Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZSFjar4azBVTulL8AP5tFiUK9AU.roa
File: ZSFjar4azBVTulL8AP5tFiUK9AU.roa (raw, json)
Hash identifier: M58LSXS6TEP51IvifWpKeuT1eI1LpNm8ZhSyYjbR8qY=
Subject key identifier: 65:21:63:6A:BE:1A:CC:15:53:BA:52:FC:00:FE:6D:16:25:0A:F4:05
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190A2892279D9CF39A7B9B39E55A6A497B6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZSFjar4azBVTulL8AP5tFiUK9AU.roa
Signing time: Thu 11 Jul 2024 16:03:34 +0000
ROA not before: Thu 11 Jul 2024 16:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209181
IP address blocks: 89.213.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:89:22:79:d9:cf:39:a7:b9:b3:9e:55:a6:a4:97:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 11 16:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6521636abe1acc1553ba52fc00fe6d16250af405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:7f:3a:fa:b0:a9:48:ca:78:90:da:f4:73:
88:63:0a:2a:51:a5:c3:66:c5:c1:3e:94:c6:2c:85:
b9:a6:f7:95:9f:f4:82:6e:e4:da:71:ca:d6:1e:1d:
a4:0b:ef:30:78:e8:58:b4:f8:f6:a0:6c:bd:bc:75:
a5:2b:ac:e1:0c:b3:b2:cc:90:6b:19:fe:5a:c9:64:
a0:f5:90:6d:78:79:04:17:cd:c4:7e:5b:b3:6c:c0:
08:34:82:98:c1:f8:92:4b:09:4e:84:92:d3:45:a0:
19:6b:80:f8:29:90:cb:4f:6b:41:d1:ce:3d:81:8d:
87:3f:63:d2:cc:8b:39:99:fd:14:82:50:cf:4e:23:
cf:f9:f9:cd:f9:b4:35:2b:b3:58:02:b8:0f:62:c1:
db:27:aa:62:1c:7b:9a:2b:48:2b:5d:39:a1:b1:ed:
3a:e2:4d:70:60:8c:42:0a:bd:8a:f7:3d:cf:7a:ab:
44:33:44:08:fe:67:31:f8:bc:3b:ea:d1:f1:26:8f:
03:20:93:9c:8c:c1:2c:83:fc:69:7c:34:9d:52:3e:
96:f1:fa:45:d2:d2:17:81:2d:4f:c8:b1:70:a5:91:
f6:00:f3:45:17:fc:2f:ea:21:c0:93:14:3e:98:88:
1c:ac:78:5c:3e:4c:c5:13:65:6b:99:24:75:8f:8e:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:63:6A:BE:1A:CC:15:53:BA:52:FC:00:FE:6D:16:25:0A:F4:05
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZSFjar4azBVTulL8AP5tFiUK9AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.171.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5f:59:29:ee:77:69:0c:ce:25:29:55:a1:6d:6f:32:61:4a:
ba:c7:12:20:25:23:2b:9d:7c:96:0b:bc:f8:06:7d:28:d5:99:
10:20:31:2d:df:a1:a5:bc:c0:e1:6b:6c:46:51:5c:f1:df:9d:
aa:f4:5e:fa:5d:c2:2c:33:d9:68:66:77:12:38:c1:96:ea:92:
97:ca:42:b2:37:53:e3:fa:6b:ec:3e:60:d8:13:fb:3f:a4:be:
b8:46:3f:ef:87:e0:a7:8e:95:59:15:ef:63:d5:de:5b:f9:ad:
88:a7:3a:7f:fa:57:ee:53:1b:d3:00:b8:17:aa:64:1f:5f:74:
12:3a:c9:a6:98:71:84:34:fe:9e:63:93:fe:9c:c7:14:ad:e7:
72:dc:63:b6:50:55:84:5d:47:6c:8c:ad:7d:e7:8b:1d:ec:38:
66:4c:7a:83:f3:d9:33:df:bb:6b:f6:c2:23:04:c8:68:ac:a1:
e8:0d:d1:9e:41:b9:2f:55:5f:5a:22:c7:94:6f:10:b9:82:dc:
46:18:50:dc:e1:4e:0a:a5:07:d6:17:89:30:79:a4:89:ff:ec:
0b:23:45:90:f0:2e:e5:8d:ac:7c:8c:fa:5f:eb:23:94:99:29:
d6:34:13:c0:e9:4d:ea:33:71:cf:67:80:e1:fc:e2:8e:94:41:
67:e4:e4:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCiiSJ52c85p7mznlWmpJe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNzExMTYwMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTIxNjM2YWJlMWFjYzE1NTNiYTUyZmMwMGZlNmQxNjI1MGFmNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsR/OvqwqUjKeJDa9HOIYwoqUaXD
ZsXBPpTGLIW5pveVn/SCbuTaccrWHh2kC+8weOhYtPj2oGy9vHWlK6zhDLOyzJBr
Gf5ayWSg9ZBteHkEF83EfluzbMAINIKYwfiSSwlOhJLTRaAZa4D4KZDLT2tB0c49
gY2HP2PSzIs5mf0UglDPTiPP+fnN+bQ1K7NYArgPYsHbJ6piHHuaK0grXTmhse06
4k1wYIxCCr2K9z3PeqtEM0QI/mcx+Lw76tHxJo8DIJOcjMEsg/xpfDSdUj6W8fpF
0tIXgS1PyLFwpZH2APNFF/wv6iHAkxQ+mIgcrHhcPkzFE2VrmSR1j45L+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUhY2q+GswVU7pS/AD+bRYlCvQFMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWlNGamFyNGF6QlZUdWxMOEFQNXRGaVVLOUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWrMA0G
CSqGSIb3DQEBCwUAA4IBAQCQX1kp7ndpDM4lKVWhbW8yYUq6xxIgJSMrnXyWC7z4
Bn0o1ZkQIDEt36GlvMDha2xGUVzx352q9F76XcIsM9loZncSOMGW6pKXykKyN1Pj
+mvsPmDYE/s/pL64Rj/vh+CnjpVZFe9j1d5b+a2Ipzp/+lfuUxvTALgXqmQfX3QS
OsmmmHGENP6eY5P+nMcUredy3GO2UFWEXUdsjK1954sd7DhmTHqD89kz37tr9sIj
BMhorKHoDdGeQbkvVV9aIseUbxC5gtxGGFDc4U4KpQfWF4kweaSJ/+wLI0WQ8C7l
jax8jPpf6yOUmSnWNBPA6U3qM3HPZ4Dh/OKOlEFn5ORk
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:33 2024 by rpki-client on console-fra.rpki-client.org