Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/PzMvsaJ2IsqzcLPmFi_yvsHlax0.roa
File: PzMvsaJ2IsqzcLPmFi_yvsHlax0.roa (raw, json)
Hash identifier: Rjxgpi11brZzLblWvu4Pq5SyvYZhasDqb/43H/r4IxA=
Subject key identifier: 3F:33:2F:B1:A2:76:22:CA:B3:70:B3:E6:16:2F:F2:BE:C1:E5:6B:1D
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 018CC94E35BA24AED5B6F4A3364DDEAC2758
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/PzMvsaJ2IsqzcLPmFi_yvsHlax0.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29165
IP address blocks: 81.199.116.0/23 maxlen: 24
81.199.120.0/22 maxlen: 24
81.199.252.0/22 maxlen: 24
81.199.250.0/23 maxlen: 24
62.56.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:35:ba:24:ae:d5:b6:f4:a3:36:4d:de:ac:27:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f332fb1a27622cab370b3e6162ff2bec1e56b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:d6:8b:6f:ec:cd:30:d2:f7:a8:01:05:29:
30:e9:a3:f6:21:78:cd:3e:8b:60:ca:a9:5a:5f:9f:
d7:b7:af:db:97:23:ba:b4:b2:5c:51:37:f2:f6:8e:
31:57:d2:ef:51:8f:dc:be:c2:a3:2c:84:2e:9d:94:
5b:3a:89:be:d1:d0:94:7e:40:09:8f:f7:29:2c:1f:
42:6a:46:5b:c9:0d:a1:61:db:41:9e:31:eb:3c:06:
26:83:b8:7e:5f:b9:25:fc:41:b7:bf:47:cb:0c:a9:
08:98:ec:7a:ca:8e:f1:22:b0:28:da:ca:5d:df:2f:
d5:a1:ab:88:e8:c8:4e:11:cb:38:38:4f:8c:06:13:
7e:34:fd:3e:5f:a8:c1:8b:e8:6c:b8:2f:00:cb:55:
f8:aa:8e:c0:ec:12:45:8a:4d:f9:d6:23:12:68:4a:
a3:02:18:d2:e8:b4:11:25:69:22:2e:c4:09:6f:07:
66:cd:7f:4b:5f:b0:3f:5e:c3:b2:3f:f3:b6:38:b5:
70:0e:6c:ad:14:15:78:08:ee:44:d6:77:73:36:4a:
40:03:64:8a:6c:07:d6:47:a5:78:2b:28:dc:27:25:
75:bb:a1:91:0d:60:84:6c:d4:e1:dd:fb:85:f5:13:
6a:5e:42:a5:03:0a:eb:d9:29:10:12:26:03:c3:8c:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:2F:B1:A2:76:22:CA:B3:70:B3:E6:16:2F:F2:BE:C1:E5:6B:1D
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/PzMvsaJ2IsqzcLPmFi_yvsHlax0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.252.0/22
81.199.116.0/23
81.199.120.0/22
81.199.250.0-81.199.255.255
Signature Algorithm: sha256WithRSAEncryption
25:61:df:d5:29:16:29:b4:12:04:58:8e:5d:9f:c3:29:77:9d:
01:44:ba:15:05:cb:6e:d1:71:b4:c0:95:7c:3a:f9:f7:f4:f6:
d9:0c:37:5f:f3:7c:00:0a:f3:6c:fa:8e:50:a0:4b:a8:d8:38:
fa:ef:04:32:93:f0:d7:91:36:6d:25:b8:e5:b3:c8:58:c2:41:
96:c7:67:5e:f9:69:a6:57:b3:c2:2d:32:35:5f:79:93:28:96:
ff:60:4c:79:d8:f5:b5:32:22:4b:c7:ce:f5:f7:88:13:35:95:
85:88:e2:20:de:38:e2:8d:27:72:32:dd:1d:a9:70:1f:90:81:
e4:99:66:68:f3:be:49:fa:87:66:f8:32:9b:55:6e:a2:e5:8b:
a7:eb:de:5d:b1:41:17:ec:00:f9:cf:d0:87:02:39:3f:b7:43:
32:7e:47:84:df:a2:20:ee:43:e1:3e:63:bd:1d:68:9f:d7:5a:
91:9e:4b:e4:69:e6:c8:91:18:42:ea:1b:5b:3d:02:ec:43:cc:
c6:57:e9:2a:a3:ee:78:6a:77:ac:61:74:0d:45:2c:0e:9f:03:
0d:0c:26:71:1c:3b:17:b2:d8:85:6c:af:6a:1e:77:4a:fa:4d:
1c:9a:d4:e2:93:86:c5:ce:f6:df:c9:08:c1:36:52:b2:8c:31:
27:c9:1e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzJTjW6JK7VtvSjNk3erCdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjQwMTAyMDgzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjMzMmZiMWEyNzYyMmNhYjM3MGIzZTYxNjJmZjJiZWMxZTU2YjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5jWi2/szTDS96gBBSkw6aP2IXjN
PotgyqlaX5/Xt6/blyO6tLJcUTfy9o4xV9LvUY/cvsKjLIQunZRbOom+0dCUfkAJ
j/cpLB9CakZbyQ2hYdtBnjHrPAYmg7h+X7kl/EG3v0fLDKkImOx6yo7xIrAo2spd
3y/VoauI6MhOEcs4OE+MBhN+NP0+X6jBi+hsuC8Ay1X4qo7A7BJFik351iMSaEqj
AhjS6LQRJWkiLsQJbwdmzX9LX7A/XsOyP/O2OLVwDmytFBV4CO5E1ndzNkpAA2SK
bAfWR6V4KyjcJyV1u6GRDWCEbNTh3fuF9RNqXkKlAwrr2SkQEiYDw4x7EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8zL7GidiLKs3Cz5hYv8r7B5WsdMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvUHpNdnNhSjJJc3F6Y0xQbUZpX3l2c0hsYXgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwQCPjj8AwQB
Ucd0AwQCUcd4MAsDBAFRx/oDAwNRwDANBgkqhkiG9w0BAQsFAAOCAQEAJWHf1SkW
KbQSBFiOXZ/DKXedAUS6FQXLbtFxtMCVfDr59/T22Qw3X/N8AArzbPqOUKBLqNg4
+u8EMpPw15E2bSW45bPIWMJBlsdnXvlpplezwi0yNV95kyiW/2BMedj1tTIiS8fO
9feIEzWVhYjiIN444o0ncjLdHalwH5CB5JlmaPO+SfqHZvgym1VuouWLp+veXbFB
F+wA+c/QhwI5P7dDMn5HhN+iIO5D4T5jvR1on9dakZ5L5GnmyJEYQuobWz0C7EPM
xlfpKqPueGp3rGF0DUUsDp8DDQwmcRw7F7LYhWyvah53SvpNHJrU4pOGxc7238kI
wTZSsowxJ8kejA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 11:05:52 2024 by rpki-client on console-fra.rpki-client.org