Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z2ch8NhJaZzOHZscSaqnvv7jpZ4.roa
File: Z2ch8NhJaZzOHZscSaqnvv7jpZ4.roa (raw, json)
Hash identifier: 8HfSq3XI3UIaQTEW94CHt5tw12tTuWkNW0CMURqp7XY=
Subject key identifier: 67:67:21:F0:D8:49:69:9C:CE:1D:9B:1C:49:AA:A7:BE:FE:E3:A5:9E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49338E959BE2C0B54672FBB11A2B31C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z2ch8NhJaZzOHZscSaqnvv7jpZ4.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59878
IP address blocks: 91.132.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:38:e9:59:be:2c:0b:54:67:2f:bb:11:a2:b3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676721f0d849699cce1d9b1c49aaa7befee3a59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:f0:cd:38:5a:52:4c:5d:1d:09:f2:71:13:
91:54:06:aa:56:e0:c3:35:e2:0c:a1:cb:65:2e:41:
2f:5f:b7:fb:ca:bb:56:ea:fe:cc:0b:3c:2e:a5:51:
4a:c1:f7:69:b7:03:03:80:26:06:b0:8b:86:16:f6:
bb:fc:55:be:a6:84:9a:cc:5a:69:9f:9c:d3:d5:3e:
f6:d1:e3:df:cc:d8:1a:a7:a8:3a:3e:37:b5:85:14:
65:3d:91:82:65:de:00:f8:c4:e7:da:4f:74:9b:14:
21:f7:69:b8:83:cf:b4:f4:47:47:21:e1:4d:c0:60:
53:5f:5e:b1:cf:98:14:ce:05:f9:e3:41:6e:bd:98:
d3:35:12:11:95:f4:e8:9f:da:d0:ad:d4:63:2e:d8:
26:c0:06:e1:e1:17:1b:64:cd:2e:ee:b8:b9:3b:c2:
2b:2f:ae:8e:05:88:d8:57:2d:fb:c0:e8:db:1f:cc:
d3:ec:92:d7:68:d4:43:cd:82:d5:89:d7:ca:f6:a6:
a6:0c:3c:53:ec:5a:df:52:fb:7a:4d:3f:07:c4:77:
cd:e5:64:8d:28:12:87:f6:d5:ed:6c:8c:c6:4e:b8:
c2:5f:d4:aa:f5:23:68:c3:9f:a3:32:72:6d:27:09:
0f:63:bd:69:54:e1:8c:0c:29:d4:fd:b9:92:37:76:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:21:F0:D8:49:69:9C:CE:1D:9B:1C:49:AA:A7:BE:FE:E3:A5:9E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z2ch8NhJaZzOHZscSaqnvv7jpZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.48.0/24
Signature Algorithm: sha256WithRSAEncryption
16:82:66:5f:ed:3a:c2:90:91:c1:53:00:83:73:23:4b:2d:9e:
6a:05:2b:4a:c7:d1:a9:cb:46:14:7e:5c:7b:57:f7:72:48:0e:
ff:a9:1e:8a:7b:ba:46:74:e2:c9:0a:56:b5:0f:55:85:6a:ec:
36:31:f2:b5:0a:d0:ba:c6:89:fd:cf:23:50:dd:7d:0d:2b:5c:
a5:4e:d5:c2:52:7d:98:54:51:5c:40:c7:8f:d5:ef:df:c0:e7:
fd:e2:57:20:53:6f:47:8a:03:84:32:7e:16:bf:01:4e:95:62:
42:02:a6:ff:96:33:d3:f4:f6:df:1e:dc:08:19:3a:a2:eb:44:
8c:b3:1d:b3:cf:62:c5:af:62:e3:9f:9e:18:c8:84:ce:8a:90:
dc:48:ec:fe:9c:b4:56:c4:39:73:d9:8a:4b:d6:59:02:af:3f:
0f:43:3f:d6:70:e2:34:0f:a0:1c:86:6f:d7:6e:a0:e8:b4:8f:
6e:bc:ff:d7:6f:0e:6e:37:4a:8c:c1:de:f5:9a:ad:1b:c5:cb:
b7:e2:69:c8:e4:ba:d8:46:d4:3f:d0:65:1b:cb:c4:35:87:33:
19:a9:19:34:43:c0:29:76:a5:02:b2:a4:c1:a3:a3:a0:98:b7:
a5:e5:a6:6d:07:e6:ba:07:5a:b9:d9:c2:ee:ae:83:fe:9f:f7:
7c:69:66:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkzjpWb4sC1RnL7sRorMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMTAxMTAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzY3MjFmMGQ4NDk2OTljY2UxZDliMWM0OWFhYTdiZWZlZTNhNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4nwzThaUkxdHQnycRORVAaqVuDD
NeIMoctlLkEvX7f7yrtW6v7MCzwupVFKwfdptwMDgCYGsIuGFva7/FW+poSazFpp
n5zT1T720ePfzNgap6g6Pje1hRRlPZGCZd4A+MTn2k90mxQh92m4g8+09EdHIeFN
wGBTX16xz5gUzgX540FuvZjTNRIRlfTon9rQrdRjLtgmwAbh4RcbZM0u7ri5O8Ir
L66OBYjYVy37wOjbH8zT7JLXaNRDzYLVidfK9qamDDxT7FrfUvt6TT8HxHfN5WSN
KBKH9tXtbIzGTrjCX9Sq9SNow5+jMnJtJwkPY71pVOGMDCnU/bmSN3adUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGdnIfDYSWmczh2bHEmqp77+46WeMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWjJjaDhOaEphWnpPSFpzY1NhcW52djdqcFo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4QwMA0G
CSqGSIb3DQEBCwUAA4IBAQAWgmZf7TrCkJHBUwCDcyNLLZ5qBStKx9Gpy0YUflx7
V/dySA7/qR6Ke7pGdOLJCla1D1WFauw2MfK1CtC6xon9zyNQ3X0NK1ylTtXCUn2Y
VFFcQMeP1e/fwOf94lcgU29HigOEMn4WvwFOlWJCAqb/ljPT9PbfHtwIGTqi60SM
sx2zz2LFr2Ljn54YyITOipDcSOz+nLRWxDlz2YpL1lkCrz8PQz/WcOI0D6Achm/X
bqDotI9uvP/Xbw5uN0qMwd71mq0bxcu34mnI5LrYRtQ/0GUby8Q1hzMZqRk0Q8Ap
dqUCsqTBo6OgmLel5aZtB+a6B1q52cLuroP+n/d8aWZh
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:57:57 2024 by rpki-client on console-fra.rpki-client.org