Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/395CugyvmArztLPSVcMa_aFKGjs.roa
File: 395CugyvmArztLPSVcMa_aFKGjs.roa (raw, json)
Hash identifier: o6cUTnxvnHFfxmdKbX6n0NZkXxuJZ6kO4fzUY0YyrqQ=
Subject key identifier: DF:DE:42:BA:0C:AF:98:0A:F3:B4:B3:D2:55:C3:1A:FD:A1:4A:1A:3B
Certificate issuer: /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Certificate serial: 018CC801FF7E865A7F36216C03450AD4F7C6
Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/395CugyvmArztLPSVcMa_aFKGjs.roa
Signing time: Tue 02 Jan 2024 02:30:23 +0000
ROA not before: Tue 02 Jan 2024 02:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51009
IP address blocks: 83.166.96.0/19 maxlen: 19
2a11:8600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ff:7e:86:5a:7f:36:21:6c:03:45:0a:d4:f7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Validity
Not Before: Jan 2 02:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfde42ba0caf980af3b4b3d255c31afda14a1a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:28:ba:46:16:f9:07:60:d6:31:c2:bc:6a:
9e:b3:35:af:11:5e:73:0d:07:cc:2e:aa:c1:5a:d6:
66:3a:53:42:bb:09:19:d3:10:54:f5:95:8a:b1:1b:
a1:2c:1f:3b:00:42:a0:17:ec:6b:70:0a:38:68:4a:
ac:47:c0:37:ca:75:78:89:5c:8f:49:da:97:02:13:
36:ff:21:ca:fd:3c:a9:e4:7f:f5:8a:06:f4:81:60:
fb:5a:94:8e:2f:df:b4:0d:e5:0c:d0:5b:55:d1:de:
21:3e:b3:9a:46:4e:40:df:b8:5b:e5:ff:79:8a:36:
f5:b5:83:4f:d7:81:c3:6b:91:88:fc:78:37:1c:7a:
42:45:07:3b:a0:7b:11:6d:a1:c3:bf:d0:aa:b3:b2:
4b:a9:40:b4:8d:8c:5c:82:ed:5d:c7:16:17:c2:0b:
46:61:f8:6e:77:de:5c:39:06:2f:91:cb:ca:29:05:
07:c0:88:0f:64:f8:5c:95:b6:db:19:e2:77:66:3d:
26:9d:d0:e0:65:9b:97:cc:b1:8e:ac:39:de:b6:9c:
34:1a:db:4d:c8:73:4d:1b:8d:e9:11:ff:06:16:8e:
35:e9:ea:f8:58:f1:15:c1:a0:69:24:ab:46:6c:dc:
c2:eb:42:d5:7d:7d:dd:b2:8f:65:a7:8a:b6:ba:be:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DE:42:BA:0C:AF:98:0A:F3:B4:B3:D2:55:C3:1A:FD:A1:4A:1A:3B
X509v3 Authority Key Identifier:
keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/395CugyvmArztLPSVcMa_aFKGjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.166.96.0/19
IPv6:
2a11:8600::/29
Signature Algorithm: sha256WithRSAEncryption
22:b4:c8:18:68:4f:9f:55:55:0f:3b:ce:28:a3:ef:46:7a:9d:
f9:be:6f:f4:1d:89:24:dd:66:61:27:b4:5b:5c:a4:f5:e1:11:
83:61:65:e5:5d:e5:cb:e0:1f:07:a0:c2:1b:37:7f:1f:2e:ce:
