Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/ZKVRPlgwHw6QDPlM3XmI5JDpfNA.roa
File: ZKVRPlgwHw6QDPlM3XmI5JDpfNA.roa (raw, json)
Hash identifier: ZWMDnd7dnXoF7KQWcpfDKxdKcDylTluZMMe0QF/3qjk=
Subject key identifier: 64:A5:51:3E:58:30:1F:0E:90:0C:F9:4C:DD:79:88:E4:90:E9:7C:D0
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0192C4A76231C25504673F053D115C06822E
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/ZKVRPlgwHw6QDPlM3XmI5JDpfNA.roa
Signing time: Fri 25 Oct 2024 17:09:16 +0000
ROA not before: Fri 25 Oct 2024 17:09:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 2.160.0.0/12 maxlen: 12
31.212.0.0/15 maxlen: 15
31.224.0.0/11 maxlen: 11
37.50.0.0/15 maxlen: 15
37.80.0.0/12 maxlen: 12
46.78.0.0/15 maxlen: 15
80.187.0.0/16 maxlen: 16
80.187.160.0/20 maxlen: 20
88.128.0.0/16 maxlen: 16
109.237.176.0/20 maxlen: 20
193.254.128.0/19 maxlen: 19
193.254.160.0/20 maxlen: 20
2a01:598::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:a7:62:31:c2:55:04:67:3f:05:3d:11:5c:06:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Oct 25 17:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64a5513e58301f0e900cf94cdd7988e490e97cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:51:45:cd:4d:b1:50:fc:ae:59:59:1e:9e:
e0:a2:8e:2a:9f:74:92:a2:8b:90:06:d2:87:d2:b4:
9b:e2:9b:bc:00:c6:68:98:42:c0:a4:0b:12:c0:0c:
f5:1b:f1:03:45:dd:53:93:db:54:80:51:4f:38:0b:
b3:45:9d:53:c6:36:79:d9:21:49:e2:96:01:c1:83:
ed:2d:13:40:19:ef:19:63:b9:55:e2:2b:ab:41:ff:
86:04:fa:9e:a7:34:e5:e7:bd:9a:5d:15:8c:be:11:
ce:a6:cb:d6:28:d8:73:c4:28:5a:cf:4d:f7:ae:12:
35:7d:58:8d:95:5d:77:b9:24:96:13:a1:78:1e:88:
42:17:43:27:b5:e3:ec:43:cd:20:12:b9:2f:12:16:
9d:a9:d2:5a:2e:3a:99:9a:a5:50:1c:ae:ae:50:5e:
de:a0:81:6a:ce:0c:93:8c:3c:af:63:7d:69:9d:28:
b1:c1:dc:c1:c7:21:e4:31:b7:5d:2a:ba:20:6f:b2:
df:fd:b6:bb:32:e1:34:c9:99:1e:1b:8b:27:fa:d1:
a7:f4:b7:e8:91:1f:36:c7:8a:8d:5c:1b:7a:76:d1:
9b:bd:3a:28:15:8a:04:e0:f0:72:5c:42:27:1f:5e:
79:dd:ac:b6:54:de:65:be:0c:05:12:59:b5:83:57:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:51:3E:58:30:1F:0E:90:0C:F9:4C:DD:79:88:E4:90:E9:7C:D0
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/ZKVRPlgwHw6QDPlM3XmI5JDpfNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.160.0.0/12
31.212.0.0/15
31.224.0.0/11
37.50.0.0/15
37.80.0.0/12
46.78.0.0/15
80.187.0.0/16
88.128.0.0/16
109.237.176.0/20
193.254.128.0-193.254.175.255
IPv6:
2a01:598::/29
Signature Algorithm: sha256WithRSAEncryption
