Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/zXhdiQ6TTXgn6nSv5E-WBqXOrvg.roa
File: zXhdiQ6TTXgn6nSv5E-WBqXOrvg.roa (raw, json)
Hash identifier: RXmJufObw7I0fVaKjQnwv+4tlxZ+dSfpKMg2qqapCaY=
Subject key identifier: CD:78:5D:89:0E:93:4D:78:27:EA:74:AF:E4:4F:96:06:A5:CE:AE:F8
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 018CC6B82327699DAF7D1727EE35CD96BD71
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/zXhdiQ6TTXgn6nSv5E-WBqXOrvg.roa
Signing time: Mon 01 Jan 2024 20:30:05 +0000
ROA not before: Mon 01 Jan 2024 20:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 145.219.11.0/24 maxlen: 24
145.219.8.0/24 maxlen: 24
145.219.10.0/24 maxlen: 24
145.219.9.0/24 maxlen: 24
145.219.15.0/24 maxlen: 24
145.219.17.0/24 maxlen: 24
145.219.16.0/24 maxlen: 24
145.219.12.0/24 maxlen: 24
145.219.14.0/24 maxlen: 24
145.219.13.0/24 maxlen: 24
2a04:b0c0::/45 maxlen: 45
2a04:b0c0:8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:23:27:69:9d:af:7d:17:27:ee:35:cd:96:bd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Jan 1 20:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd785d890e934d7827ea74afe44f9606a5ceaef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:01:ad:53:90:f9:bf:fe:08:61:30:6c:c3:
6c:f1:4a:c4:da:43:67:21:68:94:d6:fd:8a:ab:e7:
08:6f:10:4c:f2:24:7f:1c:14:20:4d:c4:06:90:f1:
11:de:49:f8:6f:ef:6c:fd:e9:0f:35:fc:15:d4:4e:
d3:80:22:36:a3:dc:71:ac:ff:76:12:3b:2a:75:80:
0e:98:2d:78:d3:dc:d3:73:c2:b4:64:94:1d:d6:fc:
90:c8:60:b8:3d:9e:e0:21:d5:d9:9c:2d:c2:0b:dc:
1e:52:da:8c:69:b8:19:27:26:64:c5:fe:3c:a5:df:
90:79:24:01:df:51:cb:f7:e7:ad:ed:f7:e5:74:5c:
4b:db:4b:75:fe:08:a3:04:ba:fe:cc:90:18:6f:4c:
76:47:fe:d1:44:b5:cc:da:8d:e2:7d:e8:37:37:ea:
27:79:11:e7:4f:d9:6f:47:36:b2:25:c6:03:51:6f:
45:d6:a8:f1:f4:ce:ab:3f:5c:ef:78:c1:c4:57:62:
43:5b:38:ef:5d:33:e7:c1:70:66:11:51:f5:52:9e:
2d:02:49:ef:43:04:8d:c6:f5:12:69:ac:3f:4a:0d:
28:b6:83:bf:74:5c:35:22:a3:c0:7f:c7:41:6e:de:
00:fe:1d:34:af:44:40:04:8e:3f:a2:a8:0b:e7:d4:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:78:5D:89:0E:93:4D:78:27:EA:74:AF:E4:4F:96:06:A5:CE:AE:F8
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/zXhdiQ6TTXgn6nSv5E-WBqXOrvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.8.0-145.219.17.255
IPv6:
2a04:b0c0::/44
Signature Algorithm: sha256WithRSAEncryption
92:5f:21:03:e2:2a:55:ff:b3:d3:ee:63:1d:33:b9:36:9f:51:
29:96:f9:ef:86:7c:7e:35:f8:57:56:e2:88:33:1f:dc:76:b1:
10:3d:6d:d4:2c:5c:8c:ca:3a:26:04:7b:69:35:78:56:17:b5:
1f:65:11:30:7e:ba:92:d8:d8:b7:5d:62:d8:1d:fb:6c:53:12:
77:70:2e:1a:ba:54:84:a4:2a:b2:3b:34:7c:52:1c:54:6e:1e:
4c:b5:85:07:b1:b2:09:58:71:c2:bd:ea:11:fb:11:54:4e:0b:
32:17:45:69:50:ef:3c:52:52:57:17:d6:d2:c9:87:50:a6:1f:
5d:0e:cb:3e:cd:15:bb:df:08:06:60:7b:57:a7:e6:1d:8f:3f:
4f:08:9b:b9:6d:5e:cb:4d:b2:fc:82:2c:9f:04:ac:1c:ba:df:
97:00:2b:f4:fe:3e:85:09:cf:c0:74:bf:97:d7:30:32:73:3f:
13:d1:41:af:ea:95:37:a9:f2:44:49:40:53:3f:20:3f:55:2a:
28:eb:8c:39:d9:b4:12:2f:da:29:62:e7:cd:ed:5f:80:d6:4b:
44:41:76:20:2c:2f:d3:48:7c:0b:b0:7c:22:54:9c:7c:02:62:
a1:fe:13:b7:a0:83:58:21:0f:f6:c8:b5:33:16:db:3e:b3:2f:
5d:8c:3f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzGuCMnaZ2vfRcn7jXNlr1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy
ODJlMzAwHhcNMjQwMTAxMjAzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDc4NWQ4OTBlOTM0ZDc4MjdlYTc0YWZlNDRmOTYwNmE1Y2VhZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNABrVOQ+b/+CGEwbMNs8UrE2kNn
IWiU1v2Kq+cIbxBM8iR/HBQgTcQGkPER3kn4b+9s/ekPNfwV1E7TgCI2o9xxrP92
EjsqdYAOmC1409zTc8K0ZJQd1vyQyGC4PZ7gIdXZnC3CC9weUtqMabgZJyZkxf48
pd+QeSQB31HL9+et7ffldFxL20t1/gijBLr+zJAYb0x2R/7RRLXM2o3ifeg3N+on
eRHnT9lvRzayJcYDUW9F1qjx9M6rP1zveMHEV2JDWzjvXTPnwXBmEVH1Up4tAknv
QwSNxvUSaaw/Sg0otoO/dFw1IqPAf8dBbt4A/h00r0RABI4/oqgL59RZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM14XYkOk014J+p0r+RPlgalzq74MB8GA1UdIwQY
MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt
OTMxOTRlYjYxMDhkLzEvelhoZGlRNlRUWGduNm5TdjVFLVdCcVhPcnZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk
LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAOR2wgD
BAGR2xAwDwQCAAIwCQMHBCoEsMAAADANBgkqhkiG9w0BAQsFAAOCAQEAkl8hA+Iq
Vf+z0+5jHTO5Np9RKZb574Z8fjX4V1biiDMf3HaxED1t1CxcjMo6JgR7aTV4Vhe1
H2URMH66ktjYt11i2B37bFMSd3AuGrpUhKQqsjs0fFIcVG4eTLWFB7GyCVhxwr3q
EfsRVE4LMhdFaVDvPFJSVxfW0smHUKYfXQ7LPs0Vu98IBmB7V6fmHY8/TwibuW1e
y02y/IIsnwSsHLrflwAr9P4+hQnPwHS/l9cwMnM/E9FBr+qVN6nyRElAUz8gP1Uq
KOuMOdm0Ei/aKWLnze1fgNZLREF2ICwv00h8C7B8IlScfAJiof4Tt6CDWCEP9si1
MxbbPrMvXYw/6A==
-----END CERTIFICATE-----
Generated at Sun May 5 19:46:50 2024 by rpki-client on console-fra.rpki-client.org