Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/zNBoaLz846TNGPliCJNWqlH-byI.roa
File: zNBoaLz846TNGPliCJNWqlH-byI.roa (raw, json)
Hash identifier: Z4t+3pk9vByY5BpPpMWsP5S6T5VFiSHNQW6ogOczvwQ=
Subject key identifier: CC:D0:68:68:BC:FC:E3:A4:CD:18:F9:62:08:93:56:AA:51:FE:6F:22
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD64BBABB6F4A514380947046BAAA
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/zNBoaLz846TNGPliCJNWqlH-byI.roa
Signing time: Mon 01 Jan 2024 02:29:30 +0000
ROA not before: Mon 01 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60106
IP address blocks: 81.15.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d6:4b:ba:bb:6f:4a:51:43:80:94:70:46:ba:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccd06868bcfce3a4cd18f962089356aa51fe6f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:e5:84:be:45:03:81:83:5f:93:a2:7f:bd:
df:56:34:c4:1f:8a:22:97:65:f2:3f:14:6c:cb:26:
11:6d:f1:cd:4e:85:00:dc:12:ec:27:6e:bf:a7:8e:
a0:37:57:97:dc:e1:58:f9:95:1a:ac:98:6f:86:36:
b7:4b:f0:70:a0:d7:74:3c:b6:bf:65:17:a7:7d:f5:
08:02:30:c9:6f:87:46:dd:33:66:ac:a4:0f:0d:49:
05:ff:da:cd:50:f1:c7:08:da:58:8d:23:82:a9:a6:
a4:22:78:bb:3c:a0:de:c9:be:f1:4e:98:8c:0e:3e:
89:61:e2:74:81:2b:4d:ff:6f:e0:95:59:54:ff:43:
07:0a:a5:35:5b:a1:07:c9:b6:a3:ef:b3:9d:61:36:
2d:4f:c2:2e:bd:96:76:a8:2d:91:47:3d:c8:47:23:
28:6f:8a:88:03:d8:5e:3d:b9:e8:98:6a:45:5a:e4:
5a:74:68:42:3e:a1:90:b7:87:05:74:e9:4a:81:21:
67:17:df:d5:6c:f8:a4:4d:5d:4e:6a:13:5d:57:27:
ec:05:23:38:78:ea:b9:b8:22:25:09:aa:24:9f:83:
b0:67:79:b0:1d:09:73:21:28:f2:bd:2d:e3:ac:87:
ff:3f:17:1d:91:a8:da:54:b5:a3:08:df:47:72:f3:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D0:68:68:BC:FC:E3:A4:CD:18:F9:62:08:93:56:AA:51:FE:6F:22
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/zNBoaLz846TNGPliCJNWqlH-byI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:11:38:d4:57:de:d0:4e:3a:5c:e9:0b:e7:c6:44:f2:d4:8d:
1c:fc:60:38:8e:c3:3a:0f:66:b0:e3:cc:5e:d7:56:14:28:66:
19:56:d2:0b:c6:29:93:90:56:d9:09:fb:fa:57:9e:58:a2:80:
06:ac:38:4c:54:82:bc:8c:3c:06:ed:5d:0f:87:04:e3:26:39:
cb:29:2d:51:12:6b:cb:0a:69:e5:ce:43:89:8e:da:54:2d:99:
cd:30:33:c6:bb:f2:d3:4b:03:33:29:5b:60:cb:ea:a0:9b:a2:
70:a1:03:4b:b0:18:5b:48:1b:9c:9b:24:fe:c5:01:42:88:7e:
66:b2:87:fa:d6:4a:f5:05:79:35:58:26:d2:3f:37:c8:7b:25:
1e:f7:c1:aa:bb:55:be:ca:9a:f6:c0:97:b6:db:fd:38:29:35:
4e:70:86:68:46:29:b3:ee:dc:b7:f7:26:78:2c:47:1f:2f:b1:
e4:7b:b1:bf:43:44:41:d3:ca:5d:47:98:af:e9:94:23:55:bd:
db:ae:bd:ac:e0:09:74:a5:f1:50:52:89:20:41:83:e7:da:af:
ea:45:b2:c5:84:5a:c1:e7:cb:65:69:94:ae:71:b7:c4:ae:23:
28:6a:0c:1d:07:18:6f:0f:d2:ee:3f:4d:be:7b:d7:ce:c2:ff:
68:31:7a:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2tZLurtvSlFDgJRwRrqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjQwMTAxMDIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2QwNjg2OGJjZmNlM2E0Y2QxOGY5NjIwODkzNTZhYTUxZmU2ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8zlhL5FA4GDX5Oif73fVjTEH4oi
l2XyPxRsyyYRbfHNToUA3BLsJ26/p46gN1eX3OFY+ZUarJhvhja3S/BwoNd0PLa/
ZRenffUIAjDJb4dG3TNmrKQPDUkF/9rNUPHHCNpYjSOCqaakIni7PKDeyb7xTpiM
Dj6JYeJ0gStN/2/glVlU/0MHCqU1W6EHybaj77OdYTYtT8IuvZZ2qC2RRz3IRyMo
b4qIA9hePbnomGpFWuRadGhCPqGQt4cFdOlKgSFnF9/VbPikTV1OahNdVyfsBSM4
eOq5uCIlCaokn4OwZ3mwHQlzISjyvS3jrIf/PxcdkajaVLWjCN9HcvMZLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzQaGi8/OOkzRj5YgiTVqpR/m8iMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvek5Cb2FMejg0NlROR1BsaUNKTldxbEgtYnlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQ+nMA0G
CSqGSIb3DQEBCwUAA4IBAQAcETjUV97QTjpc6QvnxkTy1I0c/GA4jsM6D2aw48xe
11YUKGYZVtILximTkFbZCfv6V55YooAGrDhMVIK8jDwG7V0PhwTjJjnLKS1REmvL
CmnlzkOJjtpULZnNMDPGu/LTSwMzKVtgy+qgm6JwoQNLsBhbSBucmyT+xQFCiH5m
sof61kr1BXk1WCbSPzfIeyUe98Gqu1W+ypr2wJe22/04KTVOcIZoRimz7ty39yZ4
LEcfL7Hke7G/Q0RB08pdR5iv6ZQjVb3brr2s4Al0pfFQUokgQYPn2q/qRbLFhFrB
58tlaZSucbfEriMoagwdBxhvD9LuP02+e9fOwv9oMXq7
-----END CERTIFICATE-----
Generated at Fri May 31 20:33:21 2024 by rpki-client on console-fra.rpki-client.org