Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/_zNAl7bBRLcVuKWTL9EYtTOZ2rw.roa
File: _zNAl7bBRLcVuKWTL9EYtTOZ2rw.roa (raw, json)
Hash identifier: ZTrUSO7uDT3XoY4ZacBZq6yGOK8mNCtVSjRdXzc6/nk=
Subject key identifier: FF:33:40:97:B6:C1:44:B7:15:B8:A5:93:2F:D1:18:B5:33:99:DA:BC
Certificate issuer: /CN=344e6acc79ac4b655437f8c6f9764682d9ec2240
Certificate serial: 018CC2DB618306ED3871569014DD3A7BCBA0
Authority key identifier: 34:4E:6A:CC:79:AC:4B:65:54:37:F8:C6:F9:76:46:82:D9:EC:22:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE5qzHmsS2VUN_jG-XZGgtnsIkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/_zNAl7bBRLcVuKWTL9EYtTOZ2rw.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 212.6.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE5qzHmsS2VUN_jG-XZGgtnsIkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:61:83:06:ed:38:71:56:90:14:dd:3a:7b:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344e6acc79ac4b655437f8c6f9764682d9ec2240
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff334097b6c144b715b8a5932fd118b53399dabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:28:98:11:2c:87:02:6f:58:61:24:04:d4:
af:96:b7:7d:da:81:a0:ab:b0:74:bf:39:28:a0:2c:
d8:e9:16:bf:5b:76:63:37:94:4f:db:ec:02:16:95:
2a:4f:e7:fe:b2:1e:85:98:39:4d:7b:b0:5a:ab:40:
a9:95:53:65:90:4a:c1:86:bd:e7:69:26:1b:a9:2a:
fc:06:09:ee:9d:93:39:1b:b5:65:46:82:ba:15:fa:
6d:25:9d:2a:f6:26:b4:81:a9:af:7c:c0:f8:ac:78:
4e:f8:52:a7:a4:6d:15:ee:f2:88:01:0a:9e:2d:81:
fc:79:41:2b:de:da:e5:01:2a:fd:b6:10:ae:24:d3:
65:48:40:b6:85:ae:d2:b6:48:2b:38:a9:d1:c2:cb:
53:4b:44:41:57:0a:5a:b6:a4:a5:a6:92:27:98:54:
e1:87:bc:08:4e:05:25:8d:56:fa:d5:10:70:6b:66:
97:79:99:f2:d7:37:26:fd:18:28:1f:3e:56:09:e4:
b9:80:2e:f4:d8:9a:26:61:ae:0d:05:bb:4e:1b:ac:
d3:21:b8:4c:2d:09:4e:bc:74:78:d9:f1:e2:41:97:
92:a5:68:85:fb:a3:65:4c:1f:81:be:c2:3a:c5:d0:
00:b3:87:1f:7b:94:dc:31:55:67:ee:3e:be:0d:ea:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:40:97:B6:C1:44:B7:15:B8:A5:93:2F:D1:18:B5:33:99:DA:BC
X509v3 Authority Key Identifier:
keyid:34:4E:6A:CC:79:AC:4B:65:54:37:F8:C6:F9:76:46:82:D9:EC:22:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE5qzHmsS2VUN_jG-XZGgtnsIkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/_zNAl7bBRLcVuKWTL9EYtTOZ2rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2145b8-f9c6-465c-84fb-72cf4e76a77b/1/NE5qzHmsS2VUN_jG-XZGgtnsIkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:80:d4:fe:29:3a:9e:33:7e:74:b8:46:01:6b:f3:ef:31:1f:
