Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/ZBCXmzjC75SNo54Qqiuvk43024k.roa
File: ZBCXmzjC75SNo54Qqiuvk43024k.roa (raw, json)
Hash identifier: wUPdkjHqz/UOl+jS1/sCSIzQ0ko6VKmMLTBV0dEFbQo=
Subject key identifier: 64:10:97:9B:38:C2:EF:94:8D:A3:9E:10:AA:2B:AF:93:8D:F4:DB:89
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 018CC5DCC7CA702F2B9059EECA441C202A9D
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/ZBCXmzjC75SNo54Qqiuvk43024k.roa
Signing time: Mon 01 Jan 2024 16:30:29 +0000
ROA not before: Mon 01 Jan 2024 16:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34134
IP address blocks: 185.25.144.0/23 maxlen: 23
185.25.146.0/23 maxlen: 23
195.160.212.0/23 maxlen: 23
195.160.214.0/23 maxlen: 23
2a04:15c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c7:ca:70:2f:2b:90:59:ee:ca:44:1c:20:2a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Jan 1 16:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6410979b38c2ef948da39e10aa2baf938df4db89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:2a:b3:d9:0e:73:7b:36:d6:0e:14:c3:a4:
d9:f7:c8:ee:28:18:ae:66:79:47:ab:dc:7e:05:6a:
41:14:f9:f1:af:21:79:60:86:28:1b:f4:ef:3f:c2:
1b:46:b9:d1:ff:96:0b:b2:ce:49:92:14:b4:6a:bc:
e4:10:ac:6a:47:b7:b7:81:45:d2:9f:a5:89:2a:2d:
65:5e:12:1d:d3:d2:80:b0:fa:a5:67:6d:b1:5a:b3:
9d:07:57:af:44:e6:21:85:33:a8:60:94:1b:c8:3d:
1c:87:a6:b1:77:63:13:61:13:9a:c4:7c:02:c8:bb:
ff:fb:10:25:81:5c:64:f2:67:c6:e6:03:83:db:ba:
81:3d:6a:fc:73:dc:14:87:7b:39:e3:2c:b3:7d:7b:
c8:4c:db:49:81:3f:41:f7:d0:ac:4e:3c:ad:ee:1b:
e1:b2:01:2b:67:c5:70:bb:ee:1b:d1:b4:80:06:4c:
53:17:25:a0:31:28:fe:2a:06:a5:9d:77:fd:fb:f2:
bc:71:6d:36:92:3a:b8:fc:32:ea:f6:93:2e:bd:bf:
b3:bf:6c:67:1f:b7:35:e1:93:12:46:33:ca:04:1f:
8a:35:86:1c:fb:cb:34:73:d2:3b:03:8b:1c:26:f7:
8e:dd:56:c6:7f:ad:ab:ec:d8:6e:af:37:28:82:b1:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:97:9B:38:C2:EF:94:8D:A3:9E:10:AA:2B:AF:93:8D:F4:DB:89
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/ZBCXmzjC75SNo54Qqiuvk43024k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.144.0/22
195.160.212.0/22
IPv6:
2a04:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:15:d0:5b:06:f9:e0:2a:89:0d:1d:bf:a5:25:7e:08:40:07:
bb:a1:c8:03:53:3e:4a:e6:a1:f0:d6:5b:7e:7a:a7:ed:5a:67:
3c:3d:88:84:f8:34:13:a6:5c:85:93:a2:77:5e:25:94:97:94:
4e:ba:f2:dc:0e:1d:a7:d5:1b:04:68:1a:bc:41:99:a6:8c:ba:
56:eb:0b:0d:17:7b:5a:1d:e8:6f:84:d8:e6:40:be:6e:10:d3:
38:ee:25:cd:17:e8:f0:f5:95:14:1e:9d:a4:d7:55:64:0b:f7:
40:9d:a8:72:33:ad:3c:60:61:cd:51:40:6d:90:26:59:bc:dd:
c4:7f:ef:a4:e8:7b:9c:ec:02:74:74:cc:73:ea:8e:89:93:4f:
ca:57:2e:6d:d7:51:c4:ea:ff:a6:c1:38:87:c5:b2:d2:02:8b:
83:9b:ca:a5:ae:d2:ac:68:ec:b0:6d:78:df:ce:4e:03:60:ff:
0a:c4:44:12:a6:52:37:1b:6a:c2:7d:3e:d1:e6:38:7b:2d:21:
41:38:d7:80:75:9f:70:e0:57:33:2a:1e:df:21:da:7f:3b:22:
52:79:c7:46:b3:bf:b6:b4:46:c7:e2:9c:27:c1:87:58:3e:62:
28:c8:07:59:f9:4c:ea:21:ff:56:c8:6c:ff:14:09:72:37:67:
52:c9:70:6e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzF3MfKcC8rkFnuykQcICqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi
NjgxOWIwHhcNMjQwMTAxMTYzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDEwOTc5YjM4YzJlZjk0OGRhMzllMTBhYTJiYWY5MzhkZjRkYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Uqs9kOc3s21g4Uw6TZ98juKBiu
ZnlHq9x+BWpBFPnxryF5YIYoG/TvP8IbRrnR/5YLss5JkhS0arzkEKxqR7e3gUXS
n6WJKi1lXhId09KAsPqlZ22xWrOdB1evROYhhTOoYJQbyD0ch6axd2MTYROaxHwC
yLv/+xAlgVxk8mfG5gOD27qBPWr8c9wUh3s54yyzfXvITNtJgT9B99CsTjyt7hvh
sgErZ8Vwu+4b0bSABkxTFyWgMSj+KgalnXf9+/K8cW02kjq4/DLq9pMuvb+zv2xn
H7c14ZMSRjPKBB+KNYYc+8s0c9I7A4scJveO3VbGf62r7NhurzcogrEvXwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGQQl5s4wu+UjaOeEKorr5ON9NuJMB8GA1UdIwQY
MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt
MjRhZmNlZjRmM2Y1LzEvWkJDWG16akM3NVNObzU0UXFpdXZrNDMwMjRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1
LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRmQAwQC
w6DUMA0EAgACMAcDBQMqBBXAMA0GCSqGSIb3DQEBCwUAA4IBAQAOFdBbBvngKokN
Hb+lJX4IQAe7ocgDUz5K5qHw1lt+eqftWmc8PYiE+DQTplyFk6J3XiWUl5ROuvLc
Dh2n1RsEaBq8QZmmjLpW6wsNF3taHehvhNjmQL5uENM47iXNF+jw9ZUUHp2k11Vk
C/dAnahyM608YGHNUUBtkCZZvN3Ef++k6Huc7AJ0dMxz6o6Jk0/KVy5t11HE6v+m
wTiHxbLSAouDm8qlrtKsaOywbXjfzk4DYP8KxEQSplI3G2rCfT7R5jh7LSFBONeA
dZ9w4FczKh7fIdp/OyJSecdGs7+2tEbH4pwnwYdYPmIoyAdZ+UzqIf9WyGz/FAly
N2dSyXBu
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:02 2024 by rpki-client on console-ams.rpki-client.org