Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/fzSUNgxMmiJxsae3BEa4N-LTcSs.roa
File: fzSUNgxMmiJxsae3BEa4N-LTcSs.roa (raw, json)
Hash identifier: un2qU9wtaHgHUb7qTNVo9D2d4E1Dlam4+cJziY3PWAU=
Subject key identifier: 7F:34:94:36:0C:4C:9A:22:71:B1:A7:B7:04:46:B8:37:E2:D3:71:2B
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 018CC3B73B4FBCCA03643AE8D4B59BBA1AD0
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/fzSUNgxMmiJxsae3BEa4N-LTcSs.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209122
IP address blocks: 194.35.104.0/23 maxlen: 23
194.35.104.0/22 maxlen: 22
194.35.106.0/23 maxlen: 23
2a0d:f8c0:20::/43 maxlen: 43
2a0d:f8c0::/43 maxlen: 43
2a0d:f8c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3b:4f:bc:ca:03:64:3a:e8:d4:b5:9b:ba:1a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f3494360c4c9a2271b1a7b70446b837e2d3712b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:01:e6:0a:94:9b:b3:36:9a:e5:52:50:32:
cc:06:79:eb:eb:60:a2:9a:7e:51:74:31:43:61:e8:
f4:d6:f2:11:18:bf:06:cb:e5:ac:62:d5:23:6a:fd:
51:e5:e3:e8:ed:5f:2d:6a:b1:92:5e:81:e9:a8:40:
dc:c8:5e:dc:91:cb:50:3e:6e:c8:9b:e4:db:42:ea:
10:96:fe:34:a9:a1:bd:34:ba:61:83:cd:18:01:3b:
87:23:4b:52:83:99:a6:c4:03:c6:bc:bb:86:87:d8:
dc:54:a6:02:46:97:1a:55:4b:b5:e4:bb:4f:c3:8e:
b9:67:8d:bd:5f:3a:56:f0:ca:6d:b9:b4:be:31:06:
95:bc:43:7f:50:9b:93:46:ea:ec:4f:48:9c:94:d1:
9f:37:21:75:db:07:f4:c1:bb:28:d5:70:e1:be:6d:
a7:68:0d:e2:8a:a6:fd:f2:52:68:4d:8c:2e:76:5d:
8f:91:4e:47:f3:40:75:5f:9f:31:12:16:c3:f2:32:
a1:3a:06:41:6d:3a:54:e0:e1:5d:d7:29:7a:31:06:
c5:9c:ed:c0:fe:48:a0:14:38:36:41:16:5e:b1:2a:
be:65:7e:63:e0:1b:90:fc:fc:fd:2e:3d:18:7c:57:
ec:4e:58:ca:da:6f:18:8d:6c:bd:55:32:c6:fe:85:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:94:36:0C:4C:9A:22:71:B1:A7:B7:04:46:B8:37:E2:D3:71:2B
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/fzSUNgxMmiJxsae3BEa4N-LTcSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.104.0/22
IPv6:
2a0d:f8c0::/42
Signature Algorithm: sha256WithRSAEncryption
06:b0:76:45:d6:19:9e:72:c7:70:1a:80:83:32:22:1e:bb:37:
7c:25:e8:57:09:ef:00:26:c6:2c:a6:1d:9b:3a:65:b3:cd:a4:
94:77:24:83:82:dd:d6:16:8a:13:62:fd:e1:0b:06:69:66:c1:
92:62:f1:4b:dd:af:7e:17:ae:4b:fa:38:66:8f:3c:65:5a:a1:
88:71:32:1e:df:3f:0a:d3:f0:20:55:1e:8f:09:37:86:78:a5:
63:07:47:c3:e8:5a:67:13:ec:65:76:24:6d:26:1f:81:cd:06:
fc:85:b7:70:c2:5e:a9:e9:bb:b9:6c:df:f2:6d:8d:7d:cf:39:
e7:51:60:bc:09:90:7e:ea:8f:d2:d4:4b:80:ed:6b:65:c5:cd:
cf:f7:ff:e8:5e:85:c6:f0:00:3d:23:ca:05:3d:5f:49:8f:e3:
4d:c9:26:75:9f:42:13:3d:e2:80:57:5f:84:16:5c:2b:d9:2b:
1c:43:0b:a2:32:e7:df:f7:3c:6a:26:c9:16:8d:8b:d5:8f:09:
22:fb:64:5b:a1:fc:6b:37:6a:16:4c:5d:bf:22:06:e9:e6:61:
c5:28:ce:10:4e:66:30:e4:6a:b5:05:3a:b9:dd:84:15:ba:13:
f5:3e:e8:70:b4:ec:d0:a8:ec:60:cf:b0:74:89:d2:f9:7a:10:
62:35:04:73
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzDtztPvMoDZDro1LWbuhrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl
MWY1MjgwHhcNMjQwMTAxMDYzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjM0OTQzNjBjNGM5YTIyNzFiMWE3YjcwNDQ2YjgzN2UyZDM3MTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlEB5gqUm7M2muVSUDLMBnnr62Ci
mn5RdDFDYej01vIRGL8Gy+WsYtUjav1R5ePo7V8tarGSXoHpqEDcyF7ckctQPm7I
m+TbQuoQlv40qaG9NLphg80YATuHI0tSg5mmxAPGvLuGh9jcVKYCRpcaVUu15LtP
w465Z429XzpW8MptubS+MQaVvEN/UJuTRursT0iclNGfNyF12wf0wbso1XDhvm2n
aA3iiqb98lJoTYwudl2PkU5H80B1X58xEhbD8jKhOgZBbTpU4OFd1yl6MQbFnO3A
/kigFDg2QRZesSq+ZX5j4BuQ/Pz9Lj0YfFfsTljK2m8YjWy9VTLG/oVC5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH80lDYMTJoicbGntwRGuDfi03ErMB8GA1UdIwQY
MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt
NmRiMDkwMjE0MDM1LzEvZnpTVU5neE1taUp4c2FlM0JFYTROLUxUY1NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1
LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwiNoMA8E
AgACMAkDBwYqDfjAAAAwDQYJKoZIhvcNAQELBQADggEBAAawdkXWGZ5yx3AagIMy
Ih67N3wl6FcJ7wAmxiymHZs6ZbPNpJR3JIOC3dYWihNi/eELBmlmwZJi8Uvdr34X
rkv6OGaPPGVaoYhxMh7fPwrT8CBVHo8JN4Z4pWMHR8PoWmcT7GV2JG0mH4HNBvyF
t3DCXqnpu7ls3/JtjX3POedRYLwJkH7qj9LUS4Dta2XFzc/3/+hehcbwAD0jygU9
X0mP403JJnWfQhM94oBXX4QWXCvZKxxDC6Iy59/3PGomyRaNi9WPCSL7ZFuh/Gs3
ahZMXb8iBunmYcUozhBOZjDkarUFOrndhBW6E/U+6HC07NCo7GDPsHSJ0vl6EGI1
BHM=
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:19:50 2024 by rpki-client on console-fra.rpki-client.org