d3:19:44:dd:12:b1:47:67:5e:30:16:4a:80:1c:f8:6a:18:e8:
58:4d:a2:32:f4:ac:0a:00:f0:9c:c3:cb:a9:51:6d:42:ed:e6:
c1:fd:65:77:13:38:54:3a:dc:36:80:92:cf:ef:a2:fa:31:d1:
c3:86:ce:d7:d0:bb:58:0d:2b:a9:34:59:63:65:05:58:c3:91:
17:d0:ab:c5:c2:5e:cb:7a:e9:c2:e0:ed:80:7a:e0:c5:1b:24:
24:3e:14:de:30:88:f7:13:c8:0a:43:3e:e7:64:36:1e:9d:ae:
de:95:19:11:8b:92:dc:bc:4d:64:3c:94:a9:89:9d:50:aa:d0:
24:89:02:76:8f:7a:cc:5b:ad:fd:52:4a:30:84:0f:95:51:ee:
6b:00:9b:b5:e1:4c:18:5d:0a:51:62:da:9c:b3:4b:7a:b5:fb:
e5:54:0e:df:9a:d5:93:f5:46:e4:69:d0:41:68:19:8e:8e:b4:
78:44:a3:62:56:5f:04:46:46:06:6e:a5:d5:56:b5:f8:15:f6:
af:bc:8b:ac:a1:e0:21:0b:3f:f7:18:1c:10:c1:1c:3f:c1:fe:
09:b4:f6:e8:f7:cb:3a:10:a0:bb:a9:f5:4e:8f:4b:2b:94:b0:
15:8d:70:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC22GDBu04cVaQFN06e8ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGU2YWNjNzlhYzRiNjU1NDM3ZjhjNmY5NzY0NjgyZDll
YzIyNDAwHhcNMjQwMTAxMDIzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjMzNDA5N2I2YzE0NGI3MTViOGE1OTMyZmQxMThiNTMzOTlkYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDIomBEshwJvWGEkBNSvlrd92oGg
q7B0vzkooCzY6Ra/W3ZjN5RP2+wCFpUqT+f+sh6FmDlNe7Baq0CplVNlkErBhr3n
aSYbqSr8BgnunZM5G7VlRoK6FfptJZ0q9ia0gamvfMD4rHhO+FKnpG0V7vKIAQqe
LYH8eUEr3trlASr9thCuJNNlSEC2ha7StkgrOKnRwstTS0RBVwpatqSlppInmFTh
h7wITgUljVb61RBwa2aXeZny1zcm/RgoHz5WCeS5gC702JomYa4NBbtOG6zTIbhM
LQlOvHR42fHiQZeSpWiF+6NlTB+BvsI6xdAAs4cfe5TcMVVn7j6+Deo8DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8zQJe2wUS3Fbilky/RGLUzmdq8MB8GA1UdIwQY
MBaAFDROasx5rEtlVDf4xvl2RoLZ7CJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkU1cXpIbXNTMlZVTl9qRy1YWkdndG5zSWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMTQ1YjgtZjljNi00NjVjLTg0ZmIt
NzJjZjRlNzZhNzdiLzEvX3pOQWw3YkJSTGNWdUtXVEw5RVl0VE9aMnJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMTQ1YjgtZjljNi00NjVjLTg0ZmItNzJjZjRlNzZhNzdi
LzEvTkU1cXpIbXNTMlZVTl9qRy1YWkdndG5zSWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AYkMA0G
CSqGSIb3DQEBCwUAA4IBAQChgNT+KTqeM350uEYBa/PvMR/TGUTdErFHZ14wFkqA
HPhqGOhYTaIy9KwKAPCcw8upUW1C7ebB/WV3EzhUOtw2gJLP76L6MdHDhs7X0LtY
DSupNFljZQVYw5EX0KvFwl7LeunC4O2AeuDFGyQkPhTeMIj3E8gKQz7nZDYena7e
lRkRi5LcvE1kPJSpiZ1QqtAkiQJ2j3rMW639UkowhA+VUe5rAJu14UwYXQpRYtqc
s0t6tfvlVA7fmtWT9UbkadBBaBmOjrR4RKNiVl8ERkYGbqXVVrX4FfavvIusoeAh
Cz/3GBwQwRw/wf4JtPbo98s6EKC7qfVOj0srlLAVjXA/
-----END CERTIFICATE-----
Generated at Mon May 6 06:58:48 2024 by rpki-client on console-ams.rpki-client.org