Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/Cz_VZdeyonShFI8qEn_6G9MByhg.roa
File: Cz_VZdeyonShFI8qEn_6G9MByhg.roa (raw, json)
Hash identifier: /ya8WO4O70K4WE/wDyMOo9qSHotLu3V4Zdy7toLvRRs=
Subject key identifier: 0B:3F:D5:65:D7:B2:A2:74:A1:14:8F:2A:12:7F:FA:1B:D3:01:CA:18
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 018CC86F86C68F8CFFE5B8510664AD1969D7
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/Cz_VZdeyonShFI8qEn_6G9MByhg.roa
Signing time: Tue 02 Jan 2024 04:30:01 +0000
ROA not before: Tue 02 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 157.84.32.0/23 maxlen: 23
157.84.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:86:c6:8f:8c:ff:e5:b8:51:06:64:ad:19:69:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jan 2 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b3fd565d7b2a274a1148f2a127ffa1bd301ca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:66:59:7d:84:f9:61:ff:a4:6b:3e:7e:66:
6a:9f:8d:41:1a:f8:33:04:87:a5:fa:0d:de:6e:07:
f6:82:3b:6f:93:56:1c:0a:19:ef:5a:33:88:25:a0:
46:20:2b:ef:6f:f6:50:80:3a:af:aa:92:ab:52:db:
cf:61:fd:d3:7e:db:c6:26:db:3f:8a:fe:1d:f9:de:
82:9e:12:04:eb:28:67:db:7b:78:d2:41:cb:87:93:
10:e9:3b:23:0b:7f:8c:9c:a2:01:1b:36:72:c0:ca:
2a:df:45:f0:5a:4f:58:ab:4b:d0:3b:52:d8:62:e7:
79:20:80:22:ab:2d:21:cc:7c:cc:48:0d:cb:68:c3:
75:50:4d:ae:d6:7b:ce:34:93:af:fb:ee:84:27:6e:
d1:ee:0c:c3:09:4a:a3:d0:d0:c5:0c:a9:06:cc:97:
f7:3f:38:d0:2b:18:fe:e7:a7:92:fd:78:9b:59:2e:
ad:85:e9:30:7e:11:04:3c:b9:5b:89:7a:eb:6a:61:
d6:32:95:99:36:8f:c0:e0:50:53:f0:43:de:83:73:
29:6a:a0:a7:5a:55:2c:83:26:97:76:06:cb:96:57:
d8:66:e3:c1:d7:10:bb:52:9e:d2:66:03:12:d9:1f:
3a:b3:70:c2:c1:d2:88:79:1e:70:8f:5d:54:40:16:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:D5:65:D7:B2:A2:74:A1:14:8F:2A:12:7F:FA:1B:D3:01:CA:18
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/Cz_VZdeyonShFI8qEn_6G9MByhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.84.32.0/23
157.84.40.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:45:dd:61:43:b2:b8:8b:58:3c:0e:b7:ee:a0:e0:1d:c9:d9:
33:90:8e:af:f0:cb:de:d3:e7:43:57:88:13:ca:df:fa:b2:9c:
8b:bf:31:b9:f4:30:bb:84:36:a9:b5:47:10:99:73:72:b1:a9:
c1:b3:e2:05:19:18:21:81:f5:13:5e:4e:00:d9:f1:29:c8:31:
e3:af:b8:75:49:3d:c7:55:b9:5f:6f:3e:c3:41:c9:5c:af:cd:
69:3a:bb:c1:03:a1:e7:9c:bc:e1:a7:bd:5b:7e:85:c5:44:e4:
71:61:e6:b4:2c:bf:18:cb:34:ac:1b:6d:07:d7:6a:1b:3d:67:
40:b8:94:60:ba:ca:c2:e6:73:fd:82:da:bb:5d:c1:0b:4a:0a:
23:ba:5d:3f:63:06:23:23:91:c2:b8:32:81:75:07:e8:bb:fb:
dd:cb:b9:8b:40:18:c2:19:f8:a1:a4:05:1f:d7:6d:33:6b:09:
17:57:db:c0:cc:d6:64:af:84:64:48:52:10:f9:7f:99:83:13:
bf:21:54:e6:41:e5:33:3b:20:83:9f:1f:a7:47:cc:0e:46:80:
91:ab:d6:0b:cc:9a:7b:29:c1:7b:48:19:43:70:50:c1:40:ec:
3b:0e:bc:3b:5c:3d:36:3b:d3:16:41:87:71:98:ff:1a:e7:00:
d1:30:1e:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIb4bGj4z/5bhRBmStGWnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz
ZjMxMmEwHhcNMjQwMTAyMDQzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjNmZDU2NWQ3YjJhMjc0YTExNDhmMmExMjdmZmExYmQzMDFjYTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXBmWX2E+WH/pGs+fmZqn41BGvgz
BIel+g3ebgf2gjtvk1YcChnvWjOIJaBGICvvb/ZQgDqvqpKrUtvPYf3TftvGJts/
iv4d+d6CnhIE6yhn23t40kHLh5MQ6TsjC3+MnKIBGzZywMoq30XwWk9Yq0vQO1LY
Yud5IIAiqy0hzHzMSA3LaMN1UE2u1nvONJOv++6EJ27R7gzDCUqj0NDFDKkGzJf3
PzjQKxj+56eS/XibWS6thekwfhEEPLlbiXrramHWMpWZNo/A4FBT8EPeg3MpaqCn
WlUsgyaXdgbLllfYZuPB1xC7Up7SZgMS2R86s3DCwdKIeR5wj11UQBasnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAs/1WXXsqJ0oRSPKhJ/+hvTAcoYMB8GA1UdIwQY
MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt
YTk5YTIxMDE1OTM3LzEvQ3pfVlpkZXlvblNoRkk4cUVuXzZHOU1CeWhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3
LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnVQgAwQB
nVQoMA0GCSqGSIb3DQEBCwUAA4IBAQBvRd1hQ7K4i1g8DrfuoOAdydkzkI6v8Mve
0+dDV4gTyt/6spyLvzG59DC7hDaptUcQmXNysanBs+IFGRghgfUTXk4A2fEpyDHj
r7h1ST3HVblfbz7DQclcr81pOrvBA6HnnLzhp71bfoXFRORxYea0LL8YyzSsG20H
12obPWdAuJRgusrC5nP9gtq7XcELSgojul0/YwYjI5HCuDKBdQfou/vdy7mLQBjC
GfihpAUf120zawkXV9vAzNZkr4RkSFIQ+X+ZgxO/IVTmQeUzOyCDnx+nR8wORoCR
q9YLzJp7KcF7SBlDcFDBQOw7Drw7XD02O9MWQYdxmP8a5wDRMB5y
-----END CERTIFICATE-----
Generated at Thu May 2 16:14:45 2024 by rpki-client on console-fra.rpki-client.org