Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/ZGydPOM3hz-XrU6-AGWhNlNIYxY.roa
File: ZGydPOM3hz-XrU6-AGWhNlNIYxY.roa (raw, json)
Hash identifier: mufpsB9Xa+1987KutbTer6aWNM4I6Xm2e9b3vrexHIw=
Subject key identifier: 64:6C:9D:3C:E3:37:87:3F:97:AD:4E:BE:00:65:A1:36:53:48:63:16
Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial: 018CC5DCD0A125A13097CDCAD74AB28DA856
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/ZGydPOM3hz-XrU6-AGWhNlNIYxY.roa
Signing time: Mon 01 Jan 2024 16:30:31 +0000
ROA not before: Mon 01 Jan 2024 16:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197395
IP address blocks: 91.239.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d0:a1:25:a1:30:97:cd:ca:d7:4a:b2:8d:a8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=646c9d3ce337873f97ad4ebe0065a13653486316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:c6:2d:68:b0:24:8a:77:ce:51:61:90:83:
1e:43:91:bc:06:a6:fc:a9:f0:1e:85:67:4c:3d:e9:
dc:aa:bb:67:c5:bc:d3:0a:f3:37:06:c5:f8:8e:65:
20:c6:07:76:83:31:db:ea:18:77:1c:e7:cb:77:96:
5a:ca:d7:25:07:92:a7:06:f2:28:ee:35:36:c4:70:
c6:bc:cb:f0:cf:fb:b9:77:cf:29:51:7f:9c:08:7a:
cd:74:c2:5e:58:82:75:bd:27:00:b5:d0:f3:cb:de:
70:d8:73:27:22:2f:89:f3:ef:15:ad:23:78:f3:9a:
1c:d4:27:55:0c:d4:8b:cb:b0:b8:14:7b:e7:65:92:
8f:78:73:07:f5:3c:6e:a4:68:01:0b:3a:57:b4:f6:
b9:8d:f2:18:e0:40:6b:06:9d:7c:e6:45:df:35:df:
61:6b:b7:65:40:b3:49:f8:23:f9:90:77:bb:b2:78:
81:52:41:e7:93:f8:27:bc:25:b3:04:5c:72:8e:29:
8e:f5:a1:c2:f6:d0:47:72:5c:85:c6:aa:61:33:7e:
42:ba:7a:59:59:0c:9b:b4:c2:63:17:3e:cb:7e:54:
6f:cc:55:4e:42:ee:99:7e:0c:c5:04:0b:92:a2:6b:
ea:5d:86:b9:be:08:8a:40:70:ea:1d:3a:bc:80:e2:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:9D:3C:E3:37:87:3F:97:AD:4E:BE:00:65:A1:36:53:48:63:16
X509v3 Authority Key Identifier:
keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/ZGydPOM3hz-XrU6-AGWhNlNIYxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.186.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5a:7b:6c:cf:25:73:52:44:31:bd:b2:3f:13:20:f1:de:8a:
c9:52:1c:a3:be:df:5e:3b:b4:59:4d:ac:8c:06:4d:39:e6:20:
89:da:d9:d6:c9:ea:4c:d0:4d:41:38:b7:53:a6:f6:de:8d:62:
ed:3e:c2:13:95:b4:e0:e4:1a:d0:38:99:14:bc:93:28:b6:63:
79:5e:72:b1:55:f0:d1:be:14:d3:e8:73:03:5e:69:1d:6f:27:
dd:b9:79:f3:58:34:21:11:1a:bd:91:56:29:2c:7b:57:54:3d:
08:12:fb:c3:de:2b:9d:7a:fd:7f:55:93:d9:52:2d:b1:b8:ab:
fd:1b:a8:36:e6:2d:91:fc:94:bf:e7:3f:ce:c9:d4:67:9b:a0:
b3:53:94:64:f4:fd:f4:64:bb:85:2a:5b:fa:ed:e7:39:83:e5:
5a:18:cd:0b:2b:93:3f:71:a6:11:4d:64:c5:4a:e0:0d:af:b5:
e5:7c:86:8e:8f:ca:be:83:66:7f:5d:02:7e:ca:00:9e:c4:7f:
1b:bd:15:fc:fd:5e:0a:46:0e:77:7b:3c:37:ce:a4:dd:ef:8f:
b2:e5:6d:ab:c2:8e:6a:8b:fa:95:d8:54:58:2e:94:61:42:0c:
bf:4f:ea:ca:33:d1:b1:5b:a1:4d:8b:64:75:47:0a:8d:c2:ff:
e0:04:ec:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3NChJaEwl83K10qyjahWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2I5NjU0M2Y3ZTE5NTcyM2U2ZDEyMmMyOTQ3OGJmZGRh
MDNlY2MwHhcNMjQwMTAxMTYzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDZjOWQzY2UzMzc4NzNmOTdhZDRlYmUwMDY1YTEzNjUzNDg2MzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQnGLWiwJIp3zlFhkIMeQ5G8Bqb8
qfAehWdMPencqrtnxbzTCvM3BsX4jmUgxgd2gzHb6hh3HOfLd5ZaytclB5KnBvIo
7jU2xHDGvMvwz/u5d88pUX+cCHrNdMJeWIJ1vScAtdDzy95w2HMnIi+J8+8VrSN4
85oc1CdVDNSLy7C4FHvnZZKPeHMH9TxupGgBCzpXtPa5jfIY4EBrBp185kXfNd9h
a7dlQLNJ+CP5kHe7sniBUkHnk/gnvCWzBFxyjimO9aHC9tBHclyFxqphM35CunpZ
WQybtMJjFz7LflRvzFVOQu6ZfgzFBAuSomvqXYa5vgiKQHDqHTq8gOIV2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRsnTzjN4c/l61OvgBloTZTSGMWMB8GA1UdIwQY
MBaAFHDLllQ/fhlXI+bRIsKUeL/doD7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMt
Mjc0Y2Q2Y2FhM2YzLzEvWkd5ZFBPTTNoei1YclU2LUFHV2hObE5JWXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMtMjc0Y2Q2Y2FhM2Yz
LzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++6MA0G
CSqGSIb3DQEBCwUAA4IBAQAEWntszyVzUkQxvbI/EyDx3orJUhyjvt9eO7RZTayM
Bk055iCJ2tnWyepM0E1BOLdTpvbejWLtPsITlbTg5BrQOJkUvJMotmN5XnKxVfDR
vhTT6HMDXmkdbyfduXnzWDQhERq9kVYpLHtXVD0IEvvD3iudev1/VZPZUi2xuKv9
G6g25i2R/JS/5z/OydRnm6CzU5Rk9P30ZLuFKlv67ec5g+VaGM0LK5M/caYRTWTF
SuANr7XlfIaOj8q+g2Z/XQJ+ygCexH8bvRX8/V4KRg53ezw3zqTd74+y5W2rwo5q
i/qV2FRYLpRhQgy/T+rKM9GxW6FNi2R1RwqNwv/gBOyw
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:08 2024 by rpki-client on console-fra.rpki-client.org