdojm+1om+wJC6VcrZBJkuDl2FD
Ag9kKFmuRJ3Bc0H/JwmamW2Yqce9rbdr32z0yppC9sZBoqhm779wK77j+yZaGLIP
2nIBNB0ySyLYbdAeUrbt+Glkm12kSfy4i3PKDV5Adqbl/DvBaw/YYa7TteMVPLg0
XGK69Yshf7ciVxAvWuDSc9j9G2ZYzLJXcopp48t1Ui3n2JqMXfmL6jujSBSg0NWo
ihQFGtCTMIZQNDivCY7viiJDysYD9Z+udCmz11vniZdiM4kCJ4NSh1XYYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMwNyOtyHXWt5XjzMPvutX8CHOKAMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvekEzSTYzSWRkYTNsZVBNdy0tNjFmd0ljNG9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaJMA0G
CSqGSIb3DQEBCwUAA4IBAQB/2i8OlrhQVQZ6e/xO4udQed/JnxoJ+NfL6bhsNrfu
t+8I+kSzKhfsLRLOHcJ1YhR9n74h2ECpxx6Dhrq5v78TMVJMRMOuJn8t0B29FDEm
ePnEXM4QmHTOjIoztAVsjJO7RsZbLSkYA+MApn7Pew/s1/TsySN0DUupZjmYaesw
8dQzwQod40dyWolrKlG7tYBSfCW3eHkTrUSQlic0LHsAfx45yxuBlN0Rjhsi1wlh
hPb9Bz4akxrHzSibjpb1V9NnDa/QjaCkaxffbvht4TIR0w6ts+RBzS0y9hmXj6KY
9tO821TC5Gtb0dr5ggGwIoWLtdXlFAOs+sh95g3Kpxca
-----END CERTIFICATE-----
Generated at Sun May 19 07:45:18 2024 by rpki-client on console-fra.rpki-client.org