Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ZBvwiMSSmKdYwMBlolI8rm7h7Uc.roa
File: ZBvwiMSSmKdYwMBlolI8rm7h7Uc.roa (raw, json)
Hash identifier: ZVrUShls4ZbYpfb6JomHd0hStXLED8WG0rzmBS3BYf8=
Subject key identifier: 64:1B:F0:88:C4:92:98:A7:58:C0:C0:65:A2:52:3C:AE:6E:E1:ED:47
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 018CC94E4E01148A3E02CA25267976D46D79
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ZBvwiMSSmKdYwMBlolI8rm7h7Uc.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 185.232.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4e:01:14:8a:3e:02:ca:25:26:79:76:d4:6d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=641bf088c49298a758c0c065a2523cae6ee1ed47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:86:40:a9:ec:96:c5:7d:b2:7d:ea:9d:2b:
27:fe:6c:45:aa:34:cf:e1:37:6a:92:ca:98:7c:f9:
38:02:71:27:24:cb:37:38:1b:9a:d0:63:52:a6:61:
8e:55:db:a8:ca:e2:34:2c:18:77:26:2d:aa:4e:a4:
7a:a2:e6:54:1b:f9:eb:18:58:d8:eb:61:09:91:72:
56:95:ba:74:1a:f9:9b:c8:78:ae:ba:f1:cb:d6:a0:
21:33:73:35:8c:d8:f4:b7:f3:67:6f:ba:f2:d0:5e:
bc:27:29:dc:cf:8c:20:8c:d9:97:b7:ff:0d:47:df:
c8:55:69:b4:7d:3f:d4:8d:73:51:2b:58:ea:a5:00:
e6:c3:e5:bd:0a:70:61:19:64:6c:e1:38:5c:f6:be:
9b:78:26:5c:31:f6:d6:69:40:e7:1d:f0:26:64:58:
f0:48:46:ef:0d:1f:c2:1d:11:63:5d:75:3e:14:21:
c1:c3:31:bb:71:94:82:97:24:0c:b4:71:1e:72:17:
0c:83:72:ad:1c:a9:19:ee:43:28:58:db:0f:20:ae:
4a:f6:f3:49:f5:83:1a:91:98:84:64:4f:6a:98:a6:
06:51:49:f0:21:4d:e8:72:30:9d:d2:7f:3d:38:c4:
65:a9:05:8b:13:70:2b:85:1f:eb:a1:79:2d:f5:75:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:F0:88:C4:92:98:A7:58:C0:C0:65:A2:52:3C:AE:6E:E1:ED:47
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ZBvwiMSSmKdYwMBlolI8rm7h7Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f7:db:a4:a9:5e:43:43:09:01:23:ef:50:5c:6b:2c:ba:b7:
b2:cf:d6:5d:24:86:27:87:b8:e3:89:c5:2e:16:45:e0:f8:18:
9f:e4:ab:3d:aa:2d:2f:40:ff:ca:89:db:a9:93:a8:cb:4f:f3:
41:a5:82:9b:e9:66:09:50:ab:f3:65:5e:64:4e:79:18:ab:ed:
50:57:29:d7:25:7c:a2:70:72:27:ca:53:12:22:b9:37:d3:b1:
15:3d:5a:8a:a6:81:c5:c9:9a:c8:e7:dc:d7:1f:52:1d:f5:84:
32:57:97:57:06:29:3d:d2:b7:50:6b:8d:31:15:12:6e:fb:6f:
80:32:18:d3:f2:99:72:91:27:52:27:b4:6a:96:ad:6d:6e:bb:
b7:9c:41:a0:f0:bc:91:9e:d9:18:1f:92:ea:00:86:41:a4:eb:
80:26:3e:47:eb:85:72:c0:a5:c3:a3:e0:cd:15:6f:22:82:00:
60:e5:15:f0:b1:9a:46:ee:82:8f:82:69:b3:32:ab:b8:83:86:
70:39:ed:ea:99:0d:7d:70:ad:60:62:c9:2d:1f:8c:be:db:7b:
e6:3a:e8:51:7c:8b:a6:ff:28:d6:e4:c3:b5:e6:25:05:ca:b7:
2c:87:2c:d9:f0:fd:20:80:6a:ca:ee:a2:2c:70:5b:8f:73:bd:
22:ed:f3:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTk4BFIo+AsolJnl21G15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZWVjZDcxYzE5M2U0YWMzMGVkMDNkMGI5ZjA1ZGExMDFj
NjAzZDIwHhcNMjQwMTAyMDgzMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDFiZjA4OGM0OTI5OGE3NThjMGMwNjVhMjUyM2NhZTZlZTFlZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3aGQKnslsV9sn3qnSsn/mxFqjTP
4TdqksqYfPk4AnEnJMs3OBua0GNSpmGOVduoyuI0LBh3Ji2qTqR6ouZUG/nrGFjY
62EJkXJWlbp0GvmbyHiuuvHL1qAhM3M1jNj0t/Nnb7ry0F68Jyncz4wgjNmXt/8N
R9/IVWm0fT/UjXNRK1jqpQDmw+W9CnBhGWRs4Thc9r6beCZcMfbWaUDnHfAmZFjw
SEbvDR/CHRFjXXU+FCHBwzG7cZSClyQMtHEechcMg3KtHKkZ7kMoWNsPIK5K9vNJ
9YMakZiEZE9qmKYGUUnwIU3ocjCd0n89OMRlqQWLE3ArhR/roXkt9XUrUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQb8IjEkpinWMDAZaJSPK5u4e1HMB8GA1UdIwQY
MBaAFBHuzXHBk+SsMO0D0LnwXaEBxgPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWU3TmNjR1Q1S3d3N1FQUXVmQmRvUUhHQTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZmQ5NWEtNTE1Ny00YTFiLWI4Njgt
MTM4OTk1Yzk5Yjk3LzEvWkJ2d2lNU1NtS2RZd01CbG9sSThybTdoN1VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80ZmQ5NWEtNTE1Ny00YTFiLWI4NjgtMTM4OTk1Yzk5Yjk3
LzEvRWU3TmNjR1Q1S3d3N1FQUXVmQmRvUUhHQTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuejOMA0G
CSqGSIb3DQEBCwUAA4IBAQBE99ukqV5DQwkBI+9QXGssureyz9ZdJIYnh7jjicUu
FkXg+Bif5Ks9qi0vQP/Kidupk6jLT/NBpYKb6WYJUKvzZV5kTnkYq+1QVynXJXyi
cHInylMSIrk307EVPVqKpoHFyZrI59zXH1Id9YQyV5dXBik90rdQa40xFRJu+2+A
MhjT8plykSdSJ7Rqlq1tbru3nEGg8LyRntkYH5LqAIZBpOuAJj5H64VywKXDo+DN
FW8iggBg5RXwsZpG7oKPgmmzMqu4g4ZwOe3qmQ19cK1gYsktH4y+23vmOuhRfIum
/yjW5MO15iUFyrcshyzZ8P0ggGrK7qIscFuPc70i7fPk
-----END CERTIFICATE-----
Generated at Sat May 18 15:44:51 2024 by rpki-client on console-fra.rpki-client.org