Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bZq-Kl2oe7uucOKKTtYKhiHHkNs.roa
File: bZq-Kl2oe7uucOKKTtYKhiHHkNs.roa (raw, json)
Hash identifier: 4vn85rSXohNIsOez26kM5uNQ0QCMjYOnuudOxr3oGe8=
Subject key identifier: 6D:9A:BE:2A:5D:A8:7B:BB:AE:70:E2:8A:4E:D6:0A:86:21:C7:90:DB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A7B44EDF4A5F8CAA86599BBE113C2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bZq-Kl2oe7uucOKKTtYKhiHHkNs.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 193.36.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7b:44:ed:f4:a5:f8:ca:a8:65:99:bb:e1:13:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d9abe2a5da87bbbae70e28a4ed60a8621c790db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:96:97:c2:09:3b:56:a3:07:f5:f3:82:bb:
b2:94:83:99:5f:d7:f0:82:f8:a6:54:0a:b1:fe:c8:
7e:d1:51:84:7e:6e:03:fb:39:95:a7:d6:92:25:14:
f8:6b:56:76:05:1a:d1:c9:2b:8b:80:a6:7d:cb:6c:
69:7b:d8:4f:ef:f4:44:37:01:43:58:bf:08:16:be:
d0:b1:14:37:a0:52:5a:d9:b0:09:a9:52:67:79:e1:
f9:46:cd:1f:19:d1:56:e5:94:bb:6f:44:9e:55:88:
9f:26:ef:bd:cd:37:3b:4e:f8:c1:6d:3f:06:20:8a:
5f:14:38:fe:df:8f:d6:f3:9c:ad:35:36:3b:c2:54:
0f:5f:25:95:0b:f8:40:cd:70:aa:09:31:cd:48:69:
37:25:c8:ac:1e:70:cc:0f:38:48:96:19:01:7b:28:
68:ae:42:37:6a:44:9c:d9:04:c1:1e:64:a8:e7:31:
18:7a:84:f5:b1:84:6a:1d:2e:55:75:b3:13:40:91:
2f:c4:8f:8f:1a:79:fd:f0:a0:db:15:13:dc:1d:0d:
10:3e:2c:72:69:e5:f8:09:7d:11:c4:5d:d4:74:31:
5b:19:da:08:75:a2:e2:6d:10:52:0e:63:c6:2d:94:
e2:15:84:a5:9e:a7:cc:77:d8:dc:d3:fb:0d:eb:76:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:BE:2A:5D:A8:7B:BB:AE:70:E2:8A:4E:D6:0A:86:21:C7:90:DB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bZq-Kl2oe7uucOKKTtYKhiHHkNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f0:77:41:2c:81:ac:33:6e:ae:f5:05:a2:94:c1:95:a6:fd:
28:bd:fc:42:8c:89:27:8d:81:6a:d5:5f:76:5c:18:4c:ca:87:
22:c1:f9:2d:62:86:50:89:e0:7e:5c:a5:15:69:43:ed:0d:63:
0c:81:93:c3:2b:dd:d5:d3:32:ee:3f:78:76:86:8c:57:c9:da:
70:8a:46:de:e3:c6:fe:1a:05:c7:fd:35:7e:11:ea:ab:86:29:
6c:44:65:1c:28:7b:04:1d:89:9f:56:c9:f2:35:b5:6c:a5:41:
b3:9c:8d:f8:43:58:0a:e3:3e:bf:7f:51:4f:9b:94:55:11:8f:
f2:5a:91:27:06:89:1a:05:8e:2d:01:cb:20:56:9b:35:8d:29:
0f:1f:8f:59:e3:bd:4c:f2:37:76:9d:04:eb:e7:fc:df:50:4f:
47:b9:78:22:02:3c:a4:3a:67:28:a9:fc:2b:4c:6e:a5:d1:4e:
78:19:5d:1c:69:18:3f:f2:94:16:b2:7e:5b:63:d2:93:79:6a:
b2:9b:fc:64:18:b8:a5:7b:8f:e6:b1:ab:c6:db:23:57:8d:ac:
d8:64:71:ba:90:19:a7:4f:f1:91:e9:71:20:6f:55:04:e6:3f:
df:c7:fa:34:e3:f7:8e:3f:f0:58:a1:96:00:db:1b:81:19:a2:
fc:03:2c:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKntE7fSl+MqoZZm74RPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwMTAyMTIzMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDlhYmUyYTVkYTg3YmJiYWU3MGUyOGE0ZWQ2MGE4NjIxYzc5MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJeWl8IJO1ajB/XzgruylIOZX9fw
gvimVAqx/sh+0VGEfm4D+zmVp9aSJRT4a1Z2BRrRySuLgKZ9y2xpe9hP7/RENwFD
WL8IFr7QsRQ3oFJa2bAJqVJneeH5Rs0fGdFW5ZS7b0SeVYifJu+9zTc7TvjBbT8G
IIpfFDj+34/W85ytNTY7wlQPXyWVC/hAzXCqCTHNSGk3JcisHnDMDzhIlhkBeyho
rkI3akSc2QTBHmSo5zEYeoT1sYRqHS5VdbMTQJEvxI+PGnn98KDbFRPcHQ0QPixy
aeX4CX0RxF3UdDFbGdoIdaLibRBSDmPGLZTiFYSlnqfMd9jc0/sN63Y3BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG2avipdqHu7rnDiik7WCoYhx5DbMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvYlpxLUtsMm9lN3V1Y09LS1R0WUtoaUhIa05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSRIMA0G
CSqGSIb3DQEBCwUAA4IBAQAK8HdBLIGsM26u9QWilMGVpv0ovfxCjIknjYFq1V92
XBhMyociwfktYoZQieB+XKUVaUPtDWMMgZPDK93V0zLuP3h2hoxXydpwikbe48b+
GgXH/TV+EeqrhilsRGUcKHsEHYmfVsnyNbVspUGznI34Q1gK4z6/f1FPm5RVEY/y
WpEnBokaBY4tAcsgVps1jSkPH49Z471M8jd2nQTr5/zfUE9HuXgiAjykOmcoqfwr
TG6l0U54GV0caRg/8pQWsn5bY9KTeWqym/xkGLile4/msavG2yNXjazYZHG6kBmn
T/GR6XEgb1UE5j/fx/o04/eOP/BYoZYA2xuBGaL8Ayzt
-----END CERTIFICATE-----
Generated at Sun May 5 00:26:08 2024 by rpki-client on console-fra.rpki-client.org