Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/KzPAXMb-7bOKMJoCAw7d-7xvajg.roa
File: KzPAXMb-7bOKMJoCAw7d-7xvajg.roa (raw, json)
Hash identifier: YKHL8oBaCqkWfrz3jprwBK4QmvM85B0IYkIlbAs6n/k=
Subject key identifier: 2B:33:C0:5C:C6:FE:ED:B3:8A:30:9A:02:03:0E:DD:FB:BC:6F:6A:38
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 018CC3B736E4FBB4483B41C5422EC1EDF02B
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/KzPAXMb-7bOKMJoCAw7d-7xvajg.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198298
IP address blocks: 194.33.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Nov 2024 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:36:e4:fb:b4:48:3b:41:c5:42:2e:c1:ed:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b33c05cc6feedb38a309a02030eddfbbc6f6a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:be:c2:c9:03:32:99:42:e7:8a:a9:ce:69:
35:05:aa:1a:d8:4d:c0:a4:e5:4a:0d:4a:3c:45:b5:
89:e9:5d:b6:96:c5:f2:f0:cc:2d:08:52:d2:2d:b4:
65:05:a1:20:86:96:71:ba:98:17:47:f6:42:38:5e:
a5:a5:fe:a4:9b:64:58:b2:72:a8:58:ad:2b:fe:6c:
45:c3:56:1a:8a:fe:52:52:f0:d9:a9:04:d0:1c:2e:
81:0b:ea:f1:c0:3a:23:eb:3e:6a:3f:0d:57:5f:9b:
0e:94:99:71:fd:28:31:2a:37:da:64:52:d4:ad:b6:
12:b4:45:2b:4b:88:7e:09:03:f9:47:5d:aa:2b:1d:
23:a8:86:4f:40:4f:cf:29:6d:d6:a0:27:ae:d0:5f:
59:e4:08:99:9f:55:5d:43:50:0c:6d:74:5d:9b:60:
45:94:62:07:b1:1a:99:84:0f:a2:9a:59:30:3e:56:
f0:c4:8b:7e:b0:67:15:8d:05:a9:de:56:c8:47:7b:
10:26:f5:b4:d1:30:8d:55:79:56:58:ed:1c:44:76:
7b:01:26:10:a5:7d:2c:fd:af:ab:48:c9:8d:eb:81:
32:8b:08:a3:a5:2c:99:85:37:2e:e7:31:dd:db:50:
dc:aa:d3:15:48:2b:60:88:66:ad:34:a4:2b:a2:c9:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:C0:5C:C6:FE:ED:B3:8A:30:9A:02:03:0E:DD:FB:BC:6F:6A:38
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/KzPAXMb-7bOKMJoCAw7d-7xvajg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.12.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ff:c0:ca:f0:43:a6:31:c1:43:09:90:c3:bb:6d:70:36:ce:
f2:03:b5:36:39:fd:77:a8:40:8d:09:1b:a2:01:8a:8b:1c:b9:
56:cd:93:57:0c:1a:6c:c2:9a:ad:71:60:7b:9d:05:64:54:ba:
b8:76:13:73:2e:d8:1d:13:bc:3d:21:ec:f5:14:6a:da:8c:c1:
da:cc:60:9f:f2:c8:6e:5d:0d:25:4b:3e:1d:b2:05:9d:f0:ea:
b0:06:53:74:07:a2:f0:a4:93:f2:f5:81:6c:a0:2a:a2:64:13:
0e:94:74:87:30:08:e2:ef:7f:48:f0:f6:52:d5:90:0c:56:ad:
44:df:fc:d6:ac:33:ca:95:4d:1d:77:4e:67:aa:b6:f5:7d:98:
48:bf:d4:9d:e9:29:e1:cc:c9:c7:a4:0f:c4:fb:70:3a:c9:4c:
47:ad:75:b6:00:44:c7:27:56:d5:86:be:39:57:36:b5:5c:24:
5d:c1:55:d2:68:9c:be:87:28:7a:ed:99:b7:f7:3f:ad:2c:e8:
08:18:9d:00:27:18:52:3f:13:f8:90:30:58:0b:4b:e7:c9:7c:
c1:38:a8:ea:ae:f9:7b:c2:db:72:8e:df:d5:e8:44:11:5d:be:
e9:4f:d0:9e:00:5e:0d:ef:75:0a:e2:42:c4:04:e1:7d:c0:dc:
57:c1:40:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtzbk+7RIO0HFQi7B7fArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjQwMTAxMDYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjMzYzA1Y2M2ZmVlZGIzOGEzMDlhMDIwMzBlZGRmYmJjNmY2YTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhem+wskDMplC54qpzmk1Baoa2E3A
pOVKDUo8RbWJ6V22lsXy8MwtCFLSLbRlBaEghpZxupgXR/ZCOF6lpf6km2RYsnKo
WK0r/mxFw1Yaiv5SUvDZqQTQHC6BC+rxwDoj6z5qPw1XX5sOlJlx/SgxKjfaZFLU
rbYStEUrS4h+CQP5R12qKx0jqIZPQE/PKW3WoCeu0F9Z5AiZn1VdQ1AMbXRdm2BF
lGIHsRqZhA+imlkwPlbwxIt+sGcVjQWp3lbIR3sQJvW00TCNVXlWWO0cRHZ7ASYQ
pX0s/a+rSMmN64EyiwijpSyZhTcu5zHd21DcqtMVSCtgiGatNKQrosnAeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCszwFzG/u2zijCaAgMO3fu8b2o4MB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvS3pQQVhNYi03Yk9LTUpvQ0F3N2QtN3h2YWpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiEMMA0G
CSqGSIb3DQEBCwUAA4IBAQAD/8DK8EOmMcFDCZDDu21wNs7yA7U2Of13qECNCRui
AYqLHLlWzZNXDBpswpqtcWB7nQVkVLq4dhNzLtgdE7w9Iez1FGrajMHazGCf8shu
XQ0lSz4dsgWd8OqwBlN0B6LwpJPy9YFsoCqiZBMOlHSHMAji739I8PZS1ZAMVq1E
3/zWrDPKlU0dd05nqrb1fZhIv9Sd6SnhzMnHpA/E+3A6yUxHrXW2AETHJ1bVhr45
Vza1XCRdwVXSaJy+hyh67Zm39z+tLOgIGJ0AJxhSPxP4kDBYC0vnyXzBOKjqrvl7
wttyjt/V6EQRXb7pT9CeAF4N73UK4kLEBOF9wNxXwUDM
-----END CERTIFICATE-----
Generated at Thu Nov 14 01:34:44 2024 by rpki-client on console-fra.rpki-client.org