Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/nzec22EzcqL9VGzl4Xt0WSZ9jzE.roa
File: nzec22EzcqL9VGzl4Xt0WSZ9jzE.roa (raw, json)
Hash identifier: odi+RHbjj2OUjgg/MTfMjSOKuQUCuLrd2agbDLUI+tQ=
Subject key identifier: 9F:37:9C:DB:61:33:72:A2:FD:54:6C:E5:E1:7B:74:59:26:7D:8F:31
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 018CC56ECD16083172A5C2815638B3FF4ED3
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/nzec22EzcqL9VGzl4Xt0WSZ9jzE.roa
Signing time: Mon 01 Jan 2024 14:30:22 +0000
ROA not before: Mon 01 Jan 2024 14:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.87.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:cd:16:08:31:72:a5:c2:81:56:38:b3:ff:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Jan 1 14:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f379cdb613372a2fd546ce5e17b7459267d8f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:69:dc:bb:40:09:40:5f:f4:f4:f6:97:d3:
77:56:04:97:b9:67:d8:42:07:35:eb:5b:d3:d7:07:
7a:9c:bd:a5:f8:35:23:67:49:59:b3:82:cd:b4:a9:
de:a8:3e:ca:36:cb:03:09:19:40:d5:26:f4:69:14:
71:fd:ec:6a:ec:62:fb:30:78:71:db:7d:05:47:c6:
35:af:fb:d8:64:52:f0:be:38:d1:3c:fd:63:d7:88:
c2:1d:f9:44:8c:e4:41:82:b5:fa:a1:db:95:82:13:
0b:b1:f0:95:85:b4:10:1d:ba:a8:7c:2e:0b:2d:84:
82:2c:b1:b9:fe:14:cf:d8:93:ac:77:38:f0:a3:a3:
92:4e:b2:4b:40:d6:9b:fb:05:92:7c:41:12:62:19:
2b:5c:00:63:c5:72:91:fa:cd:9b:a7:ad:70:64:37:
67:4c:65:07:3b:5f:5b:24:b7:d6:1e:b2:17:64:20:
70:b3:fc:f4:05:22:62:6c:c2:b0:17:87:8e:41:16:
96:ca:03:2b:e9:94:84:86:1f:ed:e5:42:16:8b:11:
36:bc:7e:06:5b:77:41:2c:6d:f6:2b:99:0f:35:49:
90:42:67:af:04:07:56:a8:cd:48:e7:fe:10:39:aa:
44:40:0c:a6:d6:f0:44:61:99:21:7e:da:0d:4e:ba:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:37:9C:DB:61:33:72:A2:FD:54:6C:E5:E1:7B:74:59:26:7D:8F:31
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/nzec22EzcqL9VGzl4Xt0WSZ9jzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.68.0/24
Signature Algorithm: sha256WithRSAEncryption
30:32:fb:e6:c8:6d:01:97:89:cf:84:af:fa:e7:76:29:cb:d4:
5c:81:b4:42:ff:c2:4e:0d:61:96:93:20:9a:f3:cc:e8:00:20:
1b:07:bc:ee:07:8b:02:88:06:40:6c:a4:a1:62:45:a5:26:08:
dd:25:e3:b8:a4:30:8c:61:4b:fd:b1:aa:67:39:e4:b7:4d:bd:
27:79:e9:46:65:9a:81:4e:95:17:e1:15:57:6d:7b:14:1a:f9:
7a:13:26:65:3f:36:3e:69:50:62:f4:38:5f:1b:08:14:16:47:
11:d9:54:0d:8c:21:0c:12:c2:29:17:0a:26:92:86:d0:e4:ba:
c2:47:8f:67:12:ed:d5:c4:a6:71:42:36:96:35:14:8e:d4:32:
b5:43:51:5e:3f:0d:e2:27:68:33:55:4f:01:4d:a7:62:f5:49:
6c:f5:e9:9d:50:4e:21:d1:ef:99:c6:45:d6:cd:e1:21:51:96:
e5:20:f4:d3:0a:f7:e3:38:88:63:0b:95:99:4b:ac:b4:6e:ef:
37:e8:11:eb:a0:9f:37:db:c6:61:c5:1e:63:1f:79:2a:ac:92:
cf:b6:b6:f5:25:d4:02:3b:a2:0a:dc:bd:e0:a8:e6:f0:6a:9e:
87:a4:5c:ee:23:d2:f4:cf:98:a4:f4:c9:c2:94:fa:ce:39:7c:
47:d3:71:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbs0WCDFypcKBVjiz/07TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTRiYWY5OWFiODQwMTI5MTMzMjg1ZmU5YWQ3YjgzZmQx
MzBjMzkwHhcNMjQwMTAxMTQzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjM3OWNkYjYxMzM3MmEyZmQ1NDZjZTVlMTdiNzQ1OTI2N2Q4ZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Rp3LtACUBf9PT2l9N3VgSXuWfY
Qgc161vT1wd6nL2l+DUjZ0lZs4LNtKneqD7KNssDCRlA1Sb0aRRx/exq7GL7MHhx
230FR8Y1r/vYZFLwvjjRPP1j14jCHflEjORBgrX6oduVghMLsfCVhbQQHbqofC4L
LYSCLLG5/hTP2JOsdzjwo6OSTrJLQNab+wWSfEESYhkrXABjxXKR+s2bp61wZDdn
TGUHO19bJLfWHrIXZCBws/z0BSJibMKwF4eOQRaWygMr6ZSEhh/t5UIWixE2vH4G
W3dBLG32K5kPNUmQQmevBAdWqM1I5/4QOapEQAym1vBEYZkhftoNTro3pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ83nNthM3Ki/VRs5eF7dFkmfY8xMB8GA1UdIwQY
MBaAFHLkuvmauEASkTMoX+mte4P9Eww5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2Qt
YThkNjVkY2NiOTZiLzEvbnplYzIyRXpjcUw5Vkd6bDRYdDBXU1o5anpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NmI3NGMtODFjMS00MTBlLTk1N2QtYThkNjVkY2NiOTZi
LzEvY3VTNi1acTRRQktSTXloZjZhMTdnXzBURERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVdEMA0G
CSqGSIb3DQEBCwUAA4IBAQAwMvvmyG0Bl4nPhK/653Ypy9RcgbRC/8JODWGWkyCa
88zoACAbB7zuB4sCiAZAbKShYkWlJgjdJeO4pDCMYUv9sapnOeS3Tb0neelGZZqB
TpUX4RVXbXsUGvl6EyZlPzY+aVBi9DhfGwgUFkcR2VQNjCEMEsIpFwomkobQ5LrC
R49nEu3VxKZxQjaWNRSO1DK1Q1FePw3iJ2gzVU8BTadi9Uls9emdUE4h0e+ZxkXW
zeEhUZblIPTTCvfjOIhjC5WZS6y0bu836BHroJ8328ZhxR5jH3kqrJLPtrb1JdQC
O6IK3L3gqObwap6HpFzuI9L0z5ik9MnClPrOOXxH03FB
-----END CERTIFICATE-----
Generated at Sun Apr 28 09:05:54 2024 by rpki-client on console-ams.rpki-client.org