Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3ZvOJmh86rW0E2GAT3emnVJ6ye4.roa
File: 3ZvOJmh86rW0E2GAT3emnVJ6ye4.roa (raw, json)
Hash identifier: 3WRo59NTTrVFEdRFFrV7DeTrZF+qn1E9fQyHWbPDUIs=
Subject key identifier: DD:9B:CE:26:68:7C:EA:B5:B4:13:61:80:4F:77:A6:9D:52:7A:C9:EE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4FBD07C245328D4D47B01F689452
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3ZvOJmh86rW0E2GAT3emnVJ6ye4.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209863
IP address blocks: 95.47.162.0/24 maxlen: 24
93.170.78.0/24 maxlen: 24
2a02:128:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4f:bd:07:c2:45:32:8d:4d:47:b0:1f:68:94:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd9bce26687ceab5b41361804f77a69d527ac9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:02:81:9e:b6:d3:5f:94:4d:65:9c:40:b5:
c5:e4:27:00:d3:8d:26:5a:45:82:3c:5b:92:b3:3d:
52:a7:90:4a:db:11:4d:e9:5c:26:e4:04:3a:4a:e3:
66:8b:1e:e4:93:64:85:fc:ff:1c:4f:0a:b4:3f:34:
89:1e:68:92:25:ae:cc:e9:11:49:17:b1:e3:3b:fa:
d5:0a:09:1a:5a:f2:f7:22:54:d1:0a:80:a7:0b:f9:
6a:eb:b6:c1:b6:6f:e7:13:99:36:97:de:de:42:30:
4a:07:65:a5:32:4a:93:80:a8:dd:3e:60:6a:e8:9e:
f0:15:1b:58:50:15:a2:2e:14:af:f2:12:2b:4a:22:
3a:92:a9:e5:19:c8:53:0f:fa:52:d4:7e:79:24:0e:
2b:59:24:09:0e:46:bf:21:a0:68:00:92:41:2f:13:
58:c7:ec:d0:fa:96:3c:bf:70:8d:49:f0:e1:d7:1f:
8c:c0:8c:ae:21:da:89:ec:68:9e:97:f0:03:8f:bd:
4f:2a:db:b5:59:54:56:b2:08:f8:1d:8c:f9:1a:eb:
f5:de:8a:73:4c:86:c8:b0:a1:5c:4e:47:ce:1f:1c:
40:27:2c:fe:5f:58:cb:54:18:ed:f4:5a:69:05:5c:
74:68:a7:ff:fd:1b:f2:b2:82:e3:e8:66:49:c8:78:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9B:CE:26:68:7C:EA:B5:B4:13:61:80:4F:77:A6:9D:52:7A:C9:EE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3ZvOJmh86rW0E2GAT3emnVJ6ye4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.78.0/24
95.47.162.0/24
IPv6:
2a02:128:4::/48
Signature Algorithm: sha256WithRSAEncryption
72:83:fe:13:0c:b5:a9:00:48:e8:a1:d3:09:3d:91:f6:ed:2e:
c9:ea:0d:f7:91:a5:92:0e:52:65:9b:22:e8:70:15:6d:39:72:
fe:99:4d:e9:d1:19:07:b1:ef:5c:c1:f4:f2:a2:85:05:9c:4c:
8f:71:32:e6:3a:3c:bf:24:f7:0a:5e:5a:5b:39:5c:57:62:34:
61:b6:85:e5:94:20:3d:28:2e:43:d4:77:d4:16:ff:2d:f9:48:
48:2b:0e:c7:35:d6:b7:3e:c8:81:6f:91:a4:00:bf:cf:bd:89:
8f:73:21:70:fc:b7:06:54:3c:2a:e0:fd:8d:81:f3:9d:12:e7:
19:3e:43:04:67:fe:38:e8:33:60:7e:77:d9:d3:1c:7b:9e:13:
8e:56:19:6c:9c:8f:03:9a:e7:39:1e:47:a8:83:98:e6:9f:36:
7a:e4:8b:79:b4:82:ec:5a:4b:30:86:fe:50:c5:7e:51:98:e5:
cb:d0:25:16:d1:ee:85:7b:f8:ae:1a:81:5c:59:6c:42:cf:0c:
62:a0:a8:ed:df:d9:b0:d2:05:f7:3e:14:86:df:7e:cc:91:d4:
a8:9f:a8:72:d8:82:22:65:ca:a5:30:3e:1a:f2:14:9d:23:4f:
4a:78:48:f4:74:06:8e:6e:83:ba:c4:8a:bd:cb:a9:5a:35:80:
35:7a:80:91
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzKKk+9B8JFMo1NR7AfaJRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDliY2UyNjY4N2NlYWI1YjQxMzYxODA0Zjc3YTY5ZDUyN2FjOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXsCgZ6201+UTWWcQLXF5CcA040m
WkWCPFuSsz1Sp5BK2xFN6Vwm5AQ6SuNmix7kk2SF/P8cTwq0PzSJHmiSJa7M6RFJ
F7HjO/rVCgkaWvL3IlTRCoCnC/lq67bBtm/nE5k2l97eQjBKB2WlMkqTgKjdPmBq
6J7wFRtYUBWiLhSv8hIrSiI6kqnlGchTD/pS1H55JA4rWSQJDka/IaBoAJJBLxNY
x+zQ+pY8v3CNSfDh1x+MwIyuIdqJ7Giel/ADj71PKtu1WVRWsgj4HYz5Guv13opz
TIbIsKFcTkfOHxxAJyz+X1jLVBjt9FppBVx0aKf//RvysoLj6GZJyHgY2wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFN2bziZofOq1tBNhgE93pp1SesnuMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvM1p2T0ptaDg2clcwRTJHQVQzZW1uVko2eWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAXapOAwQA
Xy+iMA8EAgACMAkDBwAqAgEoAAQwDQYJKoZIhvcNAQELBQADggEBAHKD/hMMtakA
SOih0wk9kfbtLsnqDfeRpZIOUmWbIuhwFW05cv6ZTenRGQex71zB9PKihQWcTI9x
MuY6PL8k9wpeWls5XFdiNGG2heWUID0oLkPUd9QW/y35SEgrDsc11rc+yIFvkaQA
v8+9iY9zIXD8twZUPCrg/Y2B850S5xk+QwRn/jjoM2B+d9nTHHueE45WGWycjwOa
5zkeR6iDmOafNnrki3m0guxaSzCG/lDFflGY5cvQJRbR7oV7+K4agVxZbELPDGKg
qO3f2bDSBfc+FIbffsyR1KifqHLYgiJlyqUwPhryFJ0jT0p4SPR0Bo5ug7rEir3L
qVo1gDV6gJE=
-----END CERTIFICATE-----
Generated at Mon Jun 10 19:46:47 2024 by rpki-client on console-ams.rpki-client.org