Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/zcg4WdG4bQHEnwecasgYghx_diI.roa
File: zcg4WdG4bQHEnwecasgYghx_diI.roa (raw, json)
Hash identifier: LII5YZ2YW2tV5e/kFAX+oqEbEjY2iqDjgFkMuxCfZGs=
Subject key identifier: CD:C8:38:59:D1:B8:6D:01:C4:9F:07:9C:6A:C8:18:82:1C:7F:76:22
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B6866D50A0D582D41C1D7455C711EE
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/zcg4WdG4bQHEnwecasgYghx_diI.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47873
IP address blocks: 185.19.178.0/23 maxlen: 23
185.19.176.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:86:6d:50:a0:d5:82:d4:1c:1d:74:55:c7:11:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdc83859d1b86d01c49f079c6ac818821c7f7622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:89:ff:c9:86:f8:f3:58:a7:03:20:56:87:
67:7e:71:75:aa:ad:a1:f3:b5:b5:1a:30:0f:79:9b:
da:db:5e:af:45:ad:fb:77:92:a2:51:6d:39:34:d8:
32:16:98:de:27:7e:3d:33:bc:62:a1:fd:c2:72:d6:
45:3c:e1:b3:72:90:bf:8e:ce:d0:bd:04:20:b8:0e:
04:25:da:e5:90:f8:b8:ee:35:87:74:48:76:e0:b5:
8d:bf:a3:7c:43:60:47:a1:72:f6:a9:f1:b0:ce:79:
cd:70:aa:60:32:9b:e3:fa:74:5d:cf:f2:6f:02:13:
60:fc:31:98:20:ae:97:93:20:f1:a9:9f:8b:85:6d:
b8:4b:94:7e:06:04:ae:05:c4:38:a0:3a:76:61:77:
60:81:6f:f2:77:10:4b:7c:7b:bc:1f:ea:07:95:98:
d9:8a:f6:e1:03:cc:bd:1b:76:d2:98:1e:97:b0:56:
f6:2f:bc:de:db:ec:cc:b7:8d:33:2b:46:3f:53:29:
4e:3a:a4:73:bb:b3:71:b0:e8:4e:20:0d:1c:c8:40:
b6:15:e4:b6:2c:d3:30:87:56:c3:6f:3b:86:d8:d4:
fd:70:8f:a8:04:6c:45:72:31:32:86:c7:49:a9:1a:
b9:cb:0b:e8:35:bc:8b:47:3f:22:5d:0c:10:3f:60:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:38:59:D1:B8:6D:01:C4:9F:07:9C:6A:C8:18:82:1C:7F:76:22
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/zcg4WdG4bQHEnwecasgYghx_diI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.176.0/22
Signature Algorithm: sha256WithRSAEncryption
35:d3:2a:8d:34:cc:a6:fc:a4:88:42:ea:a3:b0:67:24:bd:55:
d3:62:c0:96:c2:95:0e:37:9a:38:93:a2:c9:47:ff:97:15:4e:
21:d9:70:ed:91:fd:9e:fd:bb:8c:68:81:f1:c5:98:27:df:38:
7e:f7:e5:eb:83:1d:bd:d0:45:3a:32:e1:8a:f4:26:82:41:96:
f7:39:cd:05:b0:97:50:1e:54:4f:35:a7:e3:cf:f0:aa:54:9f:
e5:4a:65:7a:e7:72:9e:2a:71:ca:73:dc:d5:d3:63:85:20:71:
6e:95:d5:07:d1:0c:50:50:bf:34:bb:0a:b6:3d:98:e3:a5:2b:
3b:82:19:86:74:48:e2:3d:88:12:af:b9:cb:08:cb:52:6b:6c:
a1:a9:0a:30:04:ba:c9:bd:8a:c3:b2:1e:99:cc:56:45:f7:1d:
9d:69:86:09:78:87:c0:e9:73:24:5f:fa:ff:da:1f:52:12:b4:
e3:76:c0:3a:c9:e6:f3:db:01:03:f0:74:ee:3a:8d:40:f2:37:
4f:33:8a:2c:c2:7b:a8:6d:6e:a9:20:6a:ba:0d:e7:80:e2:58:
0d:4c:8b:98:88:dd:9f:63:70:52:4f:3d:83:eb:9d:c8:0d:0b:
31:5e:73:78:98:3c:25:95:42:b8:72:1f:2d:86:d3:a9:3a:34:
02:04:80:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtoZtUKDVgtQcHXRVxxHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjQwMTAxMDYyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGM4Mzg1OWQxYjg2ZDAxYzQ5ZjA3OWM2YWM4MTg4MjFjN2Y3NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5eJ/8mG+PNYpwMgVodnfnF1qq2h
87W1GjAPeZva216vRa37d5KiUW05NNgyFpjeJ349M7xiof3CctZFPOGzcpC/js7Q
vQQguA4EJdrlkPi47jWHdEh24LWNv6N8Q2BHoXL2qfGwznnNcKpgMpvj+nRdz/Jv
AhNg/DGYIK6XkyDxqZ+LhW24S5R+BgSuBcQ4oDp2YXdggW/ydxBLfHu8H+oHlZjZ
ivbhA8y9G3bSmB6XsFb2L7ze2+zMt40zK0Y/UylOOqRzu7NxsOhOIA0cyEC2FeS2
LNMwh1bDbzuG2NT9cI+oBGxFcjEyhsdJqRq5ywvoNbyLRz8iXQwQP2B4fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM3IOFnRuG0BxJ8HnGrIGIIcf3YiMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvemNnNFdkRzRiUUhFbndlY2FzZ1lnaHhfZGlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuROwMA0G
CSqGSIb3DQEBCwUAA4IBAQA10yqNNMym/KSIQuqjsGckvVXTYsCWwpUON5o4k6LJ
R/+XFU4h2XDtkf2e/buMaIHxxZgn3zh+9+Xrgx290EU6MuGK9CaCQZb3Oc0FsJdQ
HlRPNafjz/CqVJ/lSmV653KeKnHKc9zV02OFIHFuldUH0QxQUL80uwq2PZjjpSs7
ghmGdEjiPYgSr7nLCMtSa2yhqQowBLrJvYrDsh6ZzFZF9x2daYYJeIfA6XMkX/r/
2h9SErTjdsA6yebz2wED8HTuOo1A8jdPM4oswnuobW6pIGq6DeeA4lgNTIuYiN2f
Y3BSTz2D653IDQsxXnN4mDwllUK4ch8thtOpOjQCBICk
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:18 2024 by rpki-client on console-fra.rpki-client.org