Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/9C6YKun9XgTqwL6WZGisioTnd-w.roa
File: 9C6YKun9XgTqwL6WZGisioTnd-w.roa (raw, json)
Hash identifier: wSlCkYRj+gKXqKp/KXPWC7pa5apTpmyf+abx0rDSJoI=
Subject key identifier: F4:2E:98:2A:E9:FD:5E:04:EA:C0:BE:96:64:68:AC:8A:84:E7:77:EC
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018CC7933D8BBDDC80A48F55B842024259DC
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/9C6YKun9XgTqwL6WZGisioTnd-w.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200088
IP address blocks: 37.252.6.0/23 maxlen: 23
37.252.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3d:8b:bd:dc:80:a4:8f:55:b8:42:02:42:59:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f42e982ae9fd5e04eac0be966468ac8a84e777ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:fc:13:ef:3c:86:82:33:5c:87:b2:64:96:
75:38:c1:11:3b:46:69:84:55:85:14:bf:23:d1:ab:
b6:62:86:be:5e:93:3a:35:ab:62:d0:88:22:d4:c1:
d7:f9:48:1b:36:02:0e:2b:7b:3a:db:71:30:2d:c5:
10:fb:e9:e5:19:07:fd:cb:6a:36:3a:19:55:53:c5:
a3:13:74:13:8b:6b:1c:d6:62:5f:d9:20:b6:3d:f4:
cb:64:d7:b4:18:fc:26:18:a4:6a:8b:bb:08:1b:b5:
66:31:ca:f3:53:69:6d:1d:41:ec:e4:75:63:c5:a3:
ff:70:77:1b:c5:96:74:f1:eb:30:09:08:39:3c:a7:
1d:8b:97:fb:28:95:16:e4:6b:e5:4e:90:fa:f9:25:
b8:dc:29:27:55:e5:9d:26:b4:00:48:1e:ac:0d:d5:
73:36:77:49:f0:6f:cb:27:38:97:34:71:b4:8c:de:
c8:11:3c:8c:b0:76:6d:10:ea:4a:c1:a5:e1:72:c6:
fb:36:7d:ce:8a:83:e9:8a:36:5b:35:f9:ba:f1:6c:
1d:9b:d5:6c:35:dc:aa:33:05:72:1b:44:ab:f9:9e:
f2:ca:58:40:6b:af:96:ce:4c:6e:e1:c1:c8:8d:94:
90:3c:f7:7b:50:dc:22:68:61:8b:be:80:e0:e1:dd:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:98:2A:E9:FD:5E:04:EA:C0:BE:96:64:68:AC:8A:84:E7:77:EC
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/9C6YKun9XgTqwL6WZGisioTnd-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.6.0/23
37.252.10.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:9d:e4:5d:a0:d8:5a:b9:97:b7:3b:09:13:c5:55:cc:3a:a3:
0d:39:9a:22:a2:5f:be:06:a4:8b:ad:d3:1e:68:a3:51:a6:4a:
4d:a2:66:bb:2f:5d:e3:1c:82:ae:bb:16:ce:66:d2:b7:3b:d7:
85:4f:bd:d9:f6:76:2e:da:7a:ad:dd:96:cf:ff:97:81:a7:89:
fb:3c:f3:ab:20:98:ee:c9:ae:dd:a4:b6:ec:d4:74:17:67:4b:
12:d9:04:c5:d2:27:e9:71:52:77:03:6b:ff:5c:7c:44:a5:b0:
c3:0f:a2:de:17:37:3b:2a:0f:16:4a:79:6e:2e:6a:6d:f9:44:
db:0a:7b:8c:21:be:19:c3:e1:df:e9:92:eb:54:40:07:d1:00:
87:05:c3:f1:53:70:86:77:3a:84:3c:18:f7:9a:ca:7b:7e:5a:
d0:29:63:48:0c:d6:7b:08:31:13:43:40:46:c8:4a:ab:59:7c:
38:2e:8a:5b:41:3a:dd:85:18:af:cf:8e:7b:10:76:ee:51:ab:
60:97:5c:64:a8:ff:29:3e:df:49:66:8f:65:60:89:20:99:df:
8d:e3:dd:ec:57:73:e0:11:7e:8d:dc:a5:95:c6:8f:c8:55:02:
2b:13:89:ca:a3:f6:02:dc:e7:86:ef:ee:43:ef:d3:d5:4d:2f:
b2:fa:df:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHkz2LvdyApI9VuEICQlncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjQwMTAyMDAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDJlOTgyYWU5ZmQ1ZTA0ZWFjMGJlOTY2NDY4YWM4YTg0ZTc3N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJz8E+88hoIzXIeyZJZ1OMERO0Zp
hFWFFL8j0au2Yoa+XpM6Nati0Igi1MHX+UgbNgIOK3s623EwLcUQ++nlGQf9y2o2
OhlVU8WjE3QTi2sc1mJf2SC2PfTLZNe0GPwmGKRqi7sIG7VmMcrzU2ltHUHs5HVj
xaP/cHcbxZZ08eswCQg5PKcdi5f7KJUW5GvlTpD6+SW43CknVeWdJrQASB6sDdVz
NndJ8G/LJziXNHG0jN7IETyMsHZtEOpKwaXhcsb7Nn3OioPpijZbNfm68Wwdm9Vs
NdyqMwVyG0Sr+Z7yylhAa6+Wzkxu4cHIjZSQPPd7UNwiaGGLvoDg4d3YdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPQumCrp/V4E6sC+lmRorIqE53fsMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvOUM2WUt1bjlYZ1Rxd0w2V1pHaXNpb1RuZC13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJfwGAwQB
JfwKMA0GCSqGSIb3DQEBCwUAA4IBAQDSneRdoNhauZe3OwkTxVXMOqMNOZoiol++
BqSLrdMeaKNRpkpNoma7L13jHIKuuxbOZtK3O9eFT73Z9nYu2nqt3ZbP/5eBp4n7
PPOrIJjuya7dpLbs1HQXZ0sS2QTF0ifpcVJ3A2v/XHxEpbDDD6LeFzc7Kg8WSnlu
Lmpt+UTbCnuMIb4Zw+Hf6ZLrVEAH0QCHBcPxU3CGdzqEPBj3msp7flrQKWNIDNZ7
CDETQ0BGyEqrWXw4LopbQTrdhRivz457EHbuUatgl1xkqP8pPt9JZo9lYIkgmd+N
493sV3PgEX6N3KWVxo/IVQIrE4nKo/YC3OeG7+5D79PVTS+y+t/j
-----END CERTIFICATE-----
Generated at Sun May 19 00:45:45 2024 by rpki-client on console-ams.rpki-client.org