Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/Zw0--NFR50J5vX8KY301aowntNg.roa
File: Zw0--NFR50J5vX8KY301aowntNg.roa (raw, json)
Hash identifier: lzsEJLdo1oDYdGN7Qyl20Sny6rou+TbxBKljABj+T44=
Subject key identifier: 67:0D:3E:F8:D1:51:E7:42:79:BD:7F:0A:63:7D:35:6A:8C:27:B4:D8
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 018CC9BBA5F474DE33BDCAD6CA724DCEFD1A
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/Zw0--NFR50J5vX8KY301aowntNg.roa
Signing time: Tue 02 Jan 2024 10:32:47 +0000
ROA not before: Tue 02 Jan 2024 10:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15375
IP address blocks: 193.108.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a5:f4:74:de:33:bd:ca:d6:ca:72:4d:ce:fd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Jan 2 10:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=670d3ef8d151e74279bd7f0a637d356a8c27b4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:2c:d6:74:15:6f:b9:ac:fd:7a:2c:4b:91:
1f:c5:71:be:db:fa:6b:37:14:23:1b:4e:c1:65:7d:
a5:11:dd:8d:3d:ad:59:d3:69:cd:8b:97:82:72:80:
38:1a:cb:68:95:c7:5e:4b:64:00:66:da:a3:dd:b0:
72:b9:14:71:53:aa:f3:52:8a:76:1e:e8:37:67:20:
f9:ed:d7:a0:dc:57:a4:21:0b:84:a3:84:59:77:78:
fa:b9:74:71:5c:62:54:8a:2e:ef:f7:a3:55:8a:1f:
81:0c:14:ac:fa:3f:b4:0a:71:c0:61:01:5a:83:7a:
79:6b:d5:52:2d:49:1c:b0:42:4c:41:57:f7:4b:73:
2a:82:e6:bf:2f:f3:99:ce:e5:c3:e7:18:35:e4:4b:
e3:12:c4:46:e6:25:26:9f:a4:b3:32:48:5b:70:c4:
6b:51:3c:e3:a6:72:61:05:ee:bd:99:47:de:e1:c5:
13:cd:7d:6b:c7:0b:df:f6:42:75:e4:71:ab:b7:85:
2d:4d:7a:e7:a7:64:96:eb:0b:09:0b:cb:31:ab:4c:
f7:8c:d0:64:78:21:94:24:6e:22:87:1a:96:be:70:
1f:b9:8d:9d:7c:e6:10:a4:72:b0:c3:c8:a8:ae:4a:
8d:6d:cf:d4:fd:17:e1:53:75:ae:ce:dd:4d:4f:be:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:3E:F8:D1:51:E7:42:79:BD:7F:0A:63:7D:35:6A:8C:27:B4:D8
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/Zw0--NFR50J5vX8KY301aowntNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.159.0/24
Signature Algorithm: sha256WithRSAEncryption
43:da:6b:d9:e6:c6:26:09:bf:31:2b:1e:e8:82:68:d2:9b:a6:
a3:a5:97:e7:86:e9:8d:93:3e:7b:1f:d2:bc:e1:7e:09:04:54:
23:c3:47:89:42:2c:51:71:9d:96:db:12:63:b8:f8:15:ed:3b:
c9:59:ba:f7:77:71:0a:81:b1:ec:df:bb:1c:25:9f:9d:3b:dd:
a8:ae:a5:1a:90:e2:32:b1:44:b5:4c:62:66:c9:3b:79:af:48:
2a:18:c1:cb:1c:ed:6e:3e:85:fb:38:ba:49:ad:81:d2:c7:a9:
61:00:cf:f0:24:b8:09:12:08:f7:c8:3a:b1:7b:1d:6d:81:1b:
86:87:52:05:c3:d7:ae:fe:20:0d:c0:c0:de:30:4a:97:84:d6:
01:d1:ab:1c:f3:f8:6e:19:c6:a6:8f:46:c1:67:8d:69:ff:06:
04:80:0c:ac:84:86:99:78:9e:5c:88:e3:2c:c2:21:4b:ad:dd:
66:ef:0c:7e:1b:92:12:10:69:69:84:cb:7c:a0:f6:00:43:37:
8d:2b:76:fa:23:a5:29:3c:cb:c3:3c:97:46:c9:e4:a2:dd:fc:
94:61:0a:08:43:4f:a5:d0:99:fc:52:8b:3e:50:fc:69:7c:de:
5c:75:af:c6:b2:ff:b7:75:92:78:8a:86:f9:2f:1b:3e:ac:71:
c7:4d:ef:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu6X0dN4zvcrWynJNzv0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx
ODI1ZWYwHhcNMjQwMTAyMTAzMjQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzBkM2VmOGQxNTFlNzQyNzliZDdmMGE2MzdkMzU2YThjMjdiNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW0s1nQVb7ms/XosS5EfxXG+2/pr
NxQjG07BZX2lEd2NPa1Z02nNi5eCcoA4GstolcdeS2QAZtqj3bByuRRxU6rzUop2
Hug3ZyD57deg3FekIQuEo4RZd3j6uXRxXGJUii7v96NVih+BDBSs+j+0CnHAYQFa
g3p5a9VSLUkcsEJMQVf3S3Mqgua/L/OZzuXD5xg15EvjEsRG5iUmn6SzMkhbcMRr
UTzjpnJhBe69mUfe4cUTzX1rxwvf9kJ15HGrt4UtTXrnp2SW6wsJC8sxq0z3jNBk
eCGUJG4ihxqWvnAfuY2dfOYQpHKww8iorkqNbc/U/RfhU3Wuzt1NT77wNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcNPvjRUedCeb1/CmN9NWqMJ7TYMB8GA1UdIwQY
MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt
NzU0YjYwYzViNTY4LzEvWncwLS1ORlI1MEo1dlg4S1kzMDFhb3dudE5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4
LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWyfMA0G
CSqGSIb3DQEBCwUAA4IBAQBD2mvZ5sYmCb8xKx7ogmjSm6ajpZfnhumNkz57H9K8
4X4JBFQjw0eJQixRcZ2W2xJjuPgV7TvJWbr3d3EKgbHs37scJZ+dO92orqUakOIy
sUS1TGJmyTt5r0gqGMHLHO1uPoX7OLpJrYHSx6lhAM/wJLgJEgj3yDqxex1tgRuG
h1IFw9eu/iANwMDeMEqXhNYB0asc8/huGcamj0bBZ41p/wYEgAyshIaZeJ5ciOMs
wiFLrd1m7wx+G5ISEGlphMt8oPYAQzeNK3b6I6UpPMvDPJdGyeSi3fyUYQoIQ0+l
0Jn8Uos+UPxpfN5cda/Gsv+3dZJ4iob5Lxs+rHHHTe8y
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:23:14 2024 by rpki-client on console-fra.rpki-client.org