Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/zz9-9ofcLQyKlMpMkm9Sik4Oai0.roa
File: zz9-9ofcLQyKlMpMkm9Sik4Oai0.roa (raw, json)
Hash identifier: JCTaFrL92th68cGfiUwku9To77tO9BmD38bZAQKFzQw=
Subject key identifier: CF:3F:7E:F6:87:DC:2D:0C:8A:94:CA:4C:92:6F:52:8A:4E:0E:6A:2D
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 018CC5DCC9DAED33EB8166F8EAC98D79260A
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/zz9-9ofcLQyKlMpMkm9Sik4Oai0.roa
Signing time: Mon 01 Jan 2024 16:30:30 +0000
ROA not before: Mon 01 Jan 2024 16:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210007
IP address blocks: 195.69.252.0/23 maxlen: 23
195.69.252.0/22 maxlen: 22
195.69.254.0/23 maxlen: 23
195.69.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c9:da:ed:33:eb:81:66:f8:ea:c9:8d:79:26:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Jan 1 16:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf3f7ef687dc2d0c8a94ca4c926f528a4e0e6a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:df:6b:eb:84:6e:c0:bd:f5:1e:d9:ef:61:
fd:94:12:22:b0:d7:3b:e1:bd:4a:b1:d3:84:4c:14:
80:b0:f2:2e:53:34:a4:f7:e2:c8:41:b9:30:0b:c3:
ce:d4:70:8c:a0:49:ee:34:cc:bb:98:32:ae:73:00:
ba:20:81:7b:74:bb:2b:93:ff:02:59:a0:2f:f9:68:
50:a1:53:41:5e:70:4e:4e:f5:08:21:ae:6e:d1:2c:
97:d0:8d:d0:8c:18:b7:ff:6f:cd:23:1d:db:c4:76:
9b:36:4c:11:af:30:5b:ab:78:6f:b0:c1:8f:31:ec:
b3:cd:c1:b7:a1:d9:59:21:ac:a6:91:de:25:60:18:
41:f6:81:98:23:be:8c:2a:2a:4f:0a:61:61:32:49:
59:ba:99:87:5c:67:b5:5f:fc:11:c6:f4:26:62:9a:
ad:7e:aa:5a:65:a6:fc:95:3b:0a:b6:47:a7:8d:e9:
14:2f:d6:d1:27:52:cb:e4:a9:5a:1f:6e:b2:a8:1a:
fc:27:fe:7d:54:2c:c3:5b:da:ff:02:2d:35:1d:8c:
1f:8c:f9:8f:0a:9d:42:ab:a1:02:cd:5f:65:f5:43:
ed:b1:24:cd:4f:d8:b0:ce:9b:79:54:c3:1d:aa:59:
6e:ac:d5:cb:78:48:6f:d4:f0:f4:f6:66:c6:a1:10:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:7E:F6:87:DC:2D:0C:8A:94:CA:4C:92:6F:52:8A:4E:0E:6A:2D
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/zz9-9ofcLQyKlMpMkm9Sik4Oai0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.252.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:f2:1d:61:f9:66:2f:8d:22:5e:5b:cc:f0:e0:be:21:12:92:
24:63:fd:5e:8a:96:64:71:29:60:b2:ce:1c:93:8c:8c:9b:cd:
00:3d:b7:0e:a4:8b:40:4a:97:08:06:98:06:e7:17:4c:3a:ca:
be:59:d1:9c:f7:fa:56:60:89:be:5b:85:1f:f7:fb:ce:a1:a5:
eb:d3:bc:1d:0d:d4:f8:4d:0d:66:61:f5:17:2f:60:94:88:02:
6a:33:0d:76:62:13:de:ef:27:bb:40:8a:e7:ca:d8:9f:b0:c3:
bb:84:ff:02:e5:5d:82:29:40:36:e3:84:01:6f:2c:c3:68:e4:
1f:24:74:b5:e9:49:65:7b:54:c1:a0:8b:81:05:30:cc:36:9d:
a7:99:dd:fb:b1:1a:a0:16:38:77:ac:40:ef:52:b0:21:88:89:
25:a9:c5:19:fa:bf:ba:7b:ed:ab:75:79:a9:aa:6f:ff:b7:05:
8e:81:e4:f1:e0:40:0b:13:6a:c6:f0:a5:56:9b:ed:1b:8a:b0:
84:36:c6:00:4f:ba:53:91:94:6a:69:68:d3:2a:a4:45:01:32:
08:ca:19:35:2b:8d:b1:42:89:5d:f8:97:bf:ef:37:a6:91:58:
ab:7a:7f:2b:ee:6a:3d:a6:03:b0:df:0d:1e:ff:51:2f:bc:11:
21:b2:a5:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3Mna7TPrgWb46smNeSYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmU0NzQ0NzMxZGE0NGYwOGZhNWU5MmM1ZWIyYTQ3NGQ0
OWE4OTIwHhcNMjQwMTAxMTYzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjNmN2VmNjg3ZGMyZDBjOGE5NGNhNGM5MjZmNTI4YTRlMGU2YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmHfa+uEbsC99R7Z72H9lBIisNc7
4b1KsdOETBSAsPIuUzSk9+LIQbkwC8PO1HCMoEnuNMy7mDKucwC6IIF7dLsrk/8C
WaAv+WhQoVNBXnBOTvUIIa5u0SyX0I3QjBi3/2/NIx3bxHabNkwRrzBbq3hvsMGP
MeyzzcG3odlZIaymkd4lYBhB9oGYI76MKipPCmFhMklZupmHXGe1X/wRxvQmYpqt
fqpaZab8lTsKtkenjekUL9bRJ1LL5KlaH26yqBr8J/59VCzDW9r/Ai01HYwfjPmP
Cp1Cq6ECzV9l9UPtsSTNT9iwzpt5VMMdqllurNXLeEhv1PD09mbGoRDAaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8/fvaH3C0MipTKTJJvUopODmotMB8GA1UdIwQY
MBaAFDVuR0RzHaRPCPpeksXrKkdNSaiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUt
MGM1MDFkNjg5NzVhLzEveno5LTlvZmNMUXlLbE1wTWttOVNpazRPYWkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUtMGM1MDFkNjg5NzVh
LzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw0X8MA0G
CSqGSIb3DQEBCwUAA4IBAQDi8h1h+WYvjSJeW8zw4L4hEpIkY/1eipZkcSlgss4c
k4yMm80APbcOpItASpcIBpgG5xdMOsq+WdGc9/pWYIm+W4Uf9/vOoaXr07wdDdT4
TQ1mYfUXL2CUiAJqMw12YhPe7ye7QIrnytifsMO7hP8C5V2CKUA244QBbyzDaOQf
JHS16Ulle1TBoIuBBTDMNp2nmd37sRqgFjh3rEDvUrAhiIklqcUZ+r+6e+2rdXmp
qm//twWOgeTx4EALE2rG8KVWm+0birCENsYAT7pTkZRqaWjTKqRFATIIyhk1K42x
Qold+Je/7zemkViren8r7mo9pgOw3w0e/1EvvBEhsqWY
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:41:45 2024 by rpki-client on console-ams.rpki-client.org