Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/ZRZwxqAiCITyJNRTnGxGJPOXa0I.roa
File: ZRZwxqAiCITyJNRTnGxGJPOXa0I.roa (raw, json)
Hash identifier: VX1IPsGPvLoKouD63uaB7SQ49JZ4JNkiRMmEaiWb8CM=
Subject key identifier: 65:16:70:C6:A0:22:08:84:F2:24:D4:53:9C:6C:46:24:F3:97:6B:42
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 018CC9BC5F435EA16DB7C50BC955F45EE2F7
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/ZRZwxqAiCITyJNRTnGxGJPOXa0I.roa
Signing time: Tue 02 Jan 2024 10:33:34 +0000
ROA not before: Tue 02 Jan 2024 10:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 185.139.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:5f:43:5e:a1:6d:b7:c5:0b:c9:55:f4:5e:e2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Jan 2 10:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=651670c6a0220884f224d4539c6c4624f3976b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:97:76:a6:bd:97:11:08:12:0f:de:19:00:
c8:73:fc:99:5a:21:a0:f7:83:5d:2b:9c:85:b0:aa:
b8:14:b3:82:cf:6d:51:7e:7d:4a:e6:37:15:f6:3b:
5e:cb:5c:54:0e:6e:d2:8c:84:83:77:4e:fd:a7:96:
6b:fd:b7:dd:af:80:c9:2d:38:c6:54:c3:a4:9c:42:
e7:d0:fe:65:0c:fa:94:17:35:37:ec:74:28:ce:81:
28:ac:c0:a9:0e:25:91:aa:f8:c8:2a:5e:72:f2:b4:
1f:af:87:e8:d9:26:15:25:15:a3:40:4e:5c:d5:52:
cc:05:8d:88:dc:e9:1d:8e:9c:9c:e9:28:e7:bd:40:
39:39:72:7a:cf:87:95:62:17:5a:d6:0d:d3:04:9b:
17:5b:66:f7:ba:21:6d:de:a3:d8:81:c8:d0:41:ca:
21:a2:e1:de:ad:5a:96:55:04:79:b8:ef:e6:41:20:
65:ab:37:9a:39:84:94:4d:ea:3a:f4:88:ef:c9:4e:
c9:e7:e0:3b:f9:16:3b:e9:ed:43:b7:98:5f:60:ac:
fa:25:a0:9d:a1:63:1a:b1:57:e1:d0:3e:dc:a8:85:
a6:4e:e0:a0:f9:f5:15:49:fd:5c:fa:87:79:3b:08:
2e:7a:db:ab:43:6a:8b:9c:4e:c0:ed:d9:f6:5f:c6:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:70:C6:A0:22:08:84:F2:24:D4:53:9C:6C:46:24:F3:97:6B:42
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/ZRZwxqAiCITyJNRTnGxGJPOXa0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:aa:36:72:4a:af:be:bb:ca:a2:56:69:cf:e4:66:5a:e1:86:
c9:63:cd:6d:41:b6:25:22:c8:d6:51:c4:5f:24:d4:3d:a1:b1:
59:17:a7:77:81:4c:71:aa:59:2c:a3:c3:bb:49:f3:50:40:87:
a6:0e:b3:5d:c0:3c:de:0e:14:15:ff:c0:bb:9b:ed:ab:e0:13:
cc:8a:db:51:68:4e:24:20:d0:67:7e:80:93:fa:52:85:09:b0:
7c:0d:7b:40:d2:9a:93:7b:66:9b:4c:53:6f:17:d0:c1:6a:e6:
45:e6:cf:62:af:03:f0:ef:65:ff:23:81:69:98:76:27:1b:aa:
c2:19:3a:98:30:9e:98:47:78:1d:c6:1c:51:b1:48:cc:ce:45:
be:a4:4d:00:fd:b3:41:35:16:e2:af:8f:df:95:a7:74:88:b1:
3f:9b:f7:77:30:69:6b:72:3f:96:cd:e5:d0:b2:57:8b:39:d9:
a5:0a:2b:bb:49:01:15:05:2b:91:ac:bc:e2:2a:12:4c:38:36:
e9:af:bf:1c:c0:17:64:e6:16:91:02:1c:ca:c9:2e:60:48:24:
ec:98:0d:77:4b:f3:5a:6c:35:44:0f:a3:f4:c3:d1:ec:34:e0:
89:a8:29:82:bc:e1:04:a7:76:54:48:5d:24:2a:81:f3:7f:6e:
55:c8:96:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvF9DXqFtt8ULyVX0XuL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NzYyZGIxMjgyZmZkMDg0NzYxMjMyMDM4ZjgxZjVkMjll
NjQwZDUwHhcNMjQwMTAyMTAzMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTE2NzBjNmEwMjIwODg0ZjIyNGQ0NTM5YzZjNDYyNGYzOTc2YjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUOXdqa9lxEIEg/eGQDIc/yZWiGg
94NdK5yFsKq4FLOCz21Rfn1K5jcV9jtey1xUDm7SjISDd079p5Zr/bfdr4DJLTjG
VMOknELn0P5lDPqUFzU37HQozoEorMCpDiWRqvjIKl5y8rQfr4fo2SYVJRWjQE5c
1VLMBY2I3Okdjpyc6SjnvUA5OXJ6z4eVYhda1g3TBJsXW2b3uiFt3qPYgcjQQcoh
ouHerVqWVQR5uO/mQSBlqzeaOYSUTeo69IjvyU7J5+A7+RY76e1Dt5hfYKz6JaCd
oWMasVfh0D7cqIWmTuCg+fUVSf1c+od5OwgueturQ2qLnE7A7dn2X8ZF9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUWcMagIgiE8iTUU5xsRiTzl2tCMB8GA1UdIwQY
MBaAFLl2LbEoL/0IR2EjIDj4H10p5kDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQt
NzBhNTU2YmE4YTExLzEvWlJad3hxQWlDSVR5Sk5SVG5HeEdKUE9YYTBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQtNzBhNTU2YmE4YTEx
LzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYsiMA0G
CSqGSIb3DQEBCwUAA4IBAQCbqjZySq++u8qiVmnP5GZa4YbJY81tQbYlIsjWUcRf
JNQ9obFZF6d3gUxxqlkso8O7SfNQQIemDrNdwDzeDhQV/8C7m+2r4BPMittRaE4k
INBnfoCT+lKFCbB8DXtA0pqTe2abTFNvF9DBauZF5s9irwPw72X/I4FpmHYnG6rC
GTqYMJ6YR3gdxhxRsUjMzkW+pE0A/bNBNRbir4/flad0iLE/m/d3MGlrcj+WzeXQ
sleLOdmlCiu7SQEVBSuRrLziKhJMODbpr78cwBdk5haRAhzKyS5gSCTsmA13S/Na
bDVED6P0w9HsNOCJqCmCvOEEp3ZUSF0kKoHzf25VyJZ+
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:36:52 2024 by rpki-client on console-fra.rpki-client.org