Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/ZbAgCt6LQuL_KKhyK_i_9lrtxlk.roa
File: ZbAgCt6LQuL_KKhyK_i_9lrtxlk.roa (raw, json)
Hash identifier: 4PS5EazVnJU+GbJa3cVfLrZ59rdhEQBnwMZ1E7QaXVM=
Subject key identifier: 65:B0:20:0A:DE:8B:42:E2:FF:28:A8:72:2B:F8:BF:F6:5A:ED:C6:59
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 018CC56DFD80776F02F1B532538CBB7AC582
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/ZbAgCt6LQuL_KKhyK_i_9lrtxlk.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59438
IP address blocks: 5.145.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fd:80:77:6f:02:f1:b5:32:53:8c:bb:7a:c5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65b0200ade8b42e2ff28a8722bf8bff65aedc659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:4f:df:d4:a2:2b:f6:d2:48:d7:7e:f8:7a:
dc:f4:15:0c:81:9e:48:79:a5:14:c4:3e:8f:be:5e:
64:d8:60:2c:38:2b:cd:b9:ca:27:04:77:a3:8b:ef:
f3:1c:12:9a:78:59:1e:2a:64:c4:71:ed:f1:ff:70:
11:b2:59:ae:39:73:69:33:72:e3:de:51:66:79:2d:
91:ef:55:37:93:c4:e9:54:d5:b8:6b:83:a8:c8:18:
d1:85:38:8b:df:00:3d:46:7e:35:ae:a4:14:f8:23:
fd:eb:e8:3b:5c:29:90:ef:1f:58:bd:2b:5c:c2:25:
4c:60:65:44:6b:b4:a5:75:07:06:27:ff:bb:43:d6:
f6:30:c0:d9:d2:a3:4d:3f:3e:60:e0:80:15:49:1a:
d8:f9:60:c5:1e:0b:72:fe:86:c3:a1:e4:99:86:c0:
70:8f:6b:12:a1:98:f4:95:a9:f4:85:70:59:52:2f:
52:ab:38:a6:0c:6f:4d:a7:05:c8:b7:59:49:17:81:
06:28:d9:e6:c7:95:0e:8b:01:3a:05:a4:e2:54:7b:
ce:b6:7a:8d:10:b9:b2:11:3a:0f:9d:53:ac:1a:be:
64:a4:26:48:c8:77:d6:ec:33:63:37:94:4d:8c:8e:
a6:6f:90:13:6b:f3:78:b4:0b:81:37:93:1e:da:eb:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:20:0A:DE:8B:42:E2:FF:28:A8:72:2B:F8:BF:F6:5A:ED:C6:59
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/ZbAgCt6LQuL_KKhyK_i_9lrtxlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.152.0/21
Signature Algorithm: sha256WithRSAEncryption
77:89:1e:63:5b:e4:51:48:fd:1d:56:58:8c:b3:1c:12:8c:dc:
81:0b:a4:88:98:8c:9c:22:3c:5c:b1:1c:1e:89:70:bb:23:d8:
34:90:39:05:f0:51:be:90:b4:09:b0:37:42:e5:ab:c8:3c:00:
a9:1c:92:0e:0b:47:af:63:c3:36:24:6f:40:20:91:d6:4d:22:
45:a7:87:e1:1c:42:4d:1c:66:ff:0e:2c:42:e3:10:a8:8f:01:
81:fc:da:d9:9a:90:a2:3e:e9:59:b0:03:da:69:9c:b2:dc:73:
0b:3d:50:bb:ba:94:f8:b3:5e:1d:56:08:a7:7c:0b:ad:45:7d:
07:e8:80:6d:88:f4:a2:53:e5:f3:85:2f:16:1a:6a:f9:4f:75:
61:05:de:cc:61:b6:23:7b:13:be:5f:9d:04:5e:9c:5f:94:90:
0c:22:62:e3:af:40:0e:70:0c:a6:c0:4d:10:c9:07:56:ff:e5:
6b:7e:ab:eb:83:62:85:c7:65:aa:f6:ae:d1:2a:9d:15:25:4f:
11:d4:24:59:59:48:7c:c2:15:32:78:a2:86:c2:17:f9:4d:33:
ee:5e:60:7f:5b:d5:42:78:16:5c:4f:96:a1:cb:6a:bb:34:fa:
7a:f4:58:96:39:6c:e0:00:e8:70:d4:4f:d3:a6:2a:fe:09:4b:
80:59:3c:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbf2Ad28C8bUyU4y7esWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjQ3NTM5ZjE5ZjBmNWExM2IwYjY5YmM3OTYyNzhmMGJm
NGFlYTQwHhcNMjQwMTAxMTQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWIwMjAwYWRlOGI0MmUyZmYyOGE4NzIyYmY4YmZmNjVhZWRjNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1NP39SiK/bSSNd++Hrc9BUMgZ5I
eaUUxD6Pvl5k2GAsOCvNuconBHeji+/zHBKaeFkeKmTEce3x/3ARslmuOXNpM3Lj
3lFmeS2R71U3k8TpVNW4a4OoyBjRhTiL3wA9Rn41rqQU+CP96+g7XCmQ7x9YvStc
wiVMYGVEa7SldQcGJ/+7Q9b2MMDZ0qNNPz5g4IAVSRrY+WDFHgty/obDoeSZhsBw
j2sSoZj0lan0hXBZUi9SqzimDG9NpwXIt1lJF4EGKNnmx5UOiwE6BaTiVHvOtnqN
ELmyEToPnVOsGr5kpCZIyHfW7DNjN5RNjI6mb5ATa/N4tAuBN5Me2uv1DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWwIArei0Li/yiociv4v/Za7cZZMB8GA1UdIwQY
MBaAFHL0dTnxnw9aE7C2m8eWJ48L9K6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMt
MmVhNmVjMjg1YTE1LzEvWmJBZ0N0NkxRdUxfS0toeUtfaV85bHJ0eGxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMtMmVhNmVjMjg1YTE1
LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBZGYMA0G
CSqGSIb3DQEBCwUAA4IBAQB3iR5jW+RRSP0dVliMsxwSjNyBC6SImIycIjxcsRwe
iXC7I9g0kDkF8FG+kLQJsDdC5avIPACpHJIOC0evY8M2JG9AIJHWTSJFp4fhHEJN
HGb/DixC4xCojwGB/NrZmpCiPulZsAPaaZyy3HMLPVC7upT4s14dVginfAutRX0H
6IBtiPSiU+XzhS8WGmr5T3VhBd7MYbYjexO+X50EXpxflJAMImLjr0AOcAymwE0Q
yQdW/+Vrfqvrg2KFx2Wq9q7RKp0VJU8R1CRZWUh8whUyeKKGwhf5TTPuXmB/W9VC
eBZcT5ahy2q7NPp69FiWOWzgAOhw1E/Tpir+CUuAWTy/
-----END CERTIFICATE-----
Generated at Fri Nov 15 18:55:37 2024 by rpki-client on console-ams.rpki-client.org