Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/zpBs9fu8j4zmTtAS9arcLjOW2Sw.roa
File: zpBs9fu8j4zmTtAS9arcLjOW2Sw.roa (raw, json)
Hash identifier: XADnaW/z7agGU3eGC/gw+4TKQC3nbMfjitnjbXK8J4M=
Subject key identifier: CE:90:6C:F5:FB:BC:8F:8C:E6:4E:D0:12:F5:AA:DC:2E:33:96:D9:2C
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 018CC5010880E1BFAF3D922391F8948F707A
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/zpBs9fu8j4zmTtAS9arcLjOW2Sw.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42000
IP address blocks: 212.18.101.0/24 maxlen: 24
2a12:5c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:08:80:e1:bf:af:3d:92:23:91:f8:94:8f:70:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce906cf5fbbc8f8ce64ed012f5aadc2e3396d92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:c6:5d:b5:1e:8d:80:c3:87:a6:d0:7d:1b:
da:5b:86:55:18:5e:1d:6e:1a:c9:ad:fb:44:b6:5c:
e9:c5:20:a9:62:42:09:92:f0:f7:0d:5d:9c:8c:f7:
3c:61:d9:01:09:7c:44:95:71:8e:95:cf:fc:4f:a8:
4b:20:13:5b:38:1f:94:18:4f:27:7c:ed:f0:d7:9c:
9a:b6:55:b7:7d:f8:16:ad:dd:65:05:e7:e5:58:08:
8c:06:29:50:a1:40:db:04:ce:4b:8e:6a:87:a7:0c:
21:a2:36:71:84:b8:16:29:b2:49:6d:66:e2:a8:54:
e2:3c:d3:27:a5:12:ee:ce:6e:d4:15:9a:94:6e:75:
d5:a9:73:5a:6b:31:b1:28:20:b5:99:d2:bf:05:48:
11:a7:7b:04:c4:a9:c7:62:a1:77:47:04:59:5d:f9:
8a:c8:3c:5b:c8:b8:4b:00:bb:5c:f5:60:6f:a5:1f:
5f:d5:cb:c0:f1:8b:f6:c4:ee:37:4b:76:91:a8:d2:
e6:f3:16:e5:95:55:0a:97:b8:93:d4:8f:cf:0d:f3:
0a:c8:b6:fd:15:c5:f1:30:19:9a:09:da:00:6a:99:
5e:04:1f:be:a1:d7:00:2d:ab:0b:bb:c4:7b:29:2e:
a9:09:2c:f5:d7:47:ba:96:fb:ab:31:40:08:19:6d:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:6C:F5:FB:BC:8F:8C:E6:4E:D0:12:F5:AA:DC:2E:33:96:D9:2C
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/zpBs9fu8j4zmTtAS9arcLjOW2Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.101.0/24
IPv6:
2a12:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
06:71:44:99:8c:c0:dc:e5:3c:38:ad:d2:49:92:11:25:c5:23:
46:0b:d0:eb:cb:69:b3:35:5b:0e:f4:9f:15:4d:f2:d1:8e:a6:
4d:b3:f4:8b:0f:3b:32:67:8f:45:3f:33:4f:30:c3:a8:9d:b7:
93:85:d0:a8:87:8e:00:a4:ad:9a:88:4f:bb:ff:c9:96:a8:2a:
70:d4:57:56:c5:ee:aa:48:3c:60:0d:ac:9d:a1:46:ef:7d:35:
0c:05:4f:1d:55:3f:26:dd:c2:4c:cc:19:5a:e0:69:02:a4:61:
49:bb:0a:69:23:40:ff:a1:8c:24:85:6c:02:80:e8:86:87:a5:
9d:32:b4:98:86:24:5a:7a:f5:14:f9:3f:e8:37:a7:0b:ee:bb:
de:56:91:3d:3e:07:92:b8:c7:ed:5c:e1:27:fe:dd:bb:8a:33:
7e:2c:18:e3:e1:3f:8c:e3:c8:a7:b9:82:b7:92:1d:7f:17:db:
d8:9b:4e:63:74:44:d0:78:83:46:4f:21:e7:aa:d4:49:dc:b0:
0a:5c:90:96:80:0d:94:82:70:83:72:5d:15:99:e2:b4:9c:4d:
6b:42:e1:ca:d2:e1:1a:d7:55:fd:d2:49:93:a9:ef:b4:2a:9e:
2e:c1:7f:75:53:75:dc:69:e3:b9:24:0b:89:53:b8:40:b4:23:
f4:28:45:16
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFAQiA4b+vPZIjkfiUj3B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWY0Y2U5MTM5NjIxODFjZjdjOTM3NmRmYWI1YTIyNWQ2
ZTVhZWEwHhcNMjQwMTAxMTIzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTkwNmNmNWZiYmM4ZjhjZTY0ZWQwMTJmNWFhZGMyZTMzOTZkOTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YnGXbUejYDDh6bQfRvaW4ZVGF4d
bhrJrftEtlzpxSCpYkIJkvD3DV2cjPc8YdkBCXxElXGOlc/8T6hLIBNbOB+UGE8n
fO3w15yatlW3ffgWrd1lBeflWAiMBilQoUDbBM5LjmqHpwwhojZxhLgWKbJJbWbi
qFTiPNMnpRLuzm7UFZqUbnXVqXNaazGxKCC1mdK/BUgRp3sExKnHYqF3RwRZXfmK
yDxbyLhLALtc9WBvpR9f1cvA8Yv2xO43S3aRqNLm8xbllVUKl7iT1I/PDfMKyLb9
FcXxMBmaCdoAapleBB++odcALasLu8R7KS6pCSz110e6lvurMUAIGW0G/QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFM6QbPX7vI+M5k7QEvWq3C4zltksMB8GA1UdIwQY
MBaAFIdfTOkTliGBz3yTdt+rWiJdblrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEt
MzhkZmVhZjJiNzEwLzEvenBCczlmdThqNHptVHRBUzlhcmNMak9XMlN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEtMzhkZmVhZjJiNzEw
LzEvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1BJlMA0E
AgACMAcDBQAqElwAMA0GCSqGSIb3DQEBCwUAA4IBAQAGcUSZjMDc5Tw4rdJJkhEl
xSNGC9Dry2mzNVsO9J8VTfLRjqZNs/SLDzsyZ49FPzNPMMOonbeThdCoh44ApK2a
iE+7/8mWqCpw1FdWxe6qSDxgDaydoUbvfTUMBU8dVT8m3cJMzBla4GkCpGFJuwpp
I0D/oYwkhWwCgOiGh6WdMrSYhiRaevUU+T/oN6cL7rveVpE9PgeSuMftXOEn/t27
ijN+LBjj4T+M48inuYK3kh1/F9vYm05jdETQeINGTyHnqtRJ3LAKXJCWgA2UgnCD
cl0VmeK0nE1rQuHK0uEa11X90kmTqe+0Kp4uwX91U3XcaeO5JAuJU7hAtCP0KEUW
-----END CERTIFICATE-----
Generated at Fri Jun 28 07:28:42 2024 by rpki-client on console-fra.rpki-client.org