Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ZYJ19g6DJpuSUZ_JqcPsdqipUog.roa
File: ZYJ19g6DJpuSUZ_JqcPsdqipUog.roa (raw, json)
Hash identifier: 0V2sCu3h7clUKxc/BViolGxrYVMZdrBpsJ2OA0LjHYc=
Subject key identifier: 65:82:75:F6:0E:83:26:9B:92:51:9F:C9:A9:C3:EC:76:A8:A9:52:88
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EEAD1418FB0B222358D90D7675D1571E1
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ZYJ19g6DJpuSUZ_JqcPsdqipUog.roa
Signing time: Wed 17 Apr 2024 06:49:26 +0000
ROA not before: Wed 17 Apr 2024 06:49:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13056
IP address blocks: 37.76.160.0/19 maxlen: 19
78.132.128.0/17 maxlen: 17
91.202.20.0/22 maxlen: 22
91.202.20.0/24 maxlen: 24
91.202.21.0/24 maxlen: 24
178.75.64.0/18 maxlen: 18
193.33.62.0/23 maxlen: 23
213.135.128.0/19 maxlen: 19
213.135.128.0/24 maxlen: 24
213.135.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:d1:41:8f:b0:b2:22:35:8d:90:d7:67:5d:15:71:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 17 06:49:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=658275f60e83269b92519fc9a9c3ec76a8a95288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:ce:da:eb:56:4a:05:16:c2:4d:ad:d9:40:
6e:cc:fc:79:9a:a3:53:8d:cd:ba:58:fb:37:c7:bc:
3c:89:e5:34:1e:19:c7:a3:f1:9b:89:af:47:c6:d1:
0b:39:05:89:fe:c2:ce:4d:64:54:2b:73:ed:60:f4:
d8:8c:71:45:49:06:5c:78:ef:27:c1:d1:3f:bf:3c:
ec:7f:04:f8:ef:15:35:10:fc:8c:4d:54:f1:5e:5a:
87:14:2b:23:16:ce:4c:3f:ac:41:ec:75:6c:4f:6f:
0c:0a:26:0e:fa:d4:3a:1c:56:14:a0:4e:de:5a:08:
3b:62:3c:92:78:d4:45:e2:24:0c:1c:90:53:83:97:
84:e0:0e:d9:bc:e1:02:24:0a:67:00:58:13:c1:26:
19:94:df:54:e7:f1:f7:77:b7:29:cb:19:b0:94:fc:
3d:f7:e5:1e:08:3b:eb:e7:44:26:06:22:6d:49:fc:
da:3a:ed:db:6c:f6:ce:11:8b:49:0a:f7:1e:39:0c:
65:b6:73:dd:7c:89:08:53:98:b3:30:19:b4:bb:30:
c4:18:b1:c3:eb:7f:d4:ab:7e:35:06:8f:7f:0d:07:
fd:14:72:e0:e9:f8:6c:94:1e:01:d0:06:7c:ef:6e:
78:d7:d2:ad:37:8b:66:9c:13:8b:29:e4:8a:6a:4f:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:82:75:F6:0E:83:26:9B:92:51:9F:C9:A9:C3:EC:76:A8:A9:52:88
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ZYJ19g6DJpuSUZ_JqcPsdqipUog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.76.160.0/19
78.132.128.0/17
91.202.20.0/22
178.75.64.0/18
193.33.62.0/23
213.135.128.0/19
Signature Algorithm: sha256WithRSAEncryption
04:7f:1f:73:eb:03:6b:d0:a9:af:02:07:3d:5c:e6:6e:57:f3:
45:63:80:81:95:70:9d:6b:f9:5f:ab:75:c4:e2:1f:80:a7:fd:
aa:c1:bf:e3:54:af:5d:ae:aa:59:db:aa:17:b1:9a:f1:95:f6:
2b:2c:7a:18:5c:41:c9:a0:3f:13:5d:25:b6:eb:3f:18:3e:42:
d8:9d:3e:55:56:2b:7d:05:12:3f:1b:98:13:07:1f:4b:d6:81:
32:59:78:b7:a5:ce:e3:0b:b8:d6:4b:54:d2:10:8f:d2:ba:43:
66:3c:a0:ba:00:f7:63:b1:19:05:e6:60:f7:23:fa:e1:8b:05:
6a:6e:29:37:bf:4e:26:90:a9:32:43:fe:5e:14:6c:76:27:c3:
50:77:9a:66:24:50:62:d4:0d:0c:f7:09:1a:a0:fc:93:74:83:
db:ab:a3:49:73:78:bd:27:21:54:93:eb:94:fd:82:a5:c7:77:
15:d4:e8:1a:94:4f:fa:44:40:bc:1e:c4:45:e8:18:60:16:95:
f1:15:70:b4:5c:20:98:f4:97:02:57:fe:c5:f0:f8:ca:a0:a1:
7b:03:47:be:3f:40:fd:4f:78:9e:8d:79:10:7a:cf:0b:5d:54:
36:92:a3:5f:3a:22:3d:bd:b5:70:ad:0e:ed:f0:d7:e9:10:e6:
cf:c9:c6:f0
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY7q0UGPsLIiNY2Q12ddFXHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwNDE3MDY0OTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTgyNzVmNjBlODMyNjliOTI1MTlmYzlhOWMzZWM3NmE4YTk1Mjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibLO2utWSgUWwk2t2UBuzPx5mqNT
jc26WPs3x7w8ieU0HhnHo/Gbia9HxtELOQWJ/sLOTWRUK3PtYPTYjHFFSQZceO8n
wdE/vzzsfwT47xU1EPyMTVTxXlqHFCsjFs5MP6xB7HVsT28MCiYO+tQ6HFYUoE7e
Wgg7YjySeNRF4iQMHJBTg5eE4A7ZvOECJApnAFgTwSYZlN9U5/H3d7cpyxmwlPw9
9+UeCDvr50QmBiJtSfzaOu3bbPbOEYtJCvceOQxltnPdfIkIU5izMBm0uzDEGLHD
63/Uq341Bo9/DQf9FHLg6fhslB4B0AZ8725419KtN4tmnBOLKeSKak9JMQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGWCdfYOgyabklGfyanD7HaoqVKIMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvWllKMTlnNkRKcHVTVVpfSnFjUHNkcWlwVW9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFJUygAwQH
ToSAAwQCW8oUAwQGsktAAwQBwSE+AwQF1YeAMA0GCSqGSIb3DQEBCwUAA4IBAQAE
fx9z6wNr0KmvAgc9XOZuV/NFY4CBlXCda/lfq3XE4h+Ap/2qwb/jVK9drqpZ26oX
sZrxlfYrLHoYXEHJoD8TXSW26z8YPkLYnT5VVit9BRI/G5gTBx9L1oEyWXi3pc7j
C7jWS1TSEI/SukNmPKC6APdjsRkF5mD3I/rhiwVqbik3v04mkKkyQ/5eFGx2J8NQ
d5pmJFBi1A0M9wkaoPyTdIPbq6NJc3i9JyFUk+uU/YKlx3cV1OgalE/6REC8HsRF
6BhgFpXxFXC0XCCY9JcCV/7F8PjKoKF7A0e+P0D9T3iejXkQes8LXVQ2kqNfOiI9
vbVwrQ7t8NfpEObPycbw
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:26 2024 by rpki-client on console-fra.rpki-client.org