Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Z_lpqn4MFzzc_sG0l3jpMTfBUSY.roa
File: Z_lpqn4MFzzc_sG0l3jpMTfBUSY.roa (raw, json)
Hash identifier: zNMrvRT2rv2cDG9WL5dKDKwa+misiWMoKQXf+GeX9EE=
Subject key identifier: 67:F9:69:AA:7E:0C:17:3C:DC:FE:C1:B4:97:78:E9:31:37:C1:51:26
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018D79154D9599808EE8537D220B66E5C3EB
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Z_lpqn4MFzzc_sG0l3jpMTfBUSY.roa
Signing time: Mon 05 Feb 2024 11:44:15 +0000
ROA not before: Mon 05 Feb 2024 11:44:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210147
IP address blocks: 217.113.22.0/23 maxlen: 24
217.113.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:15:4d:95:99:80:8e:e8:53:7d:22:0b:66:e5:c3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Feb 5 11:44:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f969aa7e0c173cdcfec1b49778e93137c15126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:13:76:51:00:ab:b0:13:c6:55:e8:0d:64:
74:a6:6b:46:cb:2b:00:a4:c2:77:2f:5e:18:c9:45:
7f:73:86:de:62:84:db:94:27:1f:3e:08:4c:bd:f4:
44:c4:1e:c1:fb:d7:41:2e:65:06:77:a5:18:c5:78:
7e:1b:2b:48:24:47:f7:eb:50:59:32:70:ac:fb:94:
58:3d:d2:65:b1:21:41:aa:95:b6:45:3d:ae:48:aa:
03:af:39:f1:fe:b7:51:3a:11:5b:d7:1d:e3:c8:a7:
1e:59:41:99:35:fe:d2:3f:bb:1d:81:c4:69:5f:f3:
65:cc:0f:fb:96:48:78:7c:6c:b4:0e:9c:ae:68:24:
4a:df:d0:26:bf:b3:aa:f1:01:49:5e:98:df:bf:69:
5a:00:eb:81:88:a7:37:03:03:85:69:e4:ed:a4:31:
f9:7a:74:49:68:ec:f1:15:14:c2:6c:cd:45:c1:ff:
c3:88:e4:b9:f8:e7:38:3e:e0:3b:af:22:48:05:41:
e9:84:c1:f0:0d:24:a4:a4:22:97:07:42:b2:fa:57:
82:70:86:9a:5e:35:d9:b3:a3:07:42:0d:ea:ea:94:
48:a9:53:29:f4:12:d9:f0:ad:8b:66:44:cc:27:f8:
aa:a4:c2:09:c4:0b:ce:5f:08:f7:a4:35:e4:aa:5d:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:69:AA:7E:0C:17:3C:DC:FE:C1:B4:97:78:E9:31:37:C1:51:26
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Z_lpqn4MFzzc_sG0l3jpMTfBUSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.22.0/23
217.113.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5f:b1:0a:9e:b4:15:79:50:c1:cd:31:97:c7:53:a7:8f:f0:
68:ef:b0:a1:d4:7e:66:bb:fd:33:ca:0b:be:07:9d:27:01:be:
62:36:33:4f:d1:88:c7:3a:98:18:34:67:87:db:0b:81:93:b7:
a2:4c:1e:b0:d3:65:ed:f9:29:46:06:47:27:0b:1d:06:cf:18:
b7:96:39:2d:3e:e9:23:58:8d:9c:65:46:96:1b:8d:21:b6:5e:
12:5c:9e:56:e4:20:e2:73:30:6d:9f:e6:06:24:ca:a0:76:64:
af:06:0b:a0:a9:e8:73:c3:d3:3b:b9:4b:11:6b:d9:a9:02:77:
d3:97:29:cd:4a:dc:9b:c6:a3:5c:f2:22:52:e3:23:22:a0:46:
99:58:f2:58:4a:3b:e6:a7:1c:ec:f5:18:4a:e2:ac:11:2c:e2:
1d:66:6b:11:fc:0b:8c:d6:10:a6:3c:18:92:76:22:c6:12:09:
0e:a8:3c:f3:63:65:e8:eb:20:ac:ef:75:46:de:f2:ff:49:ec:
08:64:e0:3b:cd:04:8d:2e:4a:87:45:dc:41:7a:0b:e1:b4:0e:
6d:6d:d4:ab:6a:98:fa:d5:92:81:9b:cc:09:12:52:24:f0:3a:
1f:b1:d0:e2:a1:b6:85:a6:f6:0d:fe:a6:7b:c3:71:c5:52:71:
80:5f:ca:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY15FU2VmYCO6FN9Igtm5cPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjQwMjA1MTE0NDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2Y5NjlhYTdlMGMxNzNjZGNmZWMxYjQ5Nzc4ZTkzMTM3YzE1MTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2QTdlEAq7ATxlXoDWR0pmtGyysA
pMJ3L14YyUV/c4beYoTblCcfPghMvfRExB7B+9dBLmUGd6UYxXh+GytIJEf361BZ
MnCs+5RYPdJlsSFBqpW2RT2uSKoDrznx/rdROhFb1x3jyKceWUGZNf7SP7sdgcRp
X/NlzA/7lkh4fGy0DpyuaCRK39Amv7Oq8QFJXpjfv2laAOuBiKc3AwOFaeTtpDH5
enRJaOzxFRTCbM1Fwf/DiOS5+Oc4PuA7ryJIBUHphMHwDSSkpCKXB0Ky+leCcIaa
XjXZs6MHQg3q6pRIqVMp9BLZ8K2LZkTMJ/iqpMIJxAvOXwj3pDXkql2XcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGf5aap+DBc83P7BtJd46TE3wVEmMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvWl9scHFuNE1GenpjX3NHMGwzanBNVGZCVVNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2XEWAwQA
2XEfMA0GCSqGSIb3DQEBCwUAA4IBAQB6X7EKnrQVeVDBzTGXx1Onj/Bo77Ch1H5m
u/0zygu+B50nAb5iNjNP0YjHOpgYNGeH2wuBk7eiTB6w02Xt+SlGBkcnCx0Gzxi3
ljktPukjWI2cZUaWG40htl4SXJ5W5CDiczBtn+YGJMqgdmSvBgugqehzw9M7uUsR
a9mpAnfTlynNStybxqNc8iJS4yMioEaZWPJYSjvmpxzs9RhK4qwRLOIdZmsR/AuM
1hCmPBiSdiLGEgkOqDzzY2Xo6yCs73VG3vL/SewIZOA7zQSNLkqHRdxBegvhtA5t
bdSrapj61ZKBm8wJElIk8DofsdDiobaFpvYN/qZ7w3HFUnGAX8qk
-----END CERTIFICATE-----
Generated at Wed May 1 21:08:39 2024 by rpki-client on console-ams.rpki-client.org