Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/zRsrp-tEf7LHEz3RhT8_JG63d-s.roa
File: zRsrp-tEf7LHEz3RhT8_JG63d-s.roa (raw, json)
Hash identifier: //AwoUL/O6idlfSZBMiHKFkwd+YnJygSWUMCl6m1ndk=
Subject key identifier: CD:1B:2B:A7:EB:44:7F:B2:C7:13:3D:D1:85:3F:3F:24:6E:B7:77:EB
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 018CCA2A1496F4FA1F79D0F5702580F235A8
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/zRsrp-tEf7LHEz3RhT8_JG63d-s.roa
Signing time: Tue 02 Jan 2024 12:33:24 +0000
ROA not before: Tue 02 Jan 2024 12:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.24.80.0/24 maxlen: 24
185.24.81.0/24 maxlen: 24
185.24.82.0/24 maxlen: 24
185.24.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:14:96:f4:fa:1f:79:d0:f5:70:25:80:f2:35:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Jan 2 12:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd1b2ba7eb447fb2c7133dd1853f3f246eb777eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:6d:9d:f6:ef:f7:df:76:9f:71:e9:c9:6c:
e2:2d:e4:b6:8f:18:27:6f:9c:ef:c3:8f:ed:d3:e6:
ad:df:25:0e:bf:2e:fa:3c:bb:e7:09:32:99:f2:4f:
ea:aa:0e:50:a8:96:5e:20:ad:4a:a8:ca:3b:5a:91:
06:8b:e2:3a:5c:10:b5:e6:cc:97:2a:f7:fd:4d:82:
1b:2c:67:41:0c:41:17:a7:a8:80:02:77:ad:95:9d:
65:9f:32:0b:0d:1c:eb:8a:1d:70:c4:8c:a7:d6:c2:
bb:d8:3c:17:fe:1d:57:5c:9b:ec:c1:91:27:bf:ec:
69:23:94:bc:94:4a:c9:e9:40:ef:43:a8:c3:3f:eb:
47:35:da:4f:32:f6:bf:ba:ae:ec:67:97:f1:9c:27:
a4:55:e7:6c:0d:20:fc:1b:98:e6:5d:51:f0:54:23:
4f:dc:19:81:ce:5d:0c:dd:1d:be:47:0c:57:f8:1b:
d5:be:32:04:cd:65:9b:5f:9e:ad:18:21:db:3c:5a:
e6:91:17:2f:48:56:83:46:dd:5d:2c:08:fc:58:70:
19:22:18:46:40:72:37:0a:d9:37:c1:e2:26:93:3d:
7f:17:e8:ec:42:9f:4a:49:23:da:b6:04:28:e1:fd:
72:1b:64:14:6d:9e:3f:7b:60:a9:fe:0b:5b:83:d9:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:2B:A7:EB:44:7F:B2:C7:13:3D:D1:85:3F:3F:24:6E:B7:77:EB
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/zRsrp-tEf7LHEz3RhT8_JG63d-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
84:f8:e4:72:31:10:6d:77:10:0d:25:0b:26:92:0e:23:a7:fc:
7a:01:fd:9d:f0:19:be:80:ad:1f:52:08:53:a1:0b:d9:c7:fb:
82:c2:fe:eb:ba:19:a3:60:42:22:7c:79:c4:7a:8e:a3:cc:d5:
de:4d:66:00:65:58:73:c0:6a:ed:89:8c:fc:a5:fd:b9:da:68:
90:06:ea:36:31:7e:10:5e:da:70:5b:93:00:34:2f:d5:10:ae:
2c:5e:89:5d:85:3a:94:e2:aa:5b:83:e7:1a:cd:d5:e6:c4:5a:
8c:f5:f9:5b:58:83:86:27:54:be:f9:1d:98:aa:ae:bd:1f:9f:
75:f1:a1:82:a2:86:d3:64:c5:d3:7a:45:da:1b:3b:28:f7:5b:
87:90:69:1c:bb:c2:cb:14:0f:75:f4:54:c3:0a:fc:f6:4d:97:
53:d1:88:eb:ce:e7:2c:9b:f2:17:a0:1d:fe:82:fb:5b:d7:91:
10:42:f3:17:b1:43:88:e7:36:ec:04:47:3d:9d:bf:59:5b:78:
c2:27:0f:aa:9a:c2:d5:da:2b:e2:48:cf:53:8b:2c:3f:74:9c:
67:06:af:ad:ac:8e:e8:ec:d0:43:14:11:81:6e:23:65:d5:a8:
aa:ab:0b:e5:27:e9:53:f6:87:d6:3e:5f:23:26:e8:16:78:0b:
5c:ff:f6:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKhSW9PofedD1cCWA8jWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWZjNmM2YWVhM2YwZTRlZGY3Y2NiOTJlNmViMjM3N2E3
NDc5YTUwHhcNMjQwMTAyMTIzMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDFiMmJhN2ViNDQ3ZmIyYzcxMzNkZDE4NTNmM2YyNDZlYjc3N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQFtnfbv9992n3HpyWziLeS2jxgn
b5zvw4/t0+at3yUOvy76PLvnCTKZ8k/qqg5QqJZeIK1KqMo7WpEGi+I6XBC15syX
Kvf9TYIbLGdBDEEXp6iAAnetlZ1lnzILDRzrih1wxIyn1sK72DwX/h1XXJvswZEn
v+xpI5S8lErJ6UDvQ6jDP+tHNdpPMva/uq7sZ5fxnCekVedsDSD8G5jmXVHwVCNP
3BmBzl0M3R2+RwxX+BvVvjIEzWWbX56tGCHbPFrmkRcvSFaDRt1dLAj8WHAZIhhG
QHI3Ctk3weImkz1/F+jsQp9KSSPatgQo4f1yG2QUbZ4/e2Cp/gtbg9ntdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM0bK6frRH+yxxM90YU/PyRut3frMB8GA1UdIwQY
MBaAFKxfxsauo/Dk7ffMuS5usjd6dHmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjIt
OWExMzcwOTJjZGQwLzEvelJzcnAtdEVmN0xIRXozUmhUOF9KRzYzZC1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjItOWExMzcwOTJjZGQw
LzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRhQMA0G
CSqGSIb3DQEBCwUAA4IBAQCE+ORyMRBtdxANJQsmkg4jp/x6Af2d8Bm+gK0fUghT
oQvZx/uCwv7ruhmjYEIifHnEeo6jzNXeTWYAZVhzwGrtiYz8pf252miQBuo2MX4Q
XtpwW5MANC/VEK4sXoldhTqU4qpbg+cazdXmxFqM9flbWIOGJ1S++R2Yqq69H591
8aGCoobTZMXTekXaGzso91uHkGkcu8LLFA919FTDCvz2TZdT0Yjrzucsm/IXoB3+
gvtb15EQQvMXsUOI5zbsBEc9nb9ZW3jCJw+qmsLV2iviSM9Tiyw/dJxnBq+trI7o
7NBDFBGBbiNl1aiqqwvlJ+lT9ofWPl8jJugWeAtc//YQ
-----END CERTIFICATE-----
Generated at Mon Jun 17 23:59:18 2024 by rpki-client on console-fra.rpki-client.org