Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/z3ao7CZZMLhtZcCpzDlsUHt2G1c.roa
File: z3ao7CZZMLhtZcCpzDlsUHt2G1c.roa (raw, json)
Hash identifier: 3QZ+e4jFpbd1X/h+wV3/qk69XsS/pSQxDq3HX3E2Hag=
Subject key identifier: CF:76:A8:EC:26:59:30:B8:6D:65:C0:A9:CC:39:6C:50:7B:76:1B:57
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019024D8ED737DFD3599371DBB3EE62FF328
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/z3ao7CZZMLhtZcCpzDlsUHt2G1c.roa
Signing time: Mon 17 Jun 2024 06:18:34 +0000
ROA not before: Mon 17 Jun 2024 06:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216183
IP address blocks: 80.246.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:24:d8:ed:73:7d:fd:35:99:37:1d:bb:3e:e6:2f:f3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 17 06:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf76a8ec265930b86d65c0a9cc396c507b761b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:a3:1b:ba:75:06:e1:de:b8:89:9b:84:47:
74:83:c7:62:c5:b8:4f:4e:f3:c6:ca:d4:90:75:02:
88:9e:9b:80:81:30:74:19:e0:c6:80:3e:ef:a0:d3:
74:4d:e5:8b:94:25:df:b8:43:eb:a7:ef:2e:cb:df:
34:fc:20:04:21:5f:94:f4:ec:15:fd:c7:67:b0:cb:
2f:71:0b:d2:35:55:f4:29:33:fd:14:91:3a:96:58:
9a:df:cb:1d:df:1b:44:26:ba:63:e6:e7:4c:28:fd:
ae:65:0e:7a:60:87:b4:00:16:d0:9d:f8:55:35:08:
51:3c:c7:60:47:86:a8:82:6f:21:c0:3a:f4:1f:b7:
ef:cf:8a:68:42:02:f8:d1:ff:fa:4d:79:2a:f1:c6:
2d:96:c3:9f:23:8c:5b:b1:d9:29:2a:5f:5e:9b:93:
84:71:87:dd:43:c8:f4:35:79:59:a6:eb:7d:b2:55:
f6:58:d9:66:5e:3d:77:bd:a9:33:9a:af:d0:81:ad:
84:88:7a:2e:c1:96:56:c1:66:0b:2b:07:49:87:f2:
ea:6d:40:a4:4d:35:c4:32:a4:61:d1:48:28:48:0c:
fc:62:58:f3:6d:a0:8d:18:6b:ae:8a:7d:7d:f0:ed:
2c:89:11:b3:76:fa:06:c7:8c:61:c2:df:81:2b:93:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:76:A8:EC:26:59:30:B8:6D:65:C0:A9:CC:39:6C:50:7B:76:1B:57
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/z3ao7CZZMLhtZcCpzDlsUHt2G1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
89:30:0f:23:e8:7f:d4:fd:fa:18:51:b6:82:e5:37:17:01:37:
37:dd:d5:6c:a5:e9:b9:ee:29:ab:46:b8:fc:f9:6e:73:07:74:
f9:ea:42:1c:b9:ca:d8:7b:f9:b9:d4:5f:12:21:5e:6f:f7:74:
92:f3:ae:ae:83:1d:d7:36:cf:6a:b1:ef:99:0e:6e:67:1c:54:
b6:9e:9e:9b:3c:e4:67:d0:6b:99:9f:12:c8:e5:96:c5:26:cd:
a7:a1:cd:d6:e0:71:5a:9a:a8:87:96:23:64:c4:cc:24:6d:02:
a3:11:12:28:b6:94:b1:a0:3a:1f:92:0a:c8:9e:99:65:76:79:
5d:d1:75:2c:d9:30:be:94:5a:06:08:53:01:b0:d1:72:89:f3:
8d:6c:f7:50:5e:b0:71:8e:4c:f2:8a:a3:bb:6e:0b:33:3f:82:
96:de:93:11:c9:db:05:52:74:26:1d:94:b6:1c:c9:17:9b:1e:
5e:51:63:63:e8:cf:10:62:1c:5d:1e:18:c1:3f:0d:eb:49:2a:
6f:a2:7f:b6:85:3b:bf:70:4f:63:1c:6f:94:6f:59:c6:60:13:
8c:f9:7d:50:5b:49:55:60:10:94:be:45:ab:f0:ea:5e:62:5d:
2d:0d:00:77:7e:d6:1c:22:34:cb:c6:a5:45:33:50:13:0f:4b:
dc:bd:c9:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAk2O1zff01mTcduz7mL/MoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQwNjE3MDYxODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjc2YThlYzI2NTkzMGI4NmQ2NWMwYTljYzM5NmM1MDdiNzYxYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6WjG7p1BuHeuImbhEd0g8dixbhP
TvPGytSQdQKInpuAgTB0GeDGgD7voNN0TeWLlCXfuEPrp+8uy980/CAEIV+U9OwV
/cdnsMsvcQvSNVX0KTP9FJE6llia38sd3xtEJrpj5udMKP2uZQ56YIe0ABbQnfhV
NQhRPMdgR4aogm8hwDr0H7fvz4poQgL40f/6TXkq8cYtlsOfI4xbsdkpKl9em5OE
cYfdQ8j0NXlZput9slX2WNlmXj13vakzmq/Qga2EiHouwZZWwWYLKwdJh/LqbUCk
TTXEMqRh0UgoSAz8YljzbaCNGGuuin198O0siRGzdvoGx4xhwt+BK5NyYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM92qOwmWTC4bWXAqcw5bFB7dhtXMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvejNhbzdDWlpNTGh0WmNDcHpEbHNVSHQyRzFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbiMA0G
CSqGSIb3DQEBCwUAA4IBAQCJMA8j6H/U/foYUbaC5TcXATc33dVspem57imrRrj8
+W5zB3T56kIcucrYe/m51F8SIV5v93SS866ugx3XNs9qse+ZDm5nHFS2np6bPORn
0GuZnxLI5ZbFJs2noc3W4HFamqiHliNkxMwkbQKjERIotpSxoDofkgrInplldnld
0XUs2TC+lFoGCFMBsNFyifONbPdQXrBxjkzyiqO7bgszP4KW3pMRydsFUnQmHZS2
HMkXmx5eUWNj6M8QYhxdHhjBPw3rSSpvon+2hTu/cE9jHG+Ub1nGYBOM+X1QW0lV
YBCUvkWr8OpeYl0tDQB3ftYcIjTLxqVFM1ATD0vcvcnf
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:38 2024 by rpki-client on console-ams.rpki-client.org