Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/zC5cnzJZXWJ15DovFhNZnjAYlx8.roa
File: zC5cnzJZXWJ15DovFhNZnjAYlx8.roa (raw, json)
Hash identifier: PmHbi3CbXx+RGitt7dLTRvI+Gkto3U25bJJVc6K8JOk=
Subject key identifier: CC:2E:5C:9F:32:59:5D:62:75:E4:3A:2F:16:13:59:9E:30:18:97:1F
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 018CC56E248B565B3239F1FE58B6B5FA9B1F
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/zC5cnzJZXWJ15DovFhNZnjAYlx8.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201303
IP address blocks: 212.18.249.0/24 maxlen: 24
2a04:2b00:13ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:24:8b:56:5b:32:39:f1:fe:58:b6:b5:fa:9b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc2e5c9f32595d6275e43a2f1613599e3018971f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:e4:8d:78:56:b0:60:5a:d4:f3:14:e3:48:
7a:3d:f5:95:12:9f:7c:9a:af:e4:d5:af:d5:ab:bc:
e6:42:d5:d3:59:ca:e1:8d:57:0c:7e:0b:47:fa:a2:
90:5a:98:fc:54:7a:f6:8b:4e:a2:25:d7:7c:0f:c1:
90:38:91:3d:23:4f:d3:bf:a0:e3:e2:48:c7:17:b2:
69:9c:bb:af:a8:8f:37:d2:b7:de:74:77:a9:5f:6b:
77:c7:a4:40:b6:13:ff:63:01:47:f2:1a:a6:02:1d:
e2:dd:76:db:be:b6:7c:42:6b:3b:83:33:01:25:c1:
d1:02:61:67:f2:12:90:b1:2c:78:a3:b6:2f:54:84:
31:2d:02:15:c0:4b:69:f4:eb:58:0f:86:31:7f:1d:
de:43:0a:39:98:44:48:fd:db:d1:86:48:59:34:da:
72:1b:5e:ee:d0:9d:fd:d7:08:43:29:90:bc:9f:ab:
67:e1:64:47:06:7d:4a:ab:14:ce:40:a6:32:a0:50:
96:fd:8a:55:8c:b0:cc:4b:cc:6b:c4:b1:d0:1b:ba:
77:5a:49:90:62:a8:e1:56:46:99:46:c1:68:3c:e2:
92:52:62:a3:d0:47:49:3b:1b:24:fc:7e:2b:01:2f:
b7:d5:26:f0:10:70:d2:8a:46:77:75:6f:95:45:5b:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:5C:9F:32:59:5D:62:75:E4:3A:2F:16:13:59:9E:30:18:97:1F
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/zC5cnzJZXWJ15DovFhNZnjAYlx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.249.0/24
IPv6:
2a04:2b00:13ff::/48
Signature Algorithm: sha256WithRSAEncryption
44:b7:e5:2d:51:df:bd:2f:60:fe:32:4c:51:f9:b7:19:40:0c:
b0:da:c4:fc:ba:b7:c6:a7:35:ad:56:cb:e3:d1:fd:77:c6:c6:
9f:f4:a1:58:82:be:15:c6:43:3f:4c:d5:44:c1:6d:5b:61:73:
03:9f:87:ad:68:45:45:da:10:43:1b:e0:36:e9:04:a4:7d:27:
d9:5e:b8:01:ed:48:14:a9:10:03:88:3b:2e:ab:df:5d:4a:f8:
63:a8:b4:3d:3c:84:9b:b0:bf:de:3b:80:68:03:97:49:bd:0f:
80:80:cc:88:a9:87:bf:b5:11:44:1a:95:f9:93:50:1c:06:90:
83:df:50:49:3f:9a:56:2b:c8:a7:f3:c3:9b:31:06:2c:fa:eb:
06:a2:55:51:99:79:f9:b7:ae:aa:18:8c:a7:3b:e1:03:da:d7:
1e:88:21:33:69:0e:3b:87:9a:2f:de:d5:c3:4f:6f:6c:bd:a7:
2f:a3:3b:a7:bb:bc:bf:07:d2:b4:1a:5b:4d:d8:5a:a3:1c:2e:
a2:31:29:3e:06:a5:0c:b5:c7:50:f9:a0:42:de:b6:26:f8:75:
eb:ee:96:5f:49:e7:0b:d9:39:16:e5:85:64:8c:01:a4:95:fd:
38:65:5f:77:af:5b:01:fe:37:8d:d6:19:28:f9:a6:64:80:d6:
16:06:ae:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzFbiSLVlsyOfH+WLa1+psfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3
ZGY4ZDMwHhcNMjQwMTAxMTQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzJlNWM5ZjMyNTk1ZDYyNzVlNDNhMmYxNjEzNTk5ZTMwMTg5NzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq3kjXhWsGBa1PMU40h6PfWVEp98
mq/k1a/Vq7zmQtXTWcrhjVcMfgtH+qKQWpj8VHr2i06iJdd8D8GQOJE9I0/Tv6Dj
4kjHF7JpnLuvqI830rfedHepX2t3x6RAthP/YwFH8hqmAh3i3XbbvrZ8Qms7gzMB
JcHRAmFn8hKQsSx4o7YvVIQxLQIVwEtp9OtYD4Yxfx3eQwo5mERI/dvRhkhZNNpy
G17u0J391whDKZC8n6tn4WRHBn1KqxTOQKYyoFCW/YpVjLDMS8xrxLHQG7p3WkmQ
YqjhVkaZRsFoPOKSUmKj0EdJOxsk/H4rAS+31SbwEHDSikZ3dW+VRVvF8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMwuXJ8yWV1ideQ6LxYTWZ4wGJcfMB8GA1UdIwQY
MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt
MDUzOGU5NWYzZjEyLzEvekM1Y256SlpYV0oxNURvdkZoTlpuakFZbHg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy
LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1BL5MA8E
AgACMAkDBwAqBCsAE/8wDQYJKoZIhvcNAQELBQADggEBAES35S1R370vYP4yTFH5
txlADLDaxPy6t8anNa1Wy+PR/XfGxp/0oViCvhXGQz9M1UTBbVthcwOfh61oRUXa
EEMb4DbpBKR9J9leuAHtSBSpEAOIOy6r311K+GOotD08hJuwv947gGgDl0m9D4CA
zIiph7+1EUQalfmTUBwGkIPfUEk/mlYryKfzw5sxBiz66waiVVGZefm3rqoYjKc7
4QPa1x6IITNpDjuHmi/e1cNPb2y9py+jO6e7vL8H0rQaW03YWqMcLqIxKT4GpQy1
x1D5oELetib4devull9J5wvZORblhWSMAaSV/ThlX3evWwH+N43WGSj5pmSA1hYG
rh4=
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:08:18 2024 by rpki-client on console-fra.rpki-client.org