Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZP9n2lpHe2AG_goxPnMNRtmyl5k.roa
File: ZP9n2lpHe2AG_goxPnMNRtmyl5k.roa (raw, json)
Hash identifier: AwtRw4j8PNWxutJuZNLoaH4GaV2xLxsIZlTRAYQJV3o=
Subject key identifier: 64:FF:67:DA:5A:47:7B:60:06:FE:0A:31:3E:73:0D:46:D9:B2:97:99
Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial: 018CC492ABF677AE07E9AA703F6CB894BCF9
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZP9n2lpHe2AG_goxPnMNRtmyl5k.roa
Signing time: Mon 01 Jan 2024 10:29:55 +0000
ROA not before: Mon 01 Jan 2024 10:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60565
IP address blocks: 185.28.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ab:f6:77:ae:07:e9:aa:70:3f:6c:b8:94:bc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
Validity
Not Before: Jan 1 10:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64ff67da5a477b6006fe0a313e730d46d9b29799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:26:3e:7f:3e:05:43:69:63:ac:b0:7a:e0:
50:80:14:d0:ff:b5:90:df:4c:50:e8:6c:00:df:2b:
89:aa:48:ee:bd:5c:73:4e:ac:9c:ae:48:2a:a0:77:
90:32:d1:05:af:21:d7:be:cc:d1:d0:40:a8:79:92:
ca:28:2c:21:2e:9b:5e:40:c0:e2:cd:ea:91:0e:b0:
e4:c0:4e:93:94:24:6a:bf:37:43:fb:39:fa:2a:76:
18:9f:8a:7b:47:0d:e6:ac:c8:c9:96:ab:07:f3:c9:
6e:0f:57:67:ff:ca:b8:1d:d6:4e:1b:44:1d:20:92:
21:48:9f:f6:38:f5:63:b8:4d:80:12:cb:50:04:93:
ac:3b:ce:09:74:72:c8:a4:86:b0:a1:01:35:5e:9d:
dd:a2:28:86:40:82:9d:ee:13:fb:94:3c:f9:d7:1f:
e6:f3:34:98:72:16:03:4b:cb:f3:fe:fb:8e:cd:2a:
db:6b:74:1d:30:39:01:0a:21:31:3d:65:4e:98:de:
ca:90:db:b2:a3:3e:0a:39:5f:cd:88:0a:53:60:d9:
57:6e:88:f8:3c:bb:29:0b:32:b3:dc:cc:4b:32:c0:
d3:80:14:51:25:ca:a9:d4:86:91:cc:0e:84:f2:41:
bf:67:44:1d:b0:35:9a:16:f2:22:8e:c2:60:bf:89:
4f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:67:DA:5A:47:7B:60:06:FE:0A:31:3E:73:0D:46:D9:B2:97:99
X509v3 Authority Key Identifier:
keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZP9n2lpHe2AG_goxPnMNRtmyl5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.178.0/24
Signature Algorithm: sha256WithRSAEncryption
17:22:06:46:8f:b6:e7:12:14:30:b2:eb:62:4d:d0:f4:0b:ca:
8c:cd:e7:d6:22:7c:86:29:ba:e7:66:3d:e8:8b:2a:f5:57:24:
1d:6a:64:ad:75:fb:eb:a8:3b:20:0e:7a:26:7f:48:43:1a:f8:
d4:12:16:23:10:60:2c:2e:0b:78:97:b7:38:72:bc:04:da:f1:
2a:13:22:29:96:f1:97:75:9e:ef:43:6c:0c:8c:ca:3e:76:0f:
25:16:5a:2a:f0:d7:e1:6d:d1:3e:02:aa:9a:59:c1:ab:99:c6:
ec:46:93:fe:08:c8:ed:9a:be:58:79:43:4a:9d:8e:51:9a:58:
ed:ab:29:10:98:9f:b5:da:d4:a6:7d:ec:b9:19:84:6e:42:91:
6e:2f:6b:d7:08:b1:90:be:1e:a4:aa:98:46:1f:e6:af:ce:cd:
38:23:a9:2a:52:f5:30:73:b3:54:e0:e1:d2:0d:51:b2:be:9b:
a9:a8:ab:89:cb:8d:f8:4d:e5:09:a4:6e:7b:41:91:d2:22:36:
3d:32:17:73:f7:48:7e:d5:63:7a:00:72:a5:17:da:53:bf:bd:
cd:c2:37:18:17:22:eb:c4:c1:eb:d2:26:f9:e9:3d:b7:f8:00:
b7:5a:99:be:0f:1d:00:50:a9:e8:f7:da:4a:87:6a:d2:57:81:
77:b8:a8:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkqv2d64H6apwP2y4lLz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZTNlZDA2ZTg4ZTU1OTFkOTA5NjY3Njk1MTU1NWMwZGM1
MzVjMTkwHhcNMjQwMTAxMTAyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGZmNjdkYTVhNDc3YjYwMDZmZTBhMzEzZTczMGQ0NmQ5YjI5Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p4mPn8+BUNpY6yweuBQgBTQ/7WQ
30xQ6GwA3yuJqkjuvVxzTqycrkgqoHeQMtEFryHXvszR0ECoeZLKKCwhLpteQMDi
zeqRDrDkwE6TlCRqvzdD+zn6KnYYn4p7Rw3mrMjJlqsH88luD1dn/8q4HdZOG0Qd
IJIhSJ/2OPVjuE2AEstQBJOsO84JdHLIpIawoQE1Xp3doiiGQIKd7hP7lDz51x/m
8zSYchYDS8vz/vuOzSrba3QdMDkBCiExPWVOmN7KkNuyoz4KOV/NiApTYNlXboj4
PLspCzKz3MxLMsDTgBRRJcqp1IaRzA6E8kG/Z0QdsDWaFvIijsJgv4lP0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGT/Z9paR3tgBv4KMT5zDUbZspeZMB8GA1UdIwQY
MBaAFGbj7QbojlWR2QlmdpUVVcDcU1wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmIt
ZGUyMWY1ZmVlM2RiLzEvWlA5bjJscEhlMkFHX2dveFBuTU5SdG15bDVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmItZGUyMWY1ZmVlM2Ri
LzEvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRyyMA0G
CSqGSIb3DQEBCwUAA4IBAQAXIgZGj7bnEhQwsutiTdD0C8qMzefWInyGKbrnZj3o
iyr1VyQdamStdfvrqDsgDnomf0hDGvjUEhYjEGAsLgt4l7c4crwE2vEqEyIplvGX
dZ7vQ2wMjMo+dg8lFloq8NfhbdE+AqqaWcGrmcbsRpP+CMjtmr5YeUNKnY5Rmljt
qykQmJ+12tSmfey5GYRuQpFuL2vXCLGQvh6kqphGH+avzs04I6kqUvUwc7NU4OHS
DVGyvpupqKuJy434TeUJpG57QZHSIjY9Mhdz90h+1WN6AHKlF9pTv73NwjcYFyLr
xMHr0ib56T23+AC3Wpm+Dx0AUKno99pKh2rSV4F3uKjk
-----END CERTIFICATE-----
Generated at Fri Jun 7 19:37:04 2024 by rpki-client on console-ams.rpki-client.org