Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZY7SlCamUxmlsSiu1-yWxMCHR3o.roa
File: ZY7SlCamUxmlsSiu1-yWxMCHR3o.roa (raw, json)
Hash identifier: A5xMOzIe1AjUvxCorElkeGoAEpDpht043yw3rHeIubE=
Subject key identifier: 65:8E:D2:94:26:A6:53:19:A5:B1:28:AE:D7:EC:96:C4:C0:87:47:7A
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC7276DD033B40DDEC7606BE1CC705997
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZY7SlCamUxmlsSiu1-yWxMCHR3o.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204098
IP address blocks: 94.42.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6d:d0:33:b4:0d:de:c7:60:6b:e1:cc:70:59:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=658ed29426a65319a5b128aed7ec96c4c087477a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:b8:aa:be:8a:44:26:0e:de:19:10:f4:e1:
74:b6:93:25:be:51:38:d0:aa:53:62:20:bf:87:d9:
b5:6b:ed:88:04:93:ae:81:b9:07:8a:5a:3c:e8:5a:
d5:b7:e3:22:c8:d9:08:37:8b:60:9d:2b:69:89:7d:
8f:9f:cf:49:54:8f:b8:42:94:75:ec:5b:e6:1d:18:
31:03:c3:0d:c5:85:91:a5:28:96:1e:a0:af:ba:f5:
3c:da:cf:a8:a7:32:26:31:bc:3b:9b:88:18:63:48:
47:bb:44:ba:a1:3a:2f:67:5b:64:11:7a:12:84:c4:
d9:1b:5e:bc:af:a3:4d:a9:2b:bb:e3:5a:c4:e6:5c:
3c:43:0b:cb:8b:c0:9d:48:f1:86:da:54:cc:28:30:
5f:78:fb:52:6f:36:f8:5b:8f:31:01:6a:ad:d2:79:
10:36:ca:82:48:8f:d1:dd:10:dc:59:8b:03:34:7b:
92:7d:19:8e:b9:ba:5c:27:e1:a6:99:d3:94:c1:61:
bf:1b:98:95:d3:d7:5b:04:3b:a8:40:41:be:b7:f2:
25:03:3b:3a:4c:86:4f:7b:dd:81:0d:e5:96:ba:7a:
26:30:c7:3b:89:fc:5a:77:93:67:58:68:23:de:b4:
a2:34:d8:6a:d9:57:6b:ed:c6:90:88:fe:77:cd:71:
dd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:D2:94:26:A6:53:19:A5:B1:28:AE:D7:EC:96:C4:C0:87:47:7A
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ZY7SlCamUxmlsSiu1-yWxMCHR3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.42.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d9:72:89:b4:3a:2d:1f:dc:ca:10:ce:73:1a:e1:8c:9f:96:
f7:df:47:a1:9e:aa:60:9b:f8:de:70:4b:14:c3:cf:7f:89:f5:
e5:02:6d:fc:86:5e:de:0a:64:d6:58:40:4a:56:3c:d5:39:d8:
1f:87:f5:d4:44:cc:97:12:62:3d:0d:6c:59:d6:81:b6:c9:2f:
b5:f5:8b:82:4f:25:0c:a6:2b:26:38:b8:5a:e3:91:a7:b0:27:
bb:dc:b5:fa:33:57:0f:d1:0f:6b:4e:56:5b:64:8d:ca:32:a7:
60:b5:21:cc:85:a8:fc:8c:67:37:e5:1d:6e:23:ed:dc:ec:0d:
6f:91:ef:30:09:06:d2:6e:62:93:4c:77:e2:94:9e:6a:7d:35:
33:64:b7:0b:96:c6:63:39:4c:43:ea:6b:f9:da:d7:0e:69:ec:
12:57:d7:12:33:56:d7:06:d1:5b:71:d5:3e:13:c0:eb:fb:42:
f2:ff:22:29:05:46:f4:6d:56:1c:4e:4e:01:ff:28:a0:5f:6c:
b6:02:3a:5a:9c:ca:be:b0:7d:f5:37:41:79:82:e5:a3:1c:6c:
ce:9a:64:53:4c:05:19:d5:62:cb:d1:6a:4b:81:9b:a4:25:fe:
59:8b:f3:d1:33:1d:d2:1d:8f:0a:a4:25:19:30:66:9d:e7:9c:
5e:dd:c2:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ23QM7QN3sdga+HMcFmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjQwMTAxMjIzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NThlZDI5NDI2YTY1MzE5YTViMTI4YWVkN2VjOTZjNGMwODc0NzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoK4qr6KRCYO3hkQ9OF0tpMlvlE4
0KpTYiC/h9m1a+2IBJOugbkHilo86FrVt+MiyNkIN4tgnStpiX2Pn89JVI+4QpR1
7FvmHRgxA8MNxYWRpSiWHqCvuvU82s+opzImMbw7m4gYY0hHu0S6oTovZ1tkEXoS
hMTZG168r6NNqSu741rE5lw8QwvLi8CdSPGG2lTMKDBfePtSbzb4W48xAWqt0nkQ
NsqCSI/R3RDcWYsDNHuSfRmOubpcJ+GmmdOUwWG/G5iV09dbBDuoQEG+t/IlAzs6
TIZPe92BDeWWunomMMc7ifxad5NnWGgj3rSiNNhq2Vdr7caQiP53zXHdRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWO0pQmplMZpbEortfslsTAh0d6MB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvWlk3U2xDYW1VeG1sc1NpdTEteVd4TUNIUjNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXiplMA0G
CSqGSIb3DQEBCwUAA4IBAQAv2XKJtDotH9zKEM5zGuGMn5b330ehnqpgm/jecEsU
w89/ifXlAm38hl7eCmTWWEBKVjzVOdgfh/XURMyXEmI9DWxZ1oG2yS+19YuCTyUM
pismOLha45GnsCe73LX6M1cP0Q9rTlZbZI3KMqdgtSHMhaj8jGc35R1uI+3c7A1v
ke8wCQbSbmKTTHfilJ5qfTUzZLcLlsZjOUxD6mv52tcOaewSV9cSM1bXBtFbcdU+
E8Dr+0Ly/yIpBUb0bVYcTk4B/yigX2y2AjpanMq+sH31N0F5guWjHGzOmmRTTAUZ
1WLL0WpLgZukJf5Zi/PRMx3SHY8KpCUZMGad55xe3cLG
-----END CERTIFICATE-----
Generated at Sat May 18 06:32:28 2024 by rpki-client on console-ams.rpki-client.org