Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/OuJ39dISuBCXX3uZLU5z10MlJnI.roa
File: OuJ39dISuBCXX3uZLU5z10MlJnI.roa (raw, json)
Hash identifier: sahJofONijpQQX5dFIE5a9jnn0XmZZEoS4JQh7QQTEY=
Subject key identifier: 3A:E2:77:F5:D2:12:B8:10:97:5F:7B:99:2D:4E:73:D7:43:25:26:72
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0192052AE04584B1F0383A020921F59EB95E
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/OuJ39dISuBCXX3uZLU5z10MlJnI.roa
Signing time: Wed 18 Sep 2024 12:45:48 +0000
ROA not before: Wed 18 Sep 2024 12:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 62.100.192.0/22 maxlen: 22
62.100.196.0/22 maxlen: 24
62.100.200.0/22 maxlen: 24
62.100.212.0/22 maxlen: 22
62.100.220.0/22 maxlen: 22
93.188.68.0/22 maxlen: 22
157.97.145.0/24 maxlen: 24
185.71.220.0/23 maxlen: 24
185.92.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:2a:e0:45:84:b1:f0:38:3a:02:09:21:f5:9e:b9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Sep 18 12:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ae277f5d212b810975f7b992d4e73d743252672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:d3:c7:78:42:3e:ec:04:31:96:11:94:1d:
3c:9d:6f:f3:35:f0:f2:c6:79:7d:a6:63:3a:4f:47:
2f:d8:bd:90:4a:8e:60:a3:3d:bc:ed:f7:6a:41:a8:
08:23:3f:b5:ff:1d:32:93:4b:ab:2a:c9:cb:d3:12:
33:2b:f4:a6:64:ed:63:9b:34:42:bc:b9:90:02:6c:
2b:3e:ef:85:a6:15:c5:92:69:da:44:38:90:02:d7:
ba:1c:ea:45:35:d9:7f:f1:23:c3:28:5b:c0:2e:98:
40:d0:61:78:70:c0:43:b3:3c:41:3e:8c:cd:3e:33:
8a:6d:fd:95:77:13:e1:f6:c6:c2:d3:8b:64:2e:61:
ab:5d:4a:5f:d3:30:9c:3b:1d:d6:fa:d1:92:5c:06:
1a:3c:9b:cb:06:b9:36:8c:ab:6a:0d:90:8e:1d:26:
b9:ff:f6:83:67:0c:51:be:64:4d:21:ee:3d:ea:ab:
5e:99:1f:b8:ca:c1:03:c5:d1:30:8c:cf:d9:65:cd:
ba:17:81:60:a4:3f:94:db:98:38:5b:ff:c8:73:e4:
30:92:7a:2c:9f:c1:d8:1b:e2:65:2c:2b:d4:55:49:
4b:76:68:c0:10:08:84:6a:4b:4a:58:0d:40:25:b7:
3a:66:21:1c:52:2a:2e:82:48:ad:8f:29:1e:98:24:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:77:F5:D2:12:B8:10:97:5F:7B:99:2D:4E:73:D7:43:25:26:72
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/OuJ39dISuBCXX3uZLU5z10MlJnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.192.0-62.100.203.255
62.100.212.0/22
62.100.220.0/22
93.188.68.0/22
157.97.145.0/24
185.71.220.0/23
185.92.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:13:00:ee:69:84:16:4d:96:b5:d1:d1:29:47:e0:1e:cf:90:
91:f2:cf:0e:c3:af:5f:fa:15:d1:5a:eb:21:b2:72:f2:6f:a6:
75:6f:a6:93:c5:54:fa:f7:45:b2:11:3f:54:0c:83:f9:2c:49:
01:5f:03:46:cd:9e:7f:b7:c5:61:08:c9:16:24:d9:4a:70:5f:
1c:54:c2:25:58:3d:5a:6a:38:95:90:5e:4c:f5:8e:e3:60:4d:
2e:75:e6:fa:0d:b7:8a:14:81:f7:48:d8:59:59:66:2d:98:8c:
91:b0:57:88:a9:a7:d3:0f:ee:b3:aa:f5:d2:2c:1f:93:0f:06:
e4:d6:4f:af:c7:7b:4c:e4:11:ac:37:f9:cb:cