Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/2ZBUndQ4_viS0HGr4M7hEeCasXs.roa
File: 2ZBUndQ4_viS0HGr4M7hEeCasXs.roa (raw, json)
Hash identifier: F5GBc5RDCWGYZegjvK4jRjZWQQ3HAafz4In8LU4N4fo=
Subject key identifier: D9:90:54:9D:D4:38:FE:F8:92:D0:71:AB:E0:CE:E1:11:E0:9A:B1:7B
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 018CC7274ADDEDE17C56185FD671A865663A
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/2ZBUndQ4_viS0HGr4M7hEeCasXs.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210127
IP address blocks: 194.61.132.0/24 maxlen: 24
194.61.132.0/22 maxlen: 24
194.61.134.0/24 maxlen: 24
194.61.133.0/24 maxlen: 24
194.61.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4a:dd:ed:e1:7c:56:18:5f:d6:71:a8:65:66:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d990549dd438fef892d071abe0cee111e09ab17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:d2:90:c2:27:7a:16:2c:9a:9e:ec:fa:0d:
c9:c4:78:fd:0b:65:6b:e3:86:a9:ab:78:8b:17:6d:
48:7b:c1:91:e2:bc:c6:ad:3b:12:ad:be:a9:1c:27:
96:0c:d7:0e:ab:c0:06:3a:06:c7:31:19:4f:37:a0:
30:5e:9f:59:14:86:58:38:67:35:d4:a1:20:53:07:
4a:2a:63:a2:89:a2:2e:b1:2f:78:8b:30:8f:7f:2f:
66:c8:f1:a8:1d:f1:57:47:3a:e7:2b:3d:a9:dc:0f:
2e:0b:63:c5:00:d9:9f:b8:b7:1a:03:69:7b:1d:c1:
7a:f3:59:21:32:ed:3b:75:d9:61:8d:4a:f8:9e:52:
cb:ec:5d:e4:76:1a:52:00:18:91:90:fd:98:7b:d0:
7a:3a:3c:91:f3:75:7c:2f:b9:49:bd:f7:99:ed:d2:
17:c7:20:5d:23:dc:88:4a:66:e4:83:1c:46:f2:8c:
f7:19:28:32:ac:8c:52:4b:57:19:44:1a:d5:16:96:
8f:90:70:fc:1d:10:90:c6:7c:82:c0:62:93:c8:7f:
1e:ea:b1:ac:2a:38:ac:fe:ef:4d:e2:6d:98:c4:84:
fc:24:2a:1c:dd:b7:50:f8:56:85:b8:40:d8:38:ab:
79:23:37:f7:7d:93:24:a1:c6:90:ba:72:4d:df:76:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:54:9D:D4:38:FE:F8:92:D0:71:AB:E0:CE:E1:11:E0:9A:B1:7B
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/2ZBUndQ4_viS0HGr4M7hEeCasXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:26:83:16:08:82:75:a1:d4:43:4c:e8:45:f6:5c:2c:26:7d:
69:9b:76:c7:ae:2d:d0:18:94:3e:26:2a:3a:53:cf:4f:df:6d:
0d:54:f4:89:fd:54:55:f2:d3:15:21:32:32:0b:50:be:b7:b6:
00:d2:d9:16:3a:aa:50:98:d0:09:c5:cd:fd:90:c6:13:a3:42:
17:71:07:7f:df:36:08:67:32:f4:cc:06:fa:e3:f8:dc:5e:c7:
10:0e:de:80:06:78:9b:3b:50:1c:64:d2:cb:16:88:54:6e:26:
38:5e:76:19:1a:4b:d3:3d:3c:81:a4:19:bb:fb:0f:92:c1:68:
ae:b7:10:2c:af:5d:d6:fa:75:f2:71:09:35:62:d6:a5:1b:40:
24:dd:cf:d8:f2:68:43:21:25:4f:8d:44:06:bc:7c:e2:f2:de:
a2:a4:4b:3a:dc:cc:57:29:9d:9c:7a:65:9b:7a:3a:61:ea:55:
64:f9:2d:19:57:48:74:cc:ba:68:47:32:64:fd:ab:95:9a:8d:
36:67:d3:e8:98:60:19:88:3e:7b:4a:22:d1:19:03:8f:6b:a3:
cc:70:64:c6:54:93:e3:23:ab:40:39:c7:8a:96:71:6f:ac:2b:
69:5b:1c:cc:da:4c:d8:b5:b0:6c:3e:dd:cd:41:9d:76:c4:c0:
2a:92:d4:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ0rd7eF8Vhhf1nGoZWY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWMzNmZmNTMzZWI2ZjhmOGFhNjU5MjAyMjBjZmE0NzFl
NWEyYjEwHhcNMjQwMTAxMjIzMTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTkwNTQ5ZGQ0MzhmZWY4OTJkMDcxYWJlMGNlZTExMWUwOWFiMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y3SkMInehYsmp7s+g3JxHj9C2Vr
44apq3iLF21Ie8GR4rzGrTsSrb6pHCeWDNcOq8AGOgbHMRlPN6AwXp9ZFIZYOGc1
1KEgUwdKKmOiiaIusS94izCPfy9myPGoHfFXRzrnKz2p3A8uC2PFANmfuLcaA2l7
HcF681khMu07ddlhjUr4nlLL7F3kdhpSABiRkP2Ye9B6OjyR83V8L7lJvfeZ7dIX
xyBdI9yISmbkgxxG8oz3GSgyrIxSS1cZRBrVFpaPkHD8HRCQxnyCwGKTyH8e6rGs
Kjis/u9N4m2YxIT8JCoc3bdQ+FaFuEDYOKt5Izf3fZMkocaQunJN33ZAvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmQVJ3UOP74ktBxq+DO4RHgmrF7MB8GA1UdIwQY
MBaAFI6sNv9TPrb4+KplkgIgz6Rx5aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUt
NTZiYTE5OGQxN2YwLzEvMlpCVW5kUTRfdmlTMEhHcjRNN2hFZUNhc1hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUtNTZiYTE5OGQxN2Yw
LzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwj2EMA0G
CSqGSIb3DQEBCwUAA4IBAQBPJoMWCIJ1odRDTOhF9lwsJn1pm3bHri3QGJQ+Jio6
U89P320NVPSJ/VRV8tMVITIyC1C+t7YA0tkWOqpQmNAJxc39kMYTo0IXcQd/3zYI
ZzL0zAb64/jcXscQDt6ABnibO1AcZNLLFohUbiY4XnYZGkvTPTyBpBm7+w+SwWiu
txAsr13W+nXycQk1YtalG0Ak3c/Y8mhDISVPjUQGvHzi8t6ipEs63MxXKZ2cemWb
ejph6lVk+S0ZV0h0zLpoRzJk/auVmo02Z9PomGAZiD57SiLRGQOPa6PMcGTGVJPj
I6tAOceKlnFvrCtpWxzM2kzYtbBsPt3NQZ12xMAqktQL
-----END CERTIFICATE-----
Generated at Sat Sep 28 04:27:22 2024 by rpki-client on console-fra.rpki-client.org