Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/Zq5EhbptDv6RYaouXv8QLavh0Mc.roa
File: Zq5EhbptDv6RYaouXv8QLavh0Mc.roa (raw, json)
Hash identifier: jXWs9FCaJqAmJDuujDcf2EdXAWGZ6HUR1IHiO91yfyc=
Subject key identifier: 66:AE:44:85:BA:6D:0E:FE:91:61:AA:2E:5E:FF:10:2D:AB:E1:D0:C7
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 018CC64B5217689D8B7B51A67BCCC22DD716
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/Zq5EhbptDv6RYaouXv8QLavh0Mc.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62211
IP address blocks: 185.43.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:52:17:68:9d:8b:7b:51:a6:7b:cc:c2:2d:d7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ae4485ba6d0efe9161aa2e5eff102dabe1d0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:1c:ea:bf:b2:4e:d5:b1:4a:bf:a0:d0:4a:
23:03:f6:b2:36:2b:ea:57:54:63:2a:e3:c9:c5:fd:
5a:a3:2a:18:8c:e3:a1:bf:f2:82:58:a2:a1:e4:44:
74:43:a4:dd:aa:33:90:74:55:1f:2f:4d:0f:25:c0:
3b:34:ef:c9:a9:df:f6:85:5c:a7:8e:0d:64:4e:d7:
d0:f6:4f:b6:90:1c:41:66:57:c9:64:b1:eb:73:58:
b9:b1:5e:23:6f:56:17:d2:6f:a2:cb:22:6e:d1:73:
ce:e5:30:af:34:3b:33:f4:26:5a:54:7e:ba:98:be:
86:a7:93:8e:e3:ba:86:7b:0b:1b:ed:d5:48:66:a9:
30:c1:3c:9c:e5:e6:6a:99:e1:c2:fd:09:f0:f9:1f:
a0:d7:01:a4:ef:83:45:41:57:7d:b4:14:fd:31:d9:
b4:e4:89:f9:44:16:b6:12:fb:a9:14:9e:c1:7f:82:
c6:62:f3:d7:1a:31:87:99:6f:00:bc:d0:e1:8c:18:
2e:7f:37:dd:2f:cd:1e:20:e2:81:93:cf:36:a0:d1:
9e:6d:f1:2a:6a:64:5e:05:69:fb:f1:20:c7:24:50:
fc:eb:12:77:3a:31:a9:04:87:44:5c:e1:6b:21:2f:
cb:19:a6:a1:01:d6:ec:a4:d8:1c:94:42:38:3d:09:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:44:85:BA:6D:0E:FE:91:61:AA:2E:5E:FF:10:2D:AB:E1:D0:C7
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/Zq5EhbptDv6RYaouXv8QLavh0Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.228.0/22
Signature Algorithm: sha256WithRSAEncryption
95:8a:76:4a:98:a0:f2:e2:07:ac:25:57:f3:3e:38:1a:cb:40:
6a:25:b5:81:ee:24:53:64:af:76:43:4e:1f:d4:3a:c8:4e:90:
74:e0:a5:ec:29:24:93:bf:3d:56:0f:36:e0:57:6f:f1:dd:a8:
95:b6:c7:db:2f:00:ba:7c:ff:15:31:bd:07:12:2f:64:82:4b:
56:a7:f6:7b:03:09:5b:87:1f:de:63:7d:5a:64:b8:2f:c1:1c:
fc:76:43:29:23:6b:0d:bc:54:a0:fc:24:cd:38:e2:67:85:5c:
d1:63:36:ab:fc:33:28:c1:10:03:21:73:46:76:3e:7d:9a:27:
c1:17:4d:29:0a:dc:67:77:3f:5d:c9:ca:b5:7a:73:37:f5:cc:
12:13:c8:dc:32:34:22:81:bc:c8:90:92:f4:e0:ee:10:da:34:
0b:16:8c:77:4d:8d:5e:f3:91:d1:bb:e2:c9:a9:7c:46:f6:30:
36:01:75:8d:56:de:08:66:dc:1e:b1:70:71:01:e7:ef:6a:45:
0c:29:ed:e4:22:1f:1d:bd:63:73:06:b1:a2:18:d4:49:93:37:
5a:7b:3b:69:55:75:69:f4:20:7c:39:d5:b4:2d:59:39:84:e7:
6a:99:cd:cd:a1:32:1f:99:f7:46:4f:17:ec:e8:03:79:02:08:
ac:65:cf:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS1IXaJ2Le1Gme8zCLdcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODYyN2UzNmE0ZTE2YmRjMzlmMGI1NTBkNzRmZDcxZTQ0
MmQyYzIwHhcNMjQwMTAxMTgzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmFlNDQ4NWJhNmQwZWZlOTE2MWFhMmU1ZWZmMTAyZGFiZTFkMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIcc6r+yTtWxSr+g0EojA/ayNivq
V1RjKuPJxf1aoyoYjOOhv/KCWKKh5ER0Q6TdqjOQdFUfL00PJcA7NO/Jqd/2hVyn
jg1kTtfQ9k+2kBxBZlfJZLHrc1i5sV4jb1YX0m+iyyJu0XPO5TCvNDsz9CZaVH66
mL6Gp5OO47qGewsb7dVIZqkwwTyc5eZqmeHC/Qnw+R+g1wGk74NFQVd9tBT9Mdm0
5In5RBa2EvupFJ7Bf4LGYvPXGjGHmW8AvNDhjBgufzfdL80eIOKBk882oNGebfEq
amReBWn78SDHJFD86xJ3OjGpBIdEXOFrIS/LGaahAdbspNgclEI4PQkzgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGauRIW6bQ7+kWGqLl7/EC2r4dDHMB8GA1UdIwQY
MBaAFPOGJ+NqTha9w58LVQ10/XHkQtLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQt
ODQyNDM3ZDI3Mjc5LzEvWnE1RWhicHREdjZSWWFvdVh2OFFMYXZoME1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQtODQyNDM3ZDI3Mjc5
LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSvkMA0G
CSqGSIb3DQEBCwUAA4IBAQCVinZKmKDy4gesJVfzPjgay0BqJbWB7iRTZK92Q04f
1DrITpB04KXsKSSTvz1WDzbgV2/x3aiVtsfbLwC6fP8VMb0HEi9kgktWp/Z7Awlb
hx/eY31aZLgvwRz8dkMpI2sNvFSg/CTNOOJnhVzRYzar/DMowRADIXNGdj59mifB
F00pCtxndz9dycq1enM39cwSE8jcMjQigbzIkJL04O4Q2jQLFox3TY1e85HRu+LJ
qXxG9jA2AXWNVt4IZtwesXBxAefvakUMKe3kIh8dvWNzBrGiGNRJkzdaeztpVXVp
9CB8OdW0LVk5hOdqmc3NoTIfmfdGTxfs6AN5AgisZc8U
-----END CERTIFICATE-----
Generated at Wed May 29 08:15:57 2024 by rpki-client on console-ams.rpki-client.org