Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cOz-ZCQ5p5Fi-779nQO23oE9UzI.roa
File: cOz-ZCQ5p5Fi-779nQO23oE9UzI.roa (raw, json)
Hash identifier: OTLeXWeeJ7Yay7A7ZOky42RoTzF/40+X01NQ6qt3BPI=
Subject key identifier: 70:EC:FE:64:24:39:A7:91:62:FB:BE:FD:9D:03:B6:DE:81:3D:53:32
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D1F520EA99632D4EAC806180E241B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cOz-ZCQ5p5Fi-779nQO23oE9UzI.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4842
IP address blocks: 45.9.11.0/24 maxlen: 24
2a0e:aa06::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1f:52:0e:a9:96:32:d4:ea:c8:06:18:0e:24:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70ecfe642439a79162fbbefd9d03b6de813d5332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:e0:e5:3c:75:e0:4c:3e:1a:8e:6c:90:d1:
2d:1d:00:e0:a8:13:10:17:d2:24:36:14:f6:fa:cd:
63:74:08:70:54:0d:13:d8:20:ec:0f:e1:22:a6:e5:
2f:99:de:4d:b3:65:e6:b7:c3:e7:14:a9:34:d0:78:
f3:3b:b8:82:85:75:03:3d:2c:07:d0:ad:9d:cb:00:
da:73:bd:84:b3:e8:8b:75:31:0e:1b:d7:88:52:79:
f3:1f:34:56:2d:21:bc:0c:73:d4:59:23:0f:65:e0:
67:4d:e2:66:53:29:15:08:9e:2f:22:d1:55:8b:5f:
6d:6a:0f:52:52:ad:4a:46:25:8c:1b:de:10:0a:e6:
fb:a8:92:82:2a:80:78:be:e6:06:ce:d7:18:c9:bf:
83:4c:65:04:d5:0c:62:69:b5:4f:f0:44:53:d6:87:
7b:ff:6f:8e:b3:40:21:0e:b8:a6:43:dd:85:17:99:
43:2a:b4:2c:57:85:c2:65:5a:86:48:bb:7d:9c:75:
1c:ed:f0:b6:c1:e0:38:98:68:4a:79:1c:6c:49:79:
c2:85:84:b2:7d:87:6e:31:53:93:b1:5f:c8:0b:e0:
91:5b:09:71:53:7d:9c:5e:5b:13:be:3a:51:ae:06:
2a:cc:99:e8:f5:1f:c8:dd:e0:fd:69:6a:a9:5d:10:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:FE:64:24:39:A7:91:62:FB:BE:FD:9D:03:B6:DE:81:3D:53:32
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cOz-ZCQ5p5Fi-779nQO23oE9UzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.11.0/24
IPv6:
2a0e:aa06::/40
Signature Algorithm: sha256WithRSAEncryption
37:06:16:b4:cb:3b:57:b8:0d:53:70:1e:8c:66:8e:d6:a8:5c:
53:ad:ee:55:5f:c3:b4:3f:4e:eb:82:1b:9d:42:87:85:e1:16:
98:69:6f:19:92:1b:12:ad:f7:a9:d8:da:a0:99:e4:0f:e0:ff:
80:f7:1b:1e:55:10:f3:c5:b7:f6:67:1e:20:17:ea:12:7d:1d:
ae:fd:5f:d9:c3:a2:0b:ab:cf:cf:37:56:82:96:c2:4d:2c:aa:
61:8d:c8:2b:e9:51:2b:69:f8:24:50:c6:7a:0f:5c:3b:f9:9b:
5c:cc:03:f0:d2:98:3a:89:d7:49:15:76:e6:71:0d:d7:d8:a4:
cc:fc:b3:1d:3f:24:0e:b0:e0:09:1b:01:94:19:31:5c:ef:7e:
e8:80:80:a6:46:50:99:0a:06:97:f8:b9:1d:9a:9b:15:40:33:
42:5e:7d:62:2f:36:fc:e7:23:c4:29:25:9f:ad:8c:2a:97:ea:
48:a1:4c:b0:71:3f:fe:fd:f9:b3:6d:ab:2d:a5:5e:8d:01:20:
9b:11:cf:9c:8c:1a:e5:71:e9:14:a6:4b:80:21:71:75:fc:d8:
28:f3:ee:b9:c0:34:69:5d:e2:5c:bd:6a:d8:88:73:4e:44:89:
8c:db:f4:ed:7a:70:17:c5:36:c2:e0:e2:50:e6:09:df:c4:8b:
49:5e:48:02
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzCbR9SDqmWMtTqyAYYDiQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjQwMTAxMDAyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGVjZmU2NDI0MzlhNzkxNjJmYmJlZmQ5ZDAzYjZkZTgxM2Q1MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qzg5Tx14Ew+Go5skNEtHQDgqBMQ
F9IkNhT2+s1jdAhwVA0T2CDsD+EipuUvmd5Ns2Xmt8PnFKk00HjzO7iChXUDPSwH
0K2dywDac72Es+iLdTEOG9eIUnnzHzRWLSG8DHPUWSMPZeBnTeJmUykVCJ4vItFV
i19tag9SUq1KRiWMG94QCub7qJKCKoB4vuYGztcYyb+DTGUE1QxiabVP8ERT1od7
/2+Os0AhDrimQ92FF5lDKrQsV4XCZVqGSLt9nHUc7fC2weA4mGhKeRxsSXnChYSy
fYduMVOTsV/IC+CRWwlxU32cXlsTvjpRrgYqzJno9R/I3eD9aWqpXRCi+wIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFHDs/mQkOaeRYvu+/Z0Dtt6BPVMyMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvY096LVpDUTVwNUZpLTc3OW5RTzIzb0U5VXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALQkLMA4E
AgACMAgDBgAqDqoGADANBgkqhkiG9w0BAQsFAAOCAQEANwYWtMs7V7gNU3AejGaO
1qhcU63uVV/DtD9O64IbnUKHheEWmGlvGZIbEq33qdjaoJnkD+D/gPcbHlUQ88W3
9mceIBfqEn0drv1f2cOiC6vPzzdWgpbCTSyqYY3IK+lRK2n4JFDGeg9cO/mbXMwD
8NKYOonXSRV25nEN19ikzPyzHT8kDrDgCRsBlBkxXO9+6ICApkZQmQoGl/i5HZqb
FUAzQl59Yi82/OcjxCkln62MKpfqSKFMsHE//v35s22rLaVejQEgmxHPnIwa5XHp
FKZLgCFxdfzYKPPuucA0aV3iXL1q2IhzTkSJjNv07XpwF8U2wuDiUOYJ38SLSV5I
Ag==
-----END CERTIFICATE-----
Generated at Fri May 3 00:48:18 2024 by rpki-client on console-fra.rpki-client.org