Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/zPM9GfHy98U9zH-SAMVAO4Qy8g8.roa
File: zPM9GfHy98U9zH-SAMVAO4Qy8g8.roa (raw, json)
Hash identifier: sclq9MeDF6Eg9iMO+MrAmUbc7KUVL5uYY+V0a2aDxXk=
Subject key identifier: CC:F3:3D:19:F1:F2:F7:C5:3D:CC:7F:92:00:C5:40:3B:84:32:F2:0F
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCC132C1B76F708B2EA02DFFA3B178
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/zPM9GfHy98U9zH-SAMVAO4Qy8g8.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209195
IP address blocks: 195.55.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c1:32:c1:b7:6f:70:8b:2e:a0:2d:ff:a3:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccf33d19f1f2f7c53dcc7f9200c5403b8432f20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:41:03:ca:75:75:7a:f9:f2:3f:e6:01:8c:
9f:f5:6b:8d:d5:50:88:15:0b:75:fe:57:b8:34:85:
ac:ca:93:2e:5d:3b:b3:76:22:f9:16:38:4f:36:c5:
c5:90:e7:1d:02:36:f4:3c:80:d2:62:9e:72:7c:03:
01:d4:3e:49:c0:54:17:02:4b:c4:5f:d3:89:68:5b:
be:ed:26:6c:f1:ff:a8:fb:5f:69:f5:a3:b3:c9:db:
10:fe:28:ab:7e:ea:c0:91:91:4e:e3:ab:2a:e8:d4:
0d:1a:16:4e:27:4b:5a:dc:de:71:d7:3e:81:79:71:
4c:63:6d:e2:50:0c:f8:09:d3:df:8b:92:52:39:c6:
34:f5:2a:57:17:e7:b7:aa:82:f3:17:fe:ec:9b:32:
37:0a:f9:d9:6a:3c:ae:41:5e:f0:d2:34:f2:1a:5e:
1c:5a:8e:80:52:3e:58:2e:b9:ef:65:70:c6:35:2d:
0c:2b:08:cb:a0:41:9f:36:b7:38:2d:15:9f:2d:26:
d0:19:f6:80:83:d8:6b:0a:0b:15:6c:67:ee:be:17:
b0:3c:bf:d9:5d:f3:f4:8a:70:14:9d:fb:df:70:af:
5e:ba:62:6e:93:78:b8:ef:c4:6b:46:8d:44:39:0e:
49:31:c3:ae:26:92:df:6d:02:1e:22:50:af:6e:70:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:3D:19:F1:F2:F7:C5:3D:CC:7F:92:00:C5:40:3B:84:32:F2:0F
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/zPM9GfHy98U9zH-SAMVAO4Qy8g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.46.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6d:64:80:94:98:ba:4c:98:5b:e0:47:3f:d1:02:8c:16:ce:
02:e2:ae:67:fa:86:dd:f5:20:69:de:0c:6b:e8:53:24:5d:c7:
72:11:77:44:30:4a:e3:81:fc:a3:e9:a9:02:ac:2e:5f:d8:fd:
20:70:46:7c:2a:48:d5:23:fc:2b:60:6b:07:83:ac:e5:3f:93:
0c:58:2e:b0:30:96:a2:7f:64:6d:30:1d:a7:f9:26:cd:87:cb:
a7:f4:39:82:4b:02:f5:9c:63:12:9a:ab:6b:b9:f7:ee:ef:fe:
2b:b6:9e:58:84:f8:23:83:3e:09:15:7d:ba:40:64:a2:52:e8:
2e:84:56:af:b9:e7:15:f7:08:3a:df:52:f8:d2:dc:70:2a:bc:
66:ac:98:c9:11:af:eb:6f:6d:79:47:bb:b8:ad:59:04:74:de:
5c:3f:61:9a:a8:0a:eb:8a:cb:f2:ea:3e:0c:51:17:c4:33:6a:
ad:e9:3e:a7:44:9d:ca:dd:e6:21:b3:95:2b:fb:e7:99:b7:27:
58:c8:15:93:8d:82:bf:b2:42:6d:34:66:23:4c:d7:1c:73:7d:
c9:b5:79:02:96:ab:13:c8:b1:e8:eb:63:4f:21:03:97:3e:a0:
af:32:3d:1a:99:f4:43:d8:63:d3:ab:2e:25:0f:4a:62:7f:87:
d5:6e:45:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvMEywbdvcIsuoC3/o7F4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwMTAyMTAzMzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2YzM2QxOWYxZjJmN2M1M2RjYzdmOTIwMGM1NDAzYjg0MzJmMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxxBA8p1dXr58j/mAYyf9WuN1VCI
FQt1/le4NIWsypMuXTuzdiL5FjhPNsXFkOcdAjb0PIDSYp5yfAMB1D5JwFQXAkvE
X9OJaFu+7SZs8f+o+19p9aOzydsQ/iirfurAkZFO46sq6NQNGhZOJ0ta3N5x1z6B
eXFMY23iUAz4CdPfi5JSOcY09SpXF+e3qoLzF/7smzI3CvnZajyuQV7w0jTyGl4c
Wo6AUj5YLrnvZXDGNS0MKwjLoEGfNrc4LRWfLSbQGfaAg9hrCgsVbGfuvhewPL/Z
XfP0inAUnfvfcK9eumJuk3i478RrRo1EOQ5JMcOuJpLfbQIeIlCvbnDx7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzzPRnx8vfFPcx/kgDFQDuEMvIPMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvelBNOUdmSHk5OFU5ekgtU0FNVkFPNFF5OGc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzcuMA0G
CSqGSIb3DQEBCwUAA4IBAQATbWSAlJi6TJhb4Ec/0QKMFs4C4q5n+obd9SBp3gxr
6FMkXcdyEXdEMErjgfyj6akCrC5f2P0gcEZ8KkjVI/wrYGsHg6zlP5MMWC6wMJai
f2RtMB2n+SbNh8un9DmCSwL1nGMSmqtruffu7/4rtp5YhPgjgz4JFX26QGSiUugu
hFavuecV9wg631L40txwKrxmrJjJEa/rb215R7u4rVkEdN5cP2GaqArrisvy6j4M
URfEM2qt6T6nRJ3K3eYhs5Ur++eZtydYyBWTjYK/skJtNGYjTNccc33JtXkClqsT
yLHo62NPIQOXPqCvMj0amfRD2GPTqy4lD0pif4fVbkXN
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:43 2024 by rpki-client on console-fra.rpki-client.org