Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/hNZpQNA8tef4PGUBN4ZLulcMmP4.roa
File: hNZpQNA8tef4PGUBN4ZLulcMmP4.roa (raw, json)
Hash identifier: pEesR0vwHLV84vavCj0J000hitOrTIXw5FwbjSMdO/M=
Subject key identifier: 84:D6:69:40:D0:3C:B5:E7:F8:3C:65:01:37:86:4B:BA:57:0C:98:FE
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 018CC3B6A4A8B6D3987DFEE6E2B6AD721EA9
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/hNZpQNA8tef4PGUBN4ZLulcMmP4.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205953
IP address blocks: 212.64.219.0/24 maxlen: 24
212.64.221.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a4:a8:b6:d3:98:7d:fe:e6:e2:b6:ad:72:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84d66940d03cb5e7f83c650137864bba570c98fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:27:51:5e:fe:36:75:48:4f:42:db:b3:39:
c4:cc:33:72:57:58:71:fd:01:69:1e:e6:89:54:54:
da:30:e0:3e:05:d0:9c:47:57:2b:89:f4:96:40:55:
80:ce:a7:de:5a:2d:6a:cc:bd:f0:ff:6f:40:95:92:
7f:97:8f:5a:87:7b:ef:55:b7:37:ac:2e:93:10:c0:
80:66:cd:ff:b1:01:b3:79:bd:37:92:e2:b2:35:52:
ea:1d:9f:46:fb:98:4e:62:7b:dd:c4:34:b4:37:73:
af:79:66:38:15:59:92:7d:7c:2d:97:e9:63:93:53:
9e:23:f2:e4:37:a0:a7:7e:e5:7c:a7:0d:eb:d8:2f:
aa:7f:e9:0b:54:cb:d3:1e:a0:12:28:f5:e4:71:7f:
85:e9:80:de:9c:e0:99:3e:a3:09:c5:ec:75:44:ed:
00:16:bb:3f:f9:6c:00:2f:42:e9:83:28:14:ae:66:
e1:28:7e:94:0d:40:a7:bf:74:ce:c6:41:3d:49:6d:
0f:bf:c3:a4:a8:2d:54:74:0f:d5:c6:50:bd:2e:95:
f2:4d:7e:6f:67:8f:9d:69:ad:e2:80:b8:c4:6c:91:
c9:f7:d9:cd:71:9e:e9:74:1b:72:04:32:05:08:ae:
a4:07:80:4e:46:6c:87:6a:4e:2a:f6:36:99:f4:1f:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:69:40:D0:3C:B5:E7:F8:3C:65:01:37:86:4B:BA:57:0C:98:FE
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/hNZpQNA8tef4PGUBN4ZLulcMmP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.219.0/24
212.64.221.0/24
Signature Algorithm: sha256WithRSAEncryption
89:38:50:cf:db:9c:ff:f0:c3:db:29:19:a7:7e:bb:a4:ae:1c:
6b:d8:bf:ea:8b:04:35:69:61:d0:b8:25:7b:d5:43:ba:aa:92:
4c:83:17:ab:65:54:9c:26:03:6d:66:48:b2:ca:72:f8:f9:b1:
e6:9f:49:b7:fa:d9:b3:4b:76:c2:d8:0e:46:ce:97:dc:5f:22:
d4:4d:fb:d5:51:f1:a1:79:9a:ba:29:05:74:c6:12:75:0a:aa:
23:a6:0a:3a:de:33:07:d1:2b:26:0b:98:1d:dd:5f:30:88:42:
2d:33:3c:fa:48:dc:e1:5f:67:4f:2d:2d:24:e7:95:ac:f7:68:
44:fa:2b:5e:f3:06:6f:b3:99:4b:4d:a4:d1:ef:f5:81:fa:0b:
19:64:85:6a:c0:fc:f9:90:f4:8e:9d:fe:33:20:cf:3c:ea:7b:
33:9d:cf:ed:9f:be:7f:12:1f:7e:40:24:ef:e3:94:d3:85:85:
c8:bf:f9:3f:a5:8d:27:91:d6:6e:ae:f0:20:77:14:f2:e7:79:
8a:d4:ec:fe:71:16:7d:c5:4b:61:59:04:47:a0:43:6a:26:2a:
f9:c2:1e:4f:cb:17:c5:45:df:14:bf:d0:b0:19:e6:34:e2:85:
c1:86:61:74:92:6a:39:37:a4:62:ee:5c:3b:17:f1:37:7b:1a:
af:9b:e0:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtqSottOYff7m4ratch6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl
NWY0YjkwHhcNMjQwMTAxMDYyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGQ2Njk0MGQwM2NiNWU3ZjgzYzY1MDEzNzg2NGJiYTU3MGM5OGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsInUV7+NnVIT0LbsznEzDNyV1hx
/QFpHuaJVFTaMOA+BdCcR1crifSWQFWAzqfeWi1qzL3w/29AlZJ/l49ah3vvVbc3
rC6TEMCAZs3/sQGzeb03kuKyNVLqHZ9G+5hOYnvdxDS0N3OveWY4FVmSfXwtl+lj
k1OeI/LkN6CnfuV8pw3r2C+qf+kLVMvTHqASKPXkcX+F6YDenOCZPqMJxex1RO0A
Frs/+WwAL0LpgygUrmbhKH6UDUCnv3TOxkE9SW0Pv8OkqC1UdA/VxlC9LpXyTX5v
Z4+daa3igLjEbJHJ99nNcZ7pdBtyBDIFCK6kB4BORmyHak4q9jaZ9B9KpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFITWaUDQPLXn+DxlATeGS7pXDJj+MB8GA1UdIwQY
MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt
NDRhYjdhOWQ3ZGVhLzEvaE5acFFOQTh0ZWY0UEdVQk40Wkx1bGNNbVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh
LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1EDbAwQA
1EDdMA0GCSqGSIb3DQEBCwUAA4IBAQCJOFDP25z/8MPbKRmnfrukrhxr2L/qiwQ1
aWHQuCV71UO6qpJMgxerZVScJgNtZkiyynL4+bHmn0m3+tmzS3bC2A5GzpfcXyLU
TfvVUfGheZq6KQV0xhJ1Cqojpgo63jMH0SsmC5gd3V8wiEItMzz6SNzhX2dPLS0k
55Ws92hE+ite8wZvs5lLTaTR7/WB+gsZZIVqwPz5kPSOnf4zIM886nsznc/tn75/
Eh9+QCTv45TThYXIv/k/pY0nkdZurvAgdxTy53mK1Oz+cRZ9xUthWQRHoENqJir5
wh5PyxfFRd8Uv9CwGeY04oXBhmF0kmo5N6Ri7lw7F/E3exqvm+Br
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:43 2024 by rpki-client on console-fra.rpki-client.org