Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa
File: RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa (raw, json)
Hash identifier: I1lG/wsgJHXIcv+9byLqARn0vAd7bcyO21gP0xVb230=
Subject key identifier: 45:93:FE:FB:91:B6:74:4B:87:11:9E:91:B0:E9:DB:49:DF:5C:05:39
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 018CC9BC8DE360FF9D982D5FF72E10124A40
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa
Signing time: Tue 02 Jan 2024 10:33:46 +0000
ROA not before: Tue 02 Jan 2024 10:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34687
IP address blocks: 89.248.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8d:e3:60:ff:9d:98:2d:5f:f7:2e:10:12:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Jan 2 10:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4593fefb91b6744b87119e91b0e9db49df5c0539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:68:c5:b1:32:36:64:67:1d:3c:78:47:92:
15:f6:14:19:62:bf:43:f0:2f:2f:e8:e1:08:5a:1e:
86:bc:6c:d6:fc:b6:14:56:23:e4:15:bf:e6:61:23:
d9:c9:7a:4f:44:98:ce:5a:a2:b4:67:bb:16:ec:62:
ab:e5:42:22:2c:1c:ce:86:5e:02:cc:79:3d:9d:cf:
3d:2e:9f:cf:39:47:b5:3e:cb:c7:ff:b6:80:6d:3b:
57:60:f4:2e:b6:35:e8:3d:05:fb:60:b1:0a:d7:27:
5a:ec:15:a9:82:d5:8f:46:06:42:2b:fa:99:fb:d5:
dd:42:72:b2:b1:29:3b:d0:63:a0:53:03:54:15:17:
c2:5e:f2:63:62:11:42:56:c0:c8:9a:70:e7:33:a2:
15:70:a9:d9:14:c7:49:27:65:0b:c6:eb:27:10:30:
3f:10:6c:30:d5:74:31:ef:8d:ce:86:b8:b2:4b:01:
1f:a2:f4:5b:93:36:1e:49:80:97:21:07:2a:4c:55:
60:60:01:8b:91:4e:4d:01:f6:20:f9:61:77:dc:f6:
ed:af:ec:85:1e:c5:26:bd:24:5c:d8:5a:13:37:95:
06:50:e0:ab:d8:92:0f:11:5c:37:d4:c1:aa:74:86:
16:88:ab:b4:1b:9b:a3:93:7f:ba:bf:39:0e:54:28:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:FE:FB:91:B6:74:4B:87:11:9E:91:B0:E9:DB:49:DF:5C:05:39
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.176.0/20
Signature Algorithm: sha256WithRSAEncryption
45:af:64:1c:a6:75:b7:b9:9e:cd:23:c7:dd:51:03:60:a6:19:
84:34:bf:93:42:c2:5c:6f:de:45:fb:61:2e:d8:58:88:99:e1:
92:56:46:d0:8f:46:de:15:55:31:90:f8:d2:fb:c4:5f:3c:67:
81:fc:e4:f4:f3:b2:1b:13:b0:88:09:a2:d4:0f:18:67:13:c9:
05:a8:c4:07:8b:15:a7:23:8e:c8:7d:73:93:78:f8:08:3d:d0:
94:eb:0f:38:8e:ef:c5:f7:8a:61:fd:a1:dd:c2:bc:fb:bb:4f:
0c:f5:47:d9:ae:3f:b9:dc:ae:de:92:60:30:e7:3f:f2:a3:60:
a4:77:ae:63:d9:73:c1:4b:65:58:b1:b8:7a:e3:a0:d7:cc:03:
c3:20:f5:d6:c6:bd:1a:70:9f:c5:62:84:2d:07:ca:aa:c8:60:
fa:da:5d:dc:a5:5f:9e:04:dc:41:c7:eb:7f:24:34:8b:37:21:
40:ac:e8:58:12:2e:4a:e8:21:9e:24:bb:93:7a:6f:74:d5:5b:
97:2b:f1:a7:03:7e:ee:70:03:fc:8f:2d:83:bf:af:02:f1:15:
48:48:b8:87:82:a2:68:d2:70:30:b3:72:36:0f:d1:c0:73:5f:
5a:a1:97:39:1e:d9:df:18:94:b3:65:a8:87:92:cc:d7:10:e2:
65:a1:c1:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvI3jYP+dmC1f9y4QEkpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjBmODQ3ZTFhMjE2ZTc1NDNjNzUyYTYzNTBjNmJlMjNj
N2M2ZDUwHhcNMjQwMTAyMTAzMzQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTkzZmVmYjkxYjY3NDRiODcxMTllOTFiMGU5ZGI0OWRmNWMwNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFZoxbEyNmRnHTx4R5IV9hQZYr9D
8C8v6OEIWh6GvGzW/LYUViPkFb/mYSPZyXpPRJjOWqK0Z7sW7GKr5UIiLBzOhl4C
zHk9nc89Lp/POUe1PsvH/7aAbTtXYPQutjXoPQX7YLEK1yda7BWpgtWPRgZCK/qZ
+9XdQnKysSk70GOgUwNUFRfCXvJjYhFCVsDImnDnM6IVcKnZFMdJJ2ULxusnEDA/
EGww1XQx743OhriySwEfovRbkzYeSYCXIQcqTFVgYAGLkU5NAfYg+WF33Pbtr+yF
HsUmvSRc2FoTN5UGUOCr2JIPEVw31MGqdIYWiKu0G5ujk3+6vzkOVCj89QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWT/vuRtnRLhxGekbDp20nfXAU5MB8GA1UdIwQY
MBaAFGvw+EfhohbnVDx1KmNQxr4jx8bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDkt
Njk5OWE5OWRjZjFlLzEvUlpQLS01RzJkRXVIRVo2UnNPbmJTZDljQlRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDktNjk5OWE5OWRjZjFl
LzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWfiwMA0G
CSqGSIb3DQEBCwUAA4IBAQBFr2QcpnW3uZ7NI8fdUQNgphmENL+TQsJcb95F+2Eu
2FiImeGSVkbQj0beFVUxkPjS+8RfPGeB/OT087IbE7CICaLUDxhnE8kFqMQHixWn
I47IfXOTePgIPdCU6w84ju/F94ph/aHdwrz7u08M9UfZrj+53K7ekmAw5z/yo2Ck
d65j2XPBS2VYsbh646DXzAPDIPXWxr0acJ/FYoQtB8qqyGD62l3cpV+eBNxBx+t/
JDSLNyFArOhYEi5K6CGeJLuTem901VuXK/GnA37ucAP8jy2Dv68C8RVISLiHgqJo
0nAws3I2D9HAc19aoZc5HtnfGJSzZaiHkszXEOJlocGd
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:57:47 2024 by rpki-client on console-fra.rpki-client.org