Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/b9mmNQSxo__xNCQVQbCXL86yAZ8.roa
File: b9mmNQSxo__xNCQVQbCXL86yAZ8.roa (raw, json)
Hash identifier: fsoreCbq/vcI4wTeBvlvH//o89H7mwwdFlDBSUAjiaM=
Subject key identifier: 6F:D9:A6:35:04:B1:A3:FF:F1:34:24:15:41:B0:97:2F:CE:B2:01:9F
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 018CC7273A14E746A5680A47EAA8A283EE8E
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/b9mmNQSxo__xNCQVQbCXL86yAZ8.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 185.64.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3a:14:e7:46:a5:68:0a:47:ea:a8:a2:83:ee:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fd9a63504b1a3fff134241541b0972fceb2019f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:97:9f:c7:b1:dd:27:5d:c7:8e:28:bc:bf:
59:24:36:ea:82:4f:2e:70:2d:89:8e:12:37:07:ee:
04:db:58:4e:c8:59:f9:60:59:83:af:90:1f:f7:61:
62:70:78:72:34:ad:36:a1:0e:d4:59:16:ae:6a:28:
a8:d1:84:67:4e:56:26:92:6f:56:0a:ed:31:a5:e8:
12:1e:b8:80:d0:28:df:bf:61:04:2a:ac:4a:61:6c:
3c:d6:83:bd:1b:8c:b0:86:a9:2f:08:c4:c8:7d:2a:
16:37:00:b9:56:2c:27:14:6c:ce:57:df:eb:b6:75:
f9:8c:56:d5:d1:47:70:4b:7f:d6:3d:a5:c2:8b:24:
87:3a:98:e7:19:4a:28:40:2d:ed:67:d3:c1:2f:a7:
5e:da:c3:6e:22:e7:63:4c:b5:b5:24:3b:2c:01:ba:
13:c6:2b:99:f9:51:bb:60:4d:dc:15:cd:c2:d4:b7:
11:f4:74:66:08:b8:a6:22:c8:32:cd:e9:93:05:cb:
51:87:4f:74:57:16:93:ff:48:f4:29:d3:a0:b9:9a:
fa:e5:33:15:e8:22:7f:f7:e1:ce:f6:6d:06:d8:1b:
4e:85:e8:83:89:0d:97:94:14:6e:4d:bb:05:cc:93:
17:bb:c6:24:85:8a:32:6a:8d:da:a7:af:8d:68:6e:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:A6:35:04:B1:A3:FF:F1:34:24:15:41:B0:97:2F:CE:B2:01:9F
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/b9mmNQSxo__xNCQVQbCXL86yAZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.252.0/22
Signature Algorithm: sha256WithRSAEncryption
24:7e:65:3c:2a:69:47:ac:23:32:50:6a:d9:fc:c2:ec:b9:71:
73:de:d5:f3:5c:8a:dd:bb:8b:9d:0c:b7:96:ba:89:8b:fe:24:
14:41:62:ba:bd:8b:34:4e:fe:ca:ff:3b:2e:5c:36:57:80:5c:
7b:fe:cb:c9:82:cc:e7:e8:c5:aa:bd:f4:50:4e:dc:07:d0:e4:
89:fd:ec:a9:43:19:9c:75:9d:c3:ff:ea:7e:84:02:dd:52:0a:
ff:5f:80:8e:6b:c0:f6:8b:bb:9d:46:10:f4:8e:54:85:c6:d0:
78:0b:9b:b1:6b:37:97:29:27:79:7b:da:ca:fb:0b:40:97:cf:
fa:c7:33:7a:cd:23:35:d0:37:b1:07:39:51:20:84:f3:8a:a1:
bd:89:b5:0f:df:f2:53:0a:91:3d:2e:0f:42:81:54:c3:5f:21:
d3:71:d7:57:fd:2d:7a:60:a2:35:92:bc:b2:33:74:85:20:13:
2e:10:15:e4:0f:54:09:3b:2f:c3:23:88:a3:c5:31:42:f1:b3:
50:a6:dd:55:9b:be:2a:f4:03:12:f0:c7:fe:32:62:d7:be:9e:
35:4f:1a:66:6c:a8:69:c2:1c:35:f3:09:11:98:ec:6c:c8:d6:
0a:87:4f:0d:8b:d6:8a:96:13:e5:45:ec:51:a5:b7:81:57:c0:
ea:96:ac:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJzoU50alaApH6qiig+6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjIzYmUxMTE1ZjAyMmFhMjY5ZDljZWE0MzliYjhiNDky
MzA3ZTIwHhcNMjQwMTAxMjIzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQ5YTYzNTA0YjFhM2ZmZjEzNDI0MTU0MWIwOTcyZmNlYjIwMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14iXn8ex3Sddx44ovL9ZJDbqgk8u
cC2JjhI3B+4E21hOyFn5YFmDr5Af92FicHhyNK02oQ7UWRauaiio0YRnTlYmkm9W
Cu0xpegSHriA0Cjfv2EEKqxKYWw81oO9G4ywhqkvCMTIfSoWNwC5ViwnFGzOV9/r
tnX5jFbV0UdwS3/WPaXCiySHOpjnGUooQC3tZ9PBL6de2sNuIudjTLW1JDssAboT
xiuZ+VG7YE3cFc3C1LcR9HRmCLimIsgyzemTBctRh090VxaT/0j0KdOguZr65TMV
6CJ/9+HO9m0G2BtOheiDiQ2XlBRuTbsFzJMXu8YkhYoyao3ap6+NaG776wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/ZpjUEsaP/8TQkFUGwly/OsgGfMB8GA1UdIwQY
MBaAFMvyO+ERXwIqomnZzqQ5u4tJIwfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgt
YmUzMjUyYWM0OTgwLzEvYjltbU5RU3hvX194TkNRVlFiQ1hMODZ5QVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgtYmUzMjUyYWM0OTgw
LzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUD8MA0G
CSqGSIb3DQEBCwUAA4IBAQAkfmU8KmlHrCMyUGrZ/MLsuXFz3tXzXIrdu4udDLeW
uomL/iQUQWK6vYs0Tv7K/zsuXDZXgFx7/svJgszn6MWqvfRQTtwH0OSJ/eypQxmc
dZ3D/+p+hALdUgr/X4COa8D2i7udRhD0jlSFxtB4C5uxazeXKSd5e9rK+wtAl8/6
xzN6zSM10DexBzlRIITziqG9ibUP3/JTCpE9Lg9CgVTDXyHTcddX/S16YKI1kryy
M3SFIBMuEBXkD1QJOy/DI4ijxTFC8bNQpt1Vm74q9AMS8Mf+MmLXvp41TxpmbKhp
whw18wkRmOxsyNYKh08Ni9aKlhPlRexRpbeBV8DqlqyD
-----END CERTIFICATE-----
Generated at Thu May 2 15:26:27 2024 by rpki-client on console-ams.rpki-client.org