Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/zbROEQW1RyFj_9QCwGtxBHTvRIE.roa
File: zbROEQW1RyFj_9QCwGtxBHTvRIE.roa (raw, json)
Hash identifier: GAozy0wlzDzzPCMuY9/9JL4QjT0S6n66XTopj/5W+Sg=
Subject key identifier: CD:B4:4E:11:05:B5:47:21:63:FF:D4:02:C0:6B:71:04:74:EF:44:81
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 018D45704C901420CC1121B40D4D1DED2674
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/zbROEQW1RyFj_9QCwGtxBHTvRIE.roa
Signing time: Fri 26 Jan 2024 11:03:23 +0000
ROA not before: Fri 26 Jan 2024 11:03:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9044
IP address blocks: 194.147.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:70:4c:90:14:20:cc:11:21:b4:0d:4d:1d:ed:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Jan 26 11:03:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdb44e1105b5472163ffd402c06b710474ef4481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:87:26:c7:c3:14:d0:fa:68:da:cd:9a:c1:
d6:f7:97:5a:54:bc:4d:4f:fc:f6:4b:e4:ba:bd:9a:
c5:b7:68:97:5f:03:10:69:4a:c8:dc:f6:f1:20:92:
2e:67:67:c2:a3:10:c1:37:3f:fd:c6:45:07:2e:36:
56:0a:73:b2:4a:78:d7:d2:ad:21:9d:0e:f8:5b:bb:
d0:f6:69:15:d0:15:78:66:28:7e:a2:6e:a4:f1:15:
7a:04:99:c8:87:66:8e:5e:ba:a3:5e:9b:83:9e:9e:
a7:cf:cd:8c:84:19:ed:1b:88:da:9f:47:14:92:78:
7c:20:89:81:9d:e7:3c:dc:2b:35:54:37:75:77:40:
2c:18:b2:b8:60:5e:d3:23:33:66:18:96:97:a8:cf:
ba:ca:a4:61:c2:de:c2:ef:1f:6c:13:79:1b:89:d4:
e7:2a:7f:06:75:50:49:3a:c3:fa:41:50:3e:38:9d:
e7:57:ed:76:ba:94:02:66:65:38:b0:2d:80:dc:1a:
21:df:b8:21:fd:56:2d:18:28:ef:f1:45:03:3a:ff:
38:fb:9b:32:6f:83:09:2b:79:61:e8:38:e9:ef:65:
2d:54:92:a2:0e:be:fe:88:64:68:b9:3d:18:83:76:
31:e2:6b:d8:30:d2:6b:de:d3:42:28:3e:6e:4a:2b:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:4E:11:05:B5:47:21:63:FF:D4:02:C0:6B:71:04:74:EF:44:81
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/zbROEQW1RyFj_9QCwGtxBHTvRIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.73.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a8:e1:2b:2f:54:2b:c3:8d:96:d8:0c:4c:36:6a:10:29:ee:
ad:74:50:ec:31:97:14:3b:df:fc:58:42:e5:ed:3f:10:6c:f5:
0d:b6:bf:b1:1e:4d:01:92:97:e2:e6:27:50:c2:1c:f5:4d:ce:
b1:14:9e:ba:ea:69:40:df:7b:87:c3:2d:25:65:fc:73:23:c4:
91:cd:24:9b:58:7a:7f:8b:ce:8b:17:97:a6:fa:88:b8:b8:38:
9c:54:01:a7:2b:5a:28:b1:57:02:a6:5c:89:db:7b:17:4a:62:
d8:11:1f:a4:b5:69:94:8f:95:b4:d0:7a:46:1c:af:27:f5:7a:
c0:b1:ec:97:9f:1c:4d:cd:95:ee:62:c3:06:b7:87:dc:c9:5f:
c5:ae:cc:61:03:dd:eb:db:a7:db:50:38:eb:78:90:7d:f4:24:
d4:a4:8e:de:04:9a:90:5d:a5:c1:94:8b:fa:f7:a0:0e:9c:39:
6f:91:31:70:c9:3a:a0:64:65:02:2f:92:b8:68:b3:0c:52:ce:
19:97:7d:e7:5d:e4:b3:39:b7:11:cb:7e:6f:46:fb:6f:bd:c2:
d8:82:a5:f7:8f:d5:76:01:1c:6f:f4:c9:55:45:20:80:71:5e:
64:c0:2b:db:c3:d3:fb:5d:8c:b5:a6:c2:dc:d2:d3:3c:00:70:
e4:ca:a0:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1FcEyQFCDMESG0DU0d7SZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMmUwZGU5NTNhODVkODc1ZmQ2NDY0YWMxMjM1MDcyYmY3
OWM2ZGEwHhcNMjQwMTI2MTEwMzIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGI0NGUxMTA1YjU0NzIxNjNmZmQ0MDJjMDZiNzEwNDc0ZWY0NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27CHJsfDFND6aNrNmsHW95daVLxN
T/z2S+S6vZrFt2iXXwMQaUrI3PbxIJIuZ2fCoxDBNz/9xkUHLjZWCnOySnjX0q0h
nQ74W7vQ9mkV0BV4Zih+om6k8RV6BJnIh2aOXrqjXpuDnp6nz82MhBntG4jan0cU
knh8IImBnec83Cs1VDd1d0AsGLK4YF7TIzNmGJaXqM+6yqRhwt7C7x9sE3kbidTn
Kn8GdVBJOsP6QVA+OJ3nV+12upQCZmU4sC2A3Boh37gh/VYtGCjv8UUDOv84+5sy
b4MJK3lh6Djp72UtVJKiDr7+iGRouT0Yg3Yx4mvYMNJr3tNCKD5uSiuGBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM20ThEFtUchY//UAsBrcQR070SBMB8GA1UdIwQY
MBaAFHwuDelTqF2HX9ZGSsEjUHK/ecbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQt
ZDYwYWE3MzNjZDEwLzEvemJST0VRVzFSeUZqXzlRQ3dHdHhCSFR2UklFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQtZDYwYWE3MzNjZDEw
LzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNJMA0G
CSqGSIb3DQEBCwUAA4IBAQAaqOErL1Qrw42W2AxMNmoQKe6tdFDsMZcUO9/8WELl
7T8QbPUNtr+xHk0Bkpfi5idQwhz1Tc6xFJ666mlA33uHwy0lZfxzI8SRzSSbWHp/
i86LF5em+oi4uDicVAGnK1oosVcCplyJ23sXSmLYER+ktWmUj5W00HpGHK8n9XrA
seyXnxxNzZXuYsMGt4fcyV/FrsxhA93r26fbUDjreJB99CTUpI7eBJqQXaXBlIv6
96AOnDlvkTFwyTqgZGUCL5K4aLMMUs4Zl33nXeSzObcRy35vRvtvvcLYgqX3j9V2
ARxv9MlVRSCAcV5kwCvbw9P7XYy1psLc0tM8AHDkyqCV
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:45 2024 by rpki-client on console-fra.rpki-client.org