Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/zb6Rvguv7EdSTgR2ZiI0EH-twTw.roa
File: zb6Rvguv7EdSTgR2ZiI0EH-twTw.roa (raw, json)
Hash identifier: bN2fGiYrBU0NaJBT3i+9oiv8H2BVN+gTQ0NfDMHchw8=
Subject key identifier: CD:BE:91:BE:0B:AF:EC:47:52:4E:04:76:66:22:34:10:7F:AD:C1:3C
Certificate issuer: /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial: 018CC50142358A11C07490AC762B7B551992
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/zb6Rvguv7EdSTgR2ZiI0EH-twTw.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 185.76.180.0/24 maxlen: 24
2a03:5120::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:42:35:8a:11:c0:74:90:ac:76:2b:7b:55:19:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdbe91be0bafec47524e0476662234107fadc13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:2e:8d:15:9d:94:18:91:a7:40:df:d7:ab:
79:1c:91:1b:2e:1b:de:16:22:d3:69:1a:38:bb:5c:
34:33:94:1f:ef:ad:25:8b:40:b4:e1:cc:60:38:c4:
3e:69:36:0c:3f:2e:88:3a:38:ed:fb:a6:c1:c6:e3:
aa:07:b3:68:41:0f:1f:b9:c2:91:2e:f4:7f:6b:42:
6c:2a:3a:3d:31:f3:bd:28:9c:1e:95:05:b2:eb:d4:
80:3f:17:36:f2:de:90:e0:1d:48:8d:2a:51:76:00:
e0:f5:cc:f7:6e:10:ae:07:5d:63:01:39:a3:91:22:
96:24:39:2d:e8:4f:43:17:87:25:d8:ba:cf:49:b3:
81:70:a6:48:88:ee:5b:9e:cf:03:1d:8f:85:c3:02:
1f:cf:75:fd:66:51:83:dc:b4:f7:2a:72:29:07:89:
e0:85:cb:83:0e:fe:d7:a8:db:19:55:f5:f3:c8:52:
0d:d5:ed:37:c1:f0:26:d2:6d:8b:3d:da:e0:9b:c9:
7a:81:79:96:10:d2:fd:9e:22:0f:71:84:b3:a2:37:
00:96:61:de:da:cf:3c:95:1d:17:cf:fd:aa:e6:d7:
8b:16:9d:7e:75:a7:aa:4a:06:1f:09:75:ff:ac:74:
74:a0:7b:9a:93:10:d3:c9:d3:75:02:8d:d1:15:08:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BE:91:BE:0B:AF:EC:47:52:4E:04:76:66:22:34:10:7F:AD:C1:3C
X509v3 Authority Key Identifier:
keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/zb6Rvguv7EdSTgR2ZiI0EH-twTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.180.0/24
IPv6:
2a03:5120::/40
Signature Algorithm: sha256WithRSAEncryption
a8:47:0a:fa:45:1c:ef:71:be:9b:ec:a0:6e:0f:41:22:3b:e6:
b9:91:fc:40:a1:7b:41:6d:90:05:7d:03:16:d8:1b:e9:69:2a:
8c:ab:76:55:55:60:99:9e:67:bf:2e:41:6f:d4:d6:02:ae:34:
a8:81:92:75:8d:a0:b5:dd:ab:d4:51:6b:bf:34:9c:34:6d:80:
ef:ec:02:77:46:09:40:3c:57:b7:35:b7:ec:95:7c:e0:51:0a:
b3:e4:92:c0:de:28:45:fb:f2:59:2f:bb:24:e9:1a:ca:29:dd:
cd:6c:71:47:1b:ef:df:7b:96:4d:91:ef:37:40:90:76:87:7a:
5c:a5:3d:3c:fa:93:53:f2:1c:f6:bf:83:43:89:59:2e:dc:2d:
08:49:41:3b:a0:8d:4a:8b:b5:7b:6d:05:a5:9d:6b:04:71:65:
1d:bc:51:c4:83:27:f6:c1:01:36:47:9e:e1:c5:3b:80:64:ba:
f6:6b:c6:fc:8f:60:7d:55:09:12:cf:2c:dc:75:54:43:94:d5:
09:8a:07:06:65:f8:fe:c3:e2:4e:63:41:43:42:43:7d:07:4a:
d2:e3:43:9f:46:d2:f5:a4:0c:a8:ed:cd:5a:c2:3c:99:9e:5f:
03:41:24:64:b9:a7:6f:00:e2:d7:74:60:76:ec:c0:d0:de:c9:
b8:ea:55:ba
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzFAUI1ihHAdJCsdit7VRmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTUxMjk3NmI5MWEyOTY3ZWJjZTEwZWQ0MDUyZWNlMTJi
MTQxNTUwHhcNMjQwMTAxMTIzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGJlOTFiZTBiYWZlYzQ3NTI0ZTA0NzY2NjIyMzQxMDdmYWRjMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSYujRWdlBiRp0Df16t5HJEbLhve
FiLTaRo4u1w0M5Qf760li0C04cxgOMQ+aTYMPy6IOjjt+6bBxuOqB7NoQQ8fucKR
LvR/a0JsKjo9MfO9KJwelQWy69SAPxc28t6Q4B1IjSpRdgDg9cz3bhCuB11jATmj
kSKWJDkt6E9DF4cl2LrPSbOBcKZIiO5bns8DHY+FwwIfz3X9ZlGD3LT3KnIpB4ng
hcuDDv7XqNsZVfXzyFIN1e03wfAm0m2LPdrgm8l6gXmWENL9niIPcYSzojcAlmHe
2s88lR0Xz/2q5teLFp1+daeqSgYfCXX/rHR0oHuakxDTydN1Ao3RFQhWIwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFM2+kb4Lr+xHUk4EdmYiNBB/rcE8MB8GA1UdIwQY
MBaAFBHlEpdrkaKWfrzhDtQFLs4SsUFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xN2EzYzAtZTk3YS00MzA2LWJjZTQt
N2ZmMzJiNmZmZDFlLzEvemI2UnZndXY3RWRTVGdSMlppSTBFSC10d1R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xN2EzYzAtZTk3YS00MzA2LWJjZTQtN2ZmMzJiNmZmZDFl
LzEvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuUy0MA4E
AgACMAgDBgAqA1EgADANBgkqhkiG9w0BAQsFAAOCAQEAqEcK+kUc73G+m+ygbg9B
IjvmuZH8QKF7QW2QBX0DFtgb6WkqjKt2VVVgmZ5nvy5Bb9TWAq40qIGSdY2gtd2r
1FFrvzScNG2A7+wCd0YJQDxXtzW37JV84FEKs+SSwN4oRfvyWS+7JOkayindzWxx
Rxvv33uWTZHvN0CQdod6XKU9PPqTU/Ic9r+DQ4lZLtwtCElBO6CNSou1e20FpZ1r
BHFlHbxRxIMn9sEBNkee4cU7gGS69mvG/I9gfVUJEs8s3HVUQ5TVCYoHBmX4/sPi
TmNBQ0JDfQdK0uNDn0bS9aQMqO3NWsI8mZ5fA0EkZLmnbwDi13RgduzA0N7JuOpV
ug==
-----END CERTIFICATE-----
Generated at Sun May 19 21:11:14 2024 by rpki-client on console-fra.rpki-client.org