Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/mz-CCZCDbCjAbSiAEdWK5or1hIU.roa
File: mz-CCZCDbCjAbSiAEdWK5or1hIU.roa (raw, json)
Hash identifier: trpQqiuUMYzX7adSHWugLbz29JE8atHUwdsojz2+mo0=
Subject key identifier: 9B:3F:82:09:90:83:6C:28:C0:6D:28:80:11:D5:8A:E6:8A:F5:84:85
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 018D21246D16F153D74721E5120E2D7DD41A
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/mz-CCZCDbCjAbSiAEdWK5or1hIU.roa
Signing time: Fri 19 Jan 2024 09:54:11 +0000
ROA not before: Fri 19 Jan 2024 09:54:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.28.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 07:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:24:6d:16:f1:53:d7:47:21:e5:12:0e:2d:7d:d4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Jan 19 09:54:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b3f820990836c28c06d288011d58ae68af58485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:d4:73:c9:ea:1c:5c:91:cc:c0:0b:31:35:
99:f0:c2:1a:7e:be:da:95:22:85:27:54:88:80:0e:
4d:ad:c2:28:46:6d:86:44:c7:e1:c8:d9:e0:25:eb:
47:6a:38:21:3d:31:e7:f0:74:38:ff:05:8d:89:ac:
b8:35:3b:aa:8a:78:a5:2b:f4:52:55:dc:5b:38:ad:
71:d9:4d:54:db:2f:f1:02:90:a0:c3:9c:cb:81:fd:
06:51:e7:5e:11:87:a5:28:c3:12:ba:54:aa:6f:ea:
d7:85:20:43:8c:78:24:89:1e:d2:45:a7:7a:d1:49:
37:9f:49:cf:6e:23:a3:d1:1c:6a:f2:72:13:7e:a5:
12:b6:eb:83:4b:db:d9:5b:1f:df:7f:eb:f9:66:0b:
bd:ce:1b:c9:db:da:66:f5:f0:96:89:a1:28:0d:59:
27:53:79:04:5e:dc:72:40:7c:22:cc:14:93:37:06:
d5:3c:1c:83:f0:96:aa:70:44:7c:66:2c:b6:96:f9:
1b:a3:d5:a6:c0:8c:b8:e8:0e:f6:cd:fa:8e:89:5f:
33:62:37:d0:7e:83:2a:1b:d9:0b:33:bd:db:7e:d3:
39:6b:ed:92:83:3b:bc:65:f6:43:b1:ae:48:e8:5b:
82:04:c0:97:b9:ef:4b:bc:f4:e2:0d:de:47:c1:ca:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3F:82:09:90:83:6C:28:C0:6D:28:80:11:D5:8A:E6:8A:F5:84:85
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/mz-CCZCDbCjAbSiAEdWK5or1hIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.68.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f7:ff:02:fc:32:2e:a7:da:41:4e:ec:ef:7e:95:e3:c8:fd:
9e:a7:ff:9c:00:71:16:54:79:69:f4:33:39:fa:59:96:f5:50:
7f:b7:42:88:92:18:c1:f5:64:29:e8:3a:90:a3:b7:f2:83:8c:
6a:32:3c:4f:32:f4:2c:89:78:5e:d4:f9:bd:4e:5e:fb:d5:56:
8d:a0:fe:a8:cf:da:34:5b:0a:90:9a:8e:ef:7d:b6:61:cc:1b:
f5:31:0f:84:03:4d:83:6c:e2:f0:6e:57:f0:e1:e0:e7:99:a2:
2f:9c:8b:9a:90:c1:7e:99:16:ac:93:4c:30:1f:2b:e3:ef:f0:
a1:4b:c9:87:87:67:6a:4c:e1:31:d7:b0:22:14:ee:ae:a9:e1:
8c:6a:86:76:a1:eb:7f:14:b7:0f:f6:6f:65:60:02:63:f3:7e:
27:ad:2d:1f:9e:c6:60:16:d2:0b:0b:28:4e:ca:6b:93:f0:91:
7f:c7:61:60:75:4c:14:d7:85:25:42:12:2f:f4:a5:a1:92:f1:
05:36:94:5f:1c:60:43:22:84:b3:86:2d:85:93:7d:35:70:51:
f9:3e:8b:ae:ac:59:ac:4d:7f:17:5d:a6:c1:72:bd:7c:1e:c8:
48:2a:2d:96:cf:54:25:a6:91:bf:0c:81:72:64:7b:fd:bc:37:
34:06:0d:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0hJG0W8VPXRyHlEg4tfdQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MmIxZWI2MTAwYzBjYTU2NDQ0MzcwNThkNDJmNGZkNzIy
MzM2ODEwHhcNMjQwMTE5MDk1NDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjNmODIwOTkwODM2YzI4YzA2ZDI4ODAxMWQ1OGFlNjhhZjU4NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXLUc8nqHFyRzMALMTWZ8MIafr7a
lSKFJ1SIgA5NrcIoRm2GRMfhyNngJetHajghPTHn8HQ4/wWNiay4NTuqinilK/RS
VdxbOK1x2U1U2y/xApCgw5zLgf0GUedeEYelKMMSulSqb+rXhSBDjHgkiR7SRad6
0Uk3n0nPbiOj0Rxq8nITfqUStuuDS9vZWx/ff+v5Zgu9zhvJ29pm9fCWiaEoDVkn
U3kEXtxyQHwizBSTNwbVPByD8JaqcER8Ziy2lvkbo9WmwIy46A72zfqOiV8zYjfQ
foMqG9kLM73bftM5a+2Sgzu8ZfZDsa5I6FuCBMCXue9LvPTiDd5Hwcq/kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJs/ggmQg2wowG0ogBHViuaK9YSFMB8GA1UdIwQY
MBaAFAcrHrYQDAylZEQ3BY1C9P1yIzaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEt
MGUwN2U1YTY2ZDU5LzEvbXotQ0NaQ0RiQ2pBYlNpQUVkV0s1b3IxaElVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEtMGUwN2U1YTY2ZDU5
LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRxEMA0G
CSqGSIb3DQEBCwUAA4IBAQBi9/8C/DIup9pBTuzvfpXjyP2ep/+cAHEWVHlp9DM5
+lmW9VB/t0KIkhjB9WQp6DqQo7fyg4xqMjxPMvQsiXhe1Pm9Tl771VaNoP6oz9o0
WwqQmo7vfbZhzBv1MQ+EA02DbOLwblfw4eDnmaIvnIuakMF+mRask0wwHyvj7/Ch
S8mHh2dqTOEx17AiFO6uqeGMaoZ2oet/FLcP9m9lYAJj834nrS0fnsZgFtILCyhO
ymuT8JF/x2FgdUwU14UlQhIv9KWhkvEFNpRfHGBDIoSzhi2Fk301cFH5PouurFms
TX8XXabBcr18HshIKi2Wz1QlppG/DIFyZHv9vDc0Bg2L
-----END CERTIFICATE-----
Generated at Wed May 8 13:27:46 2024 by rpki-client on console-fra.rpki-client.org