35:37:12:88:d1:7e:a5:a0:d5:a9:16:bb:66:6b:95:7f:0b:94:
97:7b:53:1c:13:bf:1b:76:9a:63:d2:48:b3:f4:b3:82:52:25:
82:b2:a8:5b:ba:f8:d6:6d:de:65:a8:f7:fa:40:78:2a:57:92:
bf:bb:25:fc:af:f0:49:b3:b1:a3:72:50:fc:be:a1:1b:1e:ce:
5e:6c:44:b9:3f:3e:20:e3:7f:cf:35:0a:d6:87:ac:a6:6e:1a:
7b:bf:74:a5:45:ae:e0:f4:a7:06:d6:13:b2:cd:88:f5:68:b1:
9e:9d:86:45:aa:68:5b:ca:50:d3:7b:5c:4c:90:0c:3f:f5:db:
32:e7:c7:49:d8:5f:29:d6:3f:38:1a:42:d5:08:0c:d8:38:12:
12:bb:b3:12:0d:1a:e1:a7:46:35:9b:54:79:8d:dd:32:46:8d:
3d:07:ea:74:7c:1e:30:b5:38:0f:17:bf:6a:a7:4e:84:e3:90:
22:ab:76:50:6d:ee:76:95:b2:5a:cd:fb:58:f9:7b:f6:71:c8:
fe:b2:a1:4d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIAf9+hlp/NiFsA0UK1PfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTY3ZjdlYmMwYTgxMGI4OGMwYWFkMzQwYzI2ZWRjYjQ1
ZGU2NWYwHhcNMjQwMTAyMDIzMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmRlNDJiYTBjYWY5ODBhZjNiNGIzZDI1NWMzMWFmZGExNGExYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsIoukYW+Qdg1jHCvGqeszWvEV5z
DQfMLqrBWtZmOlNCuwkZ0xBU9ZWKsRuhLB87AEKgF+xrcAo4aEqsR8A3ynV4iVyP
SdqXAhM2/yHK/Typ5H/1igb0gWD7WpSOL9+0DeUM0FtV0d4hPrOaRk5A37hb5f95
ijb1tYNP14HDa5GI/Hg3HHpCRQc7oHsRbaHDv9Cqs7JLqUC0jYxcgu1dxxYXwgtG
Yfhud95cOQYvkcvKKQUHwIgPZPhclbbbGeJ3Zj0mndDgZZuXzLGOrDnetpw0GttN
yHNNG43pEf8GFo416er4WPEVwaBpJKtGbNzC60LVfX3dso9lp4q2ur6v3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFN/eQroMr5gK87Sz0lXDGv2hSho7MB8GA1UdIwQY
MBaAFGTmf368CoELiMCq00DCbty0XeZfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9aX2Zyd0tnUXVJd0tyVFFNSnUzTFJkNWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYWI3OWYtYWJjMS00YTYyLWJjNjkt
NDQyMjk5ZjQxMmZkLzEvMzk1Q3VneXZtQXJ6dExQU1ZjTWFfYUZLR2pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYWI3OWYtYWJjMS00YTYyLWJjNjktNDQyMjk5ZjQxMmZk
LzEvWk9aX2Zyd0tnUXVJd0tyVFFNSnUzTFJkNWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFU6ZgMA0E
AgACMAcDBQMqEYYAMA0GCSqGSIb3DQEBCwUAA4IBAQAitMgYaE+fVVUPO84oo+9G
ep35vm/0HYkk3WZhJ7RbXKT14RGDYWXlXeXL4B8HoMIbN38fLs41NxKI0X6loNWp
Frtma5V/C5SXe1McE78bdppj0kiz9LOCUiWCsqhbuvjWbd5lqPf6QHgqV5K/uyX8
r/BJs7GjclD8vqEbHs5ebES5Pz4g43/PNQrWh6ymbhp7v3SlRa7g9KcG1hOyzYj1
aLGenYZFqmhbylDTe1xMkAw/9dsy58dJ2F8p1j84GkLVCAzYOBISu7MSDRrhp0Y1
m1R5jd0yRo09B+p0fB4wtTgPF79qp06E45Aiq3ZQbe52lbJazftY+Xv2ccj+sqFN
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:26:43 2024 by rpki-client on console-fra.rpki-client.org