Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/pZkKvK2f8EzrT60n8NSQ1kyIPTU.roa
File: pZkKvK2f8EzrT60n8NSQ1kyIPTU.roa (raw, json)
Hash identifier: I1aNtqzaTZq9uwnwGEcppkV7gS+HWxaQQxOM8PIYkZQ=
Subject key identifier: A5:99:0A:BC:AD:9F:F0:4C:EB:4F:AD:27:F0:D4:90:D6:4C:88:3D:35
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 018CC8010F25D0A500E41B47770A35B8B9BA
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/pZkKvK2f8EzrT60n8NSQ1kyIPTU.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 91.208.180.0/24 maxlen: 24
91.236.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0f:25:d0:a5:00:e4:1b:47:77:0a:35:b8:b9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5990abcad9ff04ceb4fad27f0d490d64c883d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:86:0d:29:8f:5c:77:28:ab:1c:3c:f6:34:
92:da:f5:b4:c9:9c:4e:d9:79:ba:4f:dc:6a:ec:94:
23:09:b0:d4:48:ef:67:d0:2d:4c:04:ec:b5:4b:4c:
28:ef:e8:21:f7:62:11:4c:d1:41:d5:1e:65:9d:a4:
51:ab:01:51:6d:a4:35:a7:b1:e0:99:47:21:fb:16:
6c:87:a3:d6:37:54:4f:a9:fc:98:44:79:3d:12:63:
c3:a2:40:e7:22:e2:1c:19:83:33:bd:81:a7:2b:39:
f4:01:2a:e1:5f:20:c3:60:ea:6b:cf:96:4a:88:67:
20:e9:20:25:1e:c5:55:91:6d:0c:80:d2:1a:6e:46:
08:aa:d5:7a:fb:30:3e:ce:56:56:1f:dc:5b:60:2d:
2b:cd:af:f5:33:08:fc:ce:82:5b:d7:31:a5:59:b2:
c6:c1:02:bf:f8:6a:f2:e8:40:7f:16:a2:cc:16:2e:
84:76:2f:e9:ca:6b:21:c8:d0:a8:29:dd:30:f9:66:
c4:ae:78:6a:d9:00:9f:87:cf:3b:69:f5:6f:42:e8:
95:26:56:5f:8f:67:fd:b0:c6:d6:d0:16:da:04:0e:
8d:0e:51:86:45:fd:ce:87:2c:37:f0:e7:2b:47:31:
4e:0f:46:54:c7:9a:63:ab:02:a7:14:e9:59:e5:1f:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:0A:BC:AD:9F:F0:4C:EB:4F:AD:27:F0:D4:90:D6:4C:88:3D:35
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/pZkKvK2f8EzrT60n8NSQ1kyIPTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.180.0/24
91.236.78.0/24
Signature Algorithm: sha256WithRSAEncryption
52:61:09:31:ff:31:61:70:46:10:bb:9a:d2:78:0d:b8:3f:07:
93:5e:d2:3c:0d:a1:ac:41:7f:20:01:20:a4:40:1e:9a:35:8b:
0e:6f:8f:a2:f2:22:8f:01:fd:a9:2f:e9:09:e3:39:fb:92:4f:
01:50:70:65:a1:c4:3c:ca:24:d1:50:85:54:99:dd:63:f0:f0:
df:ee:cc:3e:31:5c:b5:3a:f5:54:60:ee:4d:bc:fa:80:83:89:
82:0b:f5:8f:34:34:05:87:82:07:ab:31:42:0a:02:65:fd:b4:
e7:59:b3:c7:d1:0c:3b:68:36:1f:92:9a:24:7b:9c:ba:dd:80:
e1:77:ab:91:61:40:2e:20:7c:f9:25:7c:45:77:bb:b3:b4:0b:
c9:48:c3:52:19:b3:57:91:d5:21:5d:99:ec:a4:b3:91:4a:f4:
3d:3a:fb:6b:22:45:c6:86:67:81:5a:ce:c5:c2:43:02:5c:67:
8a:65:55:fd:fe:0b:fc:6b:f8:25:5e:36:e3:2b:74:7c:f8:68:
5e:66:66:c8:b2:05:cf:f7:72:77:a0:22:e8:29:fa:db:6e:38:
38:3a:be:7d:e8:9f:4a:1d:fb:37:02:57:d0:29:e0:1b:16:57:
65:56:a3:bc:c6:1d:60:d3:b3:92:d2:62:12:cb:5d:f3:29:b5:
2e:93:ce:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAQ8l0KUA5BtHdwo1uLm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmQwOTkyODcyMTUyYTg2ZDYwZDk2M2I4N2QwMTgxN2Mw
MGZjNTMwHhcNMjQwMTAyMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTk5MGFiY2FkOWZmMDRjZWI0ZmFkMjdmMGQ0OTBkNjRjODgzZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE+GDSmPXHcoqxw89jSS2vW0yZxO
2Xm6T9xq7JQjCbDUSO9n0C1MBOy1S0wo7+gh92IRTNFB1R5lnaRRqwFRbaQ1p7Hg
mUch+xZsh6PWN1RPqfyYRHk9EmPDokDnIuIcGYMzvYGnKzn0ASrhXyDDYOprz5ZK
iGcg6SAlHsVVkW0MgNIabkYIqtV6+zA+zlZWH9xbYC0rza/1Mwj8zoJb1zGlWbLG
wQK/+Gry6EB/FqLMFi6Edi/pymshyNCoKd0w+WbErnhq2QCfh887afVvQuiVJlZf
j2f9sMbW0BbaBA6NDlGGRf3Ohyw38OcrRzFOD0ZUx5pjqwKnFOlZ5R8WnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKWZCrytn/BM60+tJ/DUkNZMiD01MB8GA1UdIwQY
MBaAFFO9CZKHIVKobWDZY7h9AYF8APxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQt
ZTE1ZjRmODQwOWU2LzEvcFprS3ZLMmY4RXpyVDYwbjhOU1Exa3lJUFRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQtZTE1ZjRmODQwOWU2
LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9C0AwQA
W+xOMA0GCSqGSIb3DQEBCwUAA4IBAQBSYQkx/zFhcEYQu5rSeA24PweTXtI8DaGs
QX8gASCkQB6aNYsOb4+i8iKPAf2pL+kJ4zn7kk8BUHBlocQ8yiTRUIVUmd1j8PDf
7sw+MVy1OvVUYO5NvPqAg4mCC/WPNDQFh4IHqzFCCgJl/bTnWbPH0Qw7aDYfkpok
e5y63YDhd6uRYUAuIHz5JXxFd7uztAvJSMNSGbNXkdUhXZnspLORSvQ9OvtrIkXG
hmeBWs7FwkMCXGeKZVX9/gv8a/glXjbjK3R8+GheZmbIsgXP93J3oCLoKfrbbjg4
Or596J9KHfs3AlfQKeAbFldlVqO8xh1g07OS0mISy13zKbUuk84s
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:18:02 2024 by rpki-client on console-fra.rpki-client.org