Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/py8ZliPh2RTdBVnoHOLe9dHz_Xs.roa
File: py8ZliPh2RTdBVnoHOLe9dHz_Xs.roa (raw, json)
Hash identifier: LHWJd2BfkpS22nwh4rWxZGB71ZzorP1Lpg1gXf9jDQU=
Subject key identifier: A7:2F:19:96:23:E1:D9:14:DD:05:59:E8:1C:E2:DE:F5:D1:F3:FD:7B
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019316C1D39714A051352004BCDE235B4C1C
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/py8ZliPh2RTdBVnoHOLe9dHz_Xs.roa
Signing time: Sun 10 Nov 2024 15:47:01 +0000
ROA not before: Sun 10 Nov 2024 15:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25160
IP address blocks: 195.216.191.0/24 maxlen: 24
213.182.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:16:c1:d3:97:14:a0:51:35:20:04:bc:de:23:5b:4c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Nov 10 15:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a72f199623e1d914dd0559e81ce2def5d1f3fd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:15:8d:83:b8:a9:d2:c4:27:89:2c:ed:c9:
e8:f0:61:35:c1:ae:fb:a9:a9:67:e0:6e:8c:dc:ea:
58:74:09:e2:95:ac:af:b6:b0:c4:1c:94:30:61:57:
fd:39:aa:4a:be:bd:0d:b7:fc:ac:7f:41:ef:cc:22:
32:8f:60:46:5f:74:af:eb:c4:2d:84:38:d9:27:36:
5e:f8:f8:b5:10:ae:04:80:c2:3c:2e:45:b7:1f:dc:
82:d8:79:9b:5b:c7:89:f1:bc:cc:21:a9:db:64:e1:
10:af:2a:2f:4c:5b:08:72:94:55:fe:92:2e:67:8f:
da:9f:77:ea:af:6a:a1:39:04:bb:c1:08:0f:75:41:
ea:e3:5d:dd:46:9a:b0:a5:ae:8a:4c:7f:ab:ac:47:
46:fd:9e:1b:46:81:f8:1d:51:8e:02:7e:42:cf:7b:
c3:2f:fa:aa:14:77:41:2b:f0:6b:8e:a5:0f:d7:b9:
97:4c:62:f9:31:7e:61:94:e3:ce:db:00:c8:a8:3f:
aa:42:13:ee:b6:44:66:e9:9d:f9:fe:eb:ef:1c:29:
4b:36:21:47:90:a0:ad:77:3e:3f:bb:ca:d5:d3:d7:
3d:02:97:26:06:99:e1:57:64:55:ee:fe:47:21:73:
41:67:fb:97:90:3b:fc:c9:d2:b1:b2:70:7c:ab:c0:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:19:96:23:E1:D9:14:DD:05:59:E8:1C:E2:DE:F5:D1:F3:FD:7B
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/py8ZliPh2RTdBVnoHOLe9dHz_Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.191.0/24
213.182.192.0/24
Signature Algorithm: sha256WithRSAEncryption
73:62:30:e3:a2:08:69:70:8b:65:bf:85:34:6f:de:d7:56:dc:
73:7f:d1:3f:38:20:3d:e7:fe:e1:89:67:ce:7d:0c:cf:10:6f:
78:ff:e6:ff:7f:52:76:07:cb:f9:0a:a5:d2:d6:33:11:c2:5e:
5a:12:71:cf:f0:1a:e3:6f:e6:11:51:f7:24:8c:87:28:20:2d:
73:8f:18:9c:b5:fb:c9:d8:bf:07:46:73:5a:4b:d8:89:d6:e3:
c2:81:91:26:fd:cf:b7:9e:db:c2:d4:0f:de:a5:df:75:af:ce:
05:24:14:9c:37:5d:8d:6d:37:fe:35:67:0e:93:0c:c0:b0:6d:
43:1e:8a:50:29:6c:af:09:3c:2d:90:bd:a8:02:7d:49:b5:a0:
eb:ee:36:f1:2a:56:c9:09:e5:b4:76:36:28:5d:41:59:15:63:
2f:53:ae:00:46:09:14:73:ed:af:4b:63:88:26:a5:4b:ac:9b:
7b:e4:f4:ba:67:95:96:e3:ea:f6:f9:c5:35:dd:bf:03:99:84:
fd:ac:b3:79:35:df:6c:2e:fc:12:27:96:df:5d:7c:53:4d:82:
1e:7c:94:2b:dd:16:f9:fa:e6:db:73:5d:c2:e0:69:b4:ad:6d:
ac:2a:31:50:98:d9:a0:a2:28:69:04:28:6a:bc:b1:1b:3d:76:
c1:4b:57:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMWwdOXFKBRNSAEvN4jW0wcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjQxMTEwMTU0NzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzJmMTk5NjIzZTFkOTE0ZGQwNTU5ZTgxY2UyZGVmNWQxZjNmZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF8VjYO4qdLEJ4ks7cno8GE1wa77
qaln4G6M3OpYdAnilayvtrDEHJQwYVf9OapKvr0Nt/ysf0HvzCIyj2BGX3Sv68Qt
hDjZJzZe+Pi1EK4EgMI8LkW3H9yC2HmbW8eJ8bzMIanbZOEQryovTFsIcpRV/pIu
Z4/an3fqr2qhOQS7wQgPdUHq413dRpqwpa6KTH+rrEdG/Z4bRoH4HVGOAn5Cz3vD
L/qqFHdBK/BrjqUP17mXTGL5MX5hlOPO2wDIqD+qQhPutkRm6Z35/uvvHClLNiFH
kKCtdz4/u8rV09c9ApcmBpnhV2RV7v5HIXNBZ/uXkDv8ydKxsnB8q8B7NQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKcvGZYj4dkU3QVZ6Bzi3vXR8/17MB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvcHk4WmxpUGgyUlRkQlZub0hPTGU5ZEh6X1hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw9i/AwQA
1bbAMA0GCSqGSIb3DQEBCwUAA4IBAQBzYjDjoghpcItlv4U0b97XVtxzf9E/OCA9
5/7hiWfOfQzPEG94/+b/f1J2B8v5CqXS1jMRwl5aEnHP8Brjb+YRUfckjIcoIC1z
jxictfvJ2L8HRnNaS9iJ1uPCgZEm/c+3ntvC1A/epd91r84FJBScN12NbTf+NWcO
kwzAsG1DHopQKWyvCTwtkL2oAn1JtaDr7jbxKlbJCeW0djYoXUFZFWMvU64ARgkU
c+2vS2OIJqVLrJt75PS6Z5WW4+r2+cU13b8DmYT9rLN5Nd9sLvwSJ5bfXXxTTYIe
fJQr3Rb5+ubbc13C4Gm0rW2sKjFQmNmgoihpBChqvLEbPXbBS1fR
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:46 2024 by rpki-client on console-ams.rpki-client.org