Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/CXj-BfbIV8l2KzZdZZeG6JKE8GU.roa
File: CXj-BfbIV8l2KzZdZZeG6JKE8GU.roa (raw, json)
Hash identifier: IeHjPR9/P3K7Xnqo4wLg733cbw0P74RsAEctJ7kC1c8=
Subject key identifier: 09:78:FE:05:F6:C8:57:C9:76:2B:36:5D:65:97:86:E8:92:84:F0:65
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0192C367DE591873DC44990A1703D284148B
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/CXj-BfbIV8l2KzZdZZeG6JKE8GU.roa
Signing time: Fri 25 Oct 2024 11:20:17 +0000
ROA not before: Fri 25 Oct 2024 11:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 62.244.237.0/24 maxlen: 24
195.87.92.0/24 maxlen: 24
212.133.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:67:de:59:18:73:dc:44:99:0a:17:03:d2:84:14:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Oct 25 11:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0978fe05f6c857c9762b365d659786e89284f065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:ec:81:49:fd:99:a3:65:72:a7:fa:3d:9a:
79:1f:1d:1d:4e:14:0c:34:e0:6f:2a:67:8f:a9:25:
60:56:25:f6:13:32:52:8b:d5:b0:08:04:17:3b:69:
79:63:58:da:78:3e:5d:ac:5d:d8:55:33:94:59:44:
89:d7:a9:cc:9f:29:a1:5f:c3:9e:cd:69:9c:0e:d1:
cb:18:49:a4:cf:20:42:b3:86:7c:6e:38:77:54:ff:
91:42:79:6a:a1:57:a7:18:75:74:b6:0f:f5:25:6d:
93:a1:46:64:ff:af:dd:7a:ec:0d:5a:c3:49:58:6f:
73:d8:40:49:c6:1f:95:8a:4d:b5:c9:f4:03:d6:fa:
42:0f:48:b2:c0:b8:70:2c:a5:02:c0:e8:fc:df:c4:
91:98:98:b6:fa:a2:91:13:ab:e6:a3:ca:96:18:d7:
47:fc:50:96:e1:91:83:b9:e8:fd:e8:2a:50:71:4c:
6b:a4:09:a3:13:e8:86:91:27:b8:da:82:42:a8:0c:
6e:e3:4b:58:73:b5:d5:0c:84:77:b7:d9:24:a3:0e:
3f:89:79:5d:86:ba:a0:d1:34:b2:f1:84:cf:24:70:
c3:49:9c:ef:63:14:0e:3c:96:0e:e8:9a:91:9a:db:
ae:42:7a:92:8f:c4:66:37:9c:53:a8:6a:80:d5:7e:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:FE:05:F6:C8:57:C9:76:2B:36:5D:65:97:86:E8:92:84:F0:65
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/CXj-BfbIV8l2KzZdZZeG6JKE8GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.237.0/24
195.87.92.0/24
212.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9f:22:68:ae:6d:3f:ff:d5:12:29:9d:e2:aa:c2:30:dd:6a:
4e:cf:14:53:b4:f9:a2:3a:cf:5a:35:f9:8b:16:88:e6:16:e3:
a8:90:73:fe:f1:24:98:ae:36:3f:0e:87:83:07:84:2a:ac:d9:
33:5a:87:bb:d3:59:b9:a3:06:06:d9:e7:6f:eb:e3:71:e7:43:
5b:64:62:d7:69:ca:c6:0f:4f:23:1a:fc:2e:ae:f5:0a:65:37:
1a:ca:23:2f:35:3c:4b:62:cf:4d:fe:d0:96:a1:d6:ae:69:d2:
7f:08:c9:73:f7:92:a7:68:8b:4a:ff:25:c3:91:f1:52:cd:d1:
4a:c2:f8:62:aa:e4:be:2d:00:71:e4:d1:aa:86:68:93:b2:7c:
2c:83:8e:80:84:fa:e3:34:94:af:73:ad:e6:e6:28:3e:56:91:
40:4a:38:a1:18:6b:e1:8b:4d:7f:f6:3f:b4:05:84:ed:2c:5d:
8c:d3:82:d7:ab:dd:2c:b7:5c:48:78:10:cf:d4:e5:4a:d4:13:
f8:be:56:9b:50:39:ea:54:35:03:d1:32:18:e9:be:d8:fc:25:
60:f4:5f:91:e6:7f:59:7e:2b:0f:2e:b2:4f:73:8b:fa:8c:85:
f3:fe:8a:58:d5:41:c9:e7:42:22:88:1a:24:78:83:b5:b0:2c:
67:47:88:7f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZLDZ95ZGHPcRJkKFwPShBSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjQxMDI1MTEyMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTc4ZmUwNWY2Yzg1N2M5NzYyYjM2NWQ2NTk3ODZlODkyODRmMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsnsgUn9maNlcqf6PZp5Hx0dThQM
NOBvKmePqSVgViX2EzJSi9WwCAQXO2l5Y1jaeD5drF3YVTOUWUSJ16nMnymhX8Oe
zWmcDtHLGEmkzyBCs4Z8bjh3VP+RQnlqoVenGHV0tg/1JW2ToUZk/6/deuwNWsNJ
WG9z2EBJxh+Vik21yfQD1vpCD0iywLhwLKUCwOj838SRmJi2+qKRE6vmo8qWGNdH
/FCW4ZGDuej96CpQcUxrpAmjE+iGkSe42oJCqAxu40tYc7XVDIR3t9kkow4/iXld
hrqg0TSy8YTPJHDDSZzvYxQOPJYO6JqRmtuuQnqSj8RmN5xTqGqA1X5WGQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAl4/gX2yFfJdis2XWWXhuiShPBlMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvQ1hqLUJmYklWOGwyS3paZFpaZUc2SktFOEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPvTtAwQA
w1dcAwQA1IWkMA0GCSqGSIb3DQEBCwUAA4IBAQA4nyJorm0//9USKZ3iqsIw3WpO
zxRTtPmiOs9aNfmLFojmFuOokHP+8SSYrjY/DoeDB4QqrNkzWoe701m5owYG2edv
6+Nx50NbZGLXacrGD08jGvwurvUKZTcayiMvNTxLYs9N/tCWodauadJ/CMlz95Kn
aItK/yXDkfFSzdFKwvhiquS+LQBx5NGqhmiTsnwsg46AhPrjNJSvc63m5ig+VpFA
SjihGGvhi01/9j+0BYTtLF2M04LXq90st1xIeBDP1OVK1BP4vlabUDnqVDUD0TIY
6b7Y/CVg9F+R5n9ZfisPLrJPc4v6jIXz/opY1UHJ50IiiBokeIO1sCxnR4h/
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:42 2024 by rpki-client on console-ams.rpki-client.org