Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/z4ZYYkAaCf40gXywutEV_eCVAlY.roa
File: z4ZYYkAaCf40gXywutEV_eCVAlY.roa (raw, json)
Hash identifier: 9cVeij0vBifwnBVnbCTvJWWJPdv7pqtMmM0AVrtmqOQ=
Subject key identifier: CF:86:58:62:40:1A:09:FE:34:81:7C:B0:BA:D1:15:FD:E0:95:02:56
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 018CC424AD3C3A72A1502BF367565FB59F97
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/z4ZYYkAaCf40gXywutEV_eCVAlY.roa
Signing time: Mon 01 Jan 2024 08:29:47 +0000
ROA not before: Mon 01 Jan 2024 08:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.176.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ad:3c:3a:72:a1:50:2b:f3:67:56:5f:b5:9f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Jan 1 08:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf865862401a09fe34817cb0bad115fde0950256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:5d:d7:5e:0d:8a:b7:35:08:58:fb:f7:94:
08:d6:ba:5b:27:68:e5:75:a2:9a:63:6d:ab:17:93:
4d:10:17:c9:0f:d3:1b:16:c2:b3:d5:b8:8b:1b:cd:
84:7e:81:f2:2d:1b:de:5d:aa:18:2a:5d:08:b5:48:
62:75:50:ba:24:61:15:88:33:c2:5f:5e:aa:bb:cf:
97:78:38:0b:ab:a1:a1:42:21:ac:a1:ac:2e:50:ab:
ac:4d:51:7d:de:74:22:d8:c1:6c:c7:2c:92:fe:cd:
9c:4f:06:cf:2a:d7:2d:b8:e2:b9:40:2c:83:09:7a:
80:d0:b5:4e:56:92:3b:77:e0:cb:be:47:fc:d0:21:
bf:30:6c:78:7f:e1:9e:c5:16:0c:3e:88:a1:24:f6:
fd:d3:64:df:0c:25:d2:2e:d9:e0:fc:9e:66:16:7f:
81:42:15:fa:6e:9d:49:fa:54:fb:8a:47:27:a2:1e:
c5:cc:b8:2b:15:9b:66:81:8a:73:9a:72:6e:f1:85:
33:e0:81:0c:e1:c6:1e:cf:e1:f8:0a:21:a0:a0:aa:
e0:3c:84:06:0d:2b:ab:53:a1:1a:25:8a:42:e0:6b:
4f:1d:ae:77:fe:4b:14:24:19:ee:63:51:e6:f4:f8:
a6:94:1b:27:51:aa:62:76:23:c3:d0:41:88:b2:7f:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:86:58:62:40:1A:09:FE:34:81:7C:B0:BA:D1:15:FD:E0:95:02:56
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/z4ZYYkAaCf40gXywutEV_eCVAlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4e:bd:14:2e:9c:4f:a4:b6:c0:85:99:60:4e:01:37:f1:7f:
cf:ec:37:37:07:e5:f4:f2:87:5f:1b:72:ff:15:b4:29:8c:ab:
00:bd:da:57:e8:5a:d8:bb:11:2d:53:a7:d9:94:b6:eb:1b:7b:
ce:d0:77:6f:38:60:3c:90:7f:3c:98:a2:8e:1b:2d:de:eb:8f:
e3:c1:8e:d8:b6:80:be:81:ef:ab:69:40:ee:9f:01:56:8c:12:
e3:35:1a:1a:9e:9a:f0:a0:71:3d:f5:76:e5:e4:99:c6:9e:95:
44:78:21:8e:fa:7a:56:a9:2f:bd:ca:16:ac:55:d5:8a:1f:8f:
7e:d3:58:e2:a6:80:2b:83:30:f5:1c:14:e2:a2:cb:4a:42:ea:
56:8f:eb:77:36:e2:e9:bc:9b:b4:eb:ba:5c:c4:1e:57:f9:2f:
6f:5a:50:60:1c:c0:b3:5c:7c:16:b4:4a:3e:9c:1c:aa:58:62:
e6:c2:97:52:de:ba:6c:88:01:70:26:25:a4:e2:30:1c:a6:f3:
b1:3a:a6:82:ca:7e:d8:c2:0b:05:83:b5:3f:71:64:f3:60:bc:
b2:ef:90:81:07:f8:e9:18:4a:7f:7e:6e:a9:8c:7f:fa:90:14:
c3:c2:94:05:a1:35:7f:16:b1:43:d7:f1:57:17:bb:87:c4:41:
dd:90:da:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJK08OnKhUCvzZ1ZftZ+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4
ZDVjZGIwHhcNMjQwMTAxMDgyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjg2NTg2MjQwMWEwOWZlMzQ4MTdjYjBiYWQxMTVmZGUwOTUwMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ5d114Nirc1CFj795QI1rpbJ2jl
daKaY22rF5NNEBfJD9MbFsKz1biLG82EfoHyLRveXaoYKl0ItUhidVC6JGEViDPC
X16qu8+XeDgLq6GhQiGsoawuUKusTVF93nQi2MFsxyyS/s2cTwbPKtctuOK5QCyD
CXqA0LVOVpI7d+DLvkf80CG/MGx4f+GexRYMPoihJPb902TfDCXSLtng/J5mFn+B
QhX6bp1J+lT7ikcnoh7FzLgrFZtmgYpzmnJu8YUz4IEM4cYez+H4CiGgoKrgPIQG
DSurU6EaJYpC4GtPHa53/ksUJBnuY1Hm9PimlBsnUapidiPD0EGIsn/FBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM+GWGJAGgn+NIF8sLrRFf3glQJWMB8GA1UdIwQY
MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt
ODcxNTQwMzMwODU5LzEvejRaWVlrQWFDZjQwZ1h5d3V0RVZfZUNWQWxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5
LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrC/MA0G
CSqGSIb3DQEBCwUAA4IBAQBcTr0ULpxPpLbAhZlgTgE38X/P7Dc3B+X08odfG3L/
FbQpjKsAvdpX6FrYuxEtU6fZlLbrG3vO0HdvOGA8kH88mKKOGy3e64/jwY7YtoC+
ge+raUDunwFWjBLjNRoanprwoHE99Xbl5JnGnpVEeCGO+npWqS+9yhasVdWKH49+
01jipoArgzD1HBTiostKQupWj+t3NuLpvJu067pcxB5X+S9vWlBgHMCzXHwWtEo+
nByqWGLmwpdS3rpsiAFwJiWk4jAcpvOxOqaCyn7YwgsFg7U/cWTzYLyy75CBB/jp
GEp/fm6pjH/6kBTDwpQFoTV/FrFD1/FXF7uHxEHdkNoD
-----END CERTIFICATE-----
Generated at Sat May 18 23:13:46 2024 by rpki-client on console-fra.rpki-client.org