Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/zVSpN7JeTDkMnQMjwO4I0mbU5ro.roa
File: zVSpN7JeTDkMnQMjwO4I0mbU5ro.roa (raw, json)
Hash identifier: 4YdWFVjpdqkOrztXS+/fWUE09P5FSG5n7J/JOQ+j1vU=
Subject key identifier: CD:54:A9:37:B2:5E:4C:39:0C:9D:03:23:C0:EE:08:D2:66:D4:E6:BA
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 018CC6B91C92391ABE757244C52FD3902460
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/zVSpN7JeTDkMnQMjwO4I0mbU5ro.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60637
IP address blocks: 78.157.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Oct 2024 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1c:92:39:1a:be:75:72:44:c5:2f:d3:90:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd54a937b25e4c390c9d0323c0ee08d266d4e6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:e2:52:ce:68:95:1f:4f:ba:4e:32:f1:43:
3d:a1:33:f9:2a:3a:92:c0:3b:96:45:0c:5f:d3:0a:
80:29:71:e9:f3:56:45:86:df:13:94:ae:c0:94:be:
fd:1a:2b:40:3c:c8:9c:e7:95:9e:ba:ef:7b:3a:0a:
94:51:0c:c8:be:ae:75:4a:e1:cf:18:27:f2:85:09:
d7:3d:38:cf:b6:cf:33:57:77:ab:8c:0e:b5:8d:41:
a8:11:2e:0a:4b:5c:ed:e0:52:5f:93:3d:39:b1:e9:
31:09:50:4c:4f:c6:83:26:bf:99:a4:f9:47:d7:35:
72:27:fe:a4:14:95:a4:ff:f7:f5:0b:71:9b:9e:e5:
9d:19:67:fd:ce:8d:ea:cc:6b:d1:94:8f:51:1d:d1:
d1:b7:90:51:90:66:3a:ba:3e:6a:8b:a0:2a:2f:39:
ab:5c:af:0a:4d:34:0b:ea:85:db:a8:e5:96:18:65:
29:85:68:d4:d5:c5:01:46:b2:dc:c5:5c:31:f8:d6:
85:53:63:25:16:b1:4e:97:6b:92:93:fd:20:c1:d0:
20:6a:d9:d3:47:d5:e4:f6:7a:3a:07:df:f0:f8:32:
4e:96:aa:86:51:b1:0e:54:0d:6c:8e:2f:36:e2:d0:
b0:bf:cd:b2:b4:b4:ca:5c:4c:17:cf:9e:75:b5:fd:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:54:A9:37:B2:5E:4C:39:0C:9D:03:23:C0:EE:08:D2:66:D4:E6:BA
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/zVSpN7JeTDkMnQMjwO4I0mbU5ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.157.33.0/24
Signature Algorithm: sha256WithRSAEncryption
07:eb:9e:03:37:a0:41:ce:f3:8c:4f:0c:53:15:1d:6a:22:ec:
d7:f6:b9:33:08:da:4b:12:d6:00:8e:90:c6:38:d5:ba:6c:2b:
7a:b0:53:ea:b8:8f:5e:54:85:b7:4e:7d:99:5d:85:03:4a:88:
db:0d:9a:43:37:60:4c:45:c7:2d:fd:a8:7c:01:79:58:15:80:
ad:b2:b3:53:41:70:40:e6:15:81:a3:9e:15:59:39:36:4b:b0:
b7:44:99:0d:ee:24:4b:47:0d:44:61:df:8b:89:b5:01:1e:ef:
3f:11:85:08:13:b9:1a:f4:b7:a4:59:31:58:34:ec:52:40:ac:
dc:df:fe:ab:4e:3b:f9:ab:1b:52:ac:d9:ff:a9:7e:b3:53:67:
33:28:30:24:e3:26:1a:0a:95:0b:83:62:64:fb:e9:f5:98:47:
c1:8a:c2:6e:a1:77:13:0a:5d:ea:b6:d1:85:e3:63:c4:fa:ed:
53:0d:8d:16:d3:a8:a0:20:5b:d5:ba:e6:90:2c:5e:ec:1b:37:
23:97:69:74:5a:e3:20:c2:94:62:6d:43:3b:4e:36:a3:b9:06:
27:8b:ee:9c:5b:4f:b0:1a:91:e2:bb:21:7f:3c:b2:cd:dc:3a:
f1:78:c4:2c:1b:e2:c8:97:58:b0:39:b6:2a:1e:a8:45:81:62:
c9:02:b4:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuRySORq+dXJExS/TkCRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj
NWZlYzIwHhcNMjQwMTAxMjAzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDU0YTkzN2IyNWU0YzM5MGM5ZDAzMjNjMGVlMDhkMjY2ZDRlNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDjiUs5olR9Puk4y8UM9oTP5KjqS
wDuWRQxf0wqAKXHp81ZFht8TlK7AlL79GitAPMic55Weuu97OgqUUQzIvq51SuHP
GCfyhQnXPTjPts8zV3erjA61jUGoES4KS1zt4FJfkz05sekxCVBMT8aDJr+ZpPlH
1zVyJ/6kFJWk//f1C3GbnuWdGWf9zo3qzGvRlI9RHdHRt5BRkGY6uj5qi6AqLzmr
XK8KTTQL6oXbqOWWGGUphWjU1cUBRrLcxVwx+NaFU2MlFrFOl2uSk/0gwdAgatnT
R9Xk9no6B9/w+DJOlqqGUbEOVA1sji824tCwv82ytLTKXEwXz551tf3l2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1UqTeyXkw5DJ0DI8DuCNJm1Oa6MB8GA1UdIwQY
MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt
YTNhMTNlM2E3ZDgwLzEvelZTcE43SmVURGtNblFNandPNEkwbWJVNXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw
LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp0hMA0G
CSqGSIb3DQEBCwUAA4IBAQAH654DN6BBzvOMTwxTFR1qIuzX9rkzCNpLEtYAjpDG
ONW6bCt6sFPquI9eVIW3Tn2ZXYUDSojbDZpDN2BMRcct/ah8AXlYFYCtsrNTQXBA
5hWBo54VWTk2S7C3RJkN7iRLRw1EYd+LibUBHu8/EYUIE7ka9LekWTFYNOxSQKzc
3/6rTjv5qxtSrNn/qX6zU2czKDAk4yYaCpULg2Jk++n1mEfBisJuoXcTCl3qttGF
42PE+u1TDY0W06igIFvVuuaQLF7sGzcjl2l0WuMgwpRibUM7TjajuQYni+6cW0+w
GpHiuyF/PLLN3DrxeMQsG+LIl1iwObYqHqhFgWLJArT2
-----END CERTIFICATE-----
Generated at Sat Oct 5 00:12:13 2024 by rpki-client on console-fra.rpki-client.org