94:c0:87:23:b2:17:d0:81:33:51:67:b5:d5:0c:64:01:46:f7:
10:ab:3b:a0:b5:57:45:61:62:9f:9d:1e:99:7f:33:33:7d:36:
bc:44:11:a2:26:d2:9a:3a:06:59:42:e3:ee:14:b1:00:8b:c1:
76:03:ba:fd:1d:9b:24:80:99:51:fa:da:ac:a5:36:e2:4f:92:
73:2b:ec:82:7e:88:42:36:86:89:69:25:d4:b3:d0:97:d5:c4:
a4:ae:ce:38:c0:0e:6c:e0:30:23:23:d0:8f:6e:77:12:27:bd:
95:e0:41:7e:ba:05:d0:6a:f7:e9:4c:ab:ba:39:5a:d8:5d:d2:
bb:ef:58:2e:38:92:10:94:5f:18:3e:d9:e7:6f:1b:11:30:c8:
d4:7d:7d:b5:41:56:e3:17:96:a9:78:a1:65:ab:4c:75:1e:58:
6c:65:58:54:18:f6:4a:bd:1e:31:79:cd:f5:1f:df:8b:9a:ae:
34:67:9d:91:87:0a:eb:59:53:7e:d1:dc:4b:03:97:da:c8:b5:
97:ca:8d:e3:80:86:99:ff:df:bc:da:b5:13:e1:56:5d:b6:b8:
8d:c5:3d:e0:c9:d4:e4:b7:84:75:cb:36:44:12:50:01:db:a9:
bb:9b:31:e0:b0:35:53:49:a6:bd:6b:5a:a7:96:23:72:f2:9d:
af:35:0b:0d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZLEp2IxwlUEZz8FPRFcBoIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMjMwNDQyZmVhZTlmYzI2YjhiZDg4N2ZhYTBlZDAyNzU4
MjdhNTgwHhcNMjQxMDI1MTcwOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGE1NTEzZTU4MzAxZjBlOTAwY2Y5NGNkZDc5ODhlNDkwZTk3Y2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRNRRc1NsVD8rllZHp7goo4qn3SS
oouQBtKH0rSb4pu8AMZomELApAsSwAz1G/EDRd1Tk9tUgFFPOAuzRZ1TxjZ52SFJ
4pYBwYPtLRNAGe8ZY7lV4iurQf+GBPqepzTl572aXRWMvhHOpsvWKNhzxChaz033
rhI1fViNlV13uSSWE6F4HohCF0MntePsQ80gErkvEhadqdJaLjqZmqVQHK6uUF7e
oIFqzgyTjDyvY31pnSixwdzBxyHkMbddKrogb7Lf/ba7MuE0yZkeG4sn+tGn9Lfo
kR82x4qNXBt6dtGbvTooFYoE4PByXEInH1553ay2VN5lvgwFElm1g1eKcQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFGSlUT5YMB8OkAz5TN15iOSQ6XzQMB8GA1UdIwQY
MBaAFDsjBEL+rp/Ca4vYh/qg7QJ1gnpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYt
NzI2NzA3Mzc2MWQ0LzEvWktWUlBsZ3dIdzZRRFBsTTNYbUk1SkRwZk5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYtNzI2NzA3Mzc2MWQ0
LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwMEAqADAwEf
1AMDBR/gAwMBJTIDAwQlUAMDAS5OAwMAULsDAwBYgAMEBG3tsDAMAwQHwf6AAwQE
wf6gMA0EAgACMAcDBQMqAQWYMA0GCSqGSIb3DQEBCwUAA4IBAQCUwIcjshfQgTNR
Z7XVDGQBRvcQqzugtVdFYWKfnR6ZfzMzfTa8RBGiJtKaOgZZQuPuFLEAi8F2A7r9
HZskgJlR+tqspTbiT5JzK+yCfohCNoaJaSXUs9CX1cSkrs44wA5s4DAjI9CPbncS
J72V4EF+ugXQavfpTKu6OVrYXdK771guOJIQlF8YPtnnbxsRMMjUfX21QVbjF5ap
eKFlq0x1HlhsZVhUGPZKvR4xec31H9+Lmq40Z52RhwrrWVN+0dxLA5fayLWXyo3j
gIaZ/9+82rUT4VZdtriNxT3gydTkt4R1yzZEElAB26m7mzHgsDVTSaa9a1qnliNy
8p2vNQsN
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:05:49 2024 by rpki-client on console-fra.rpki-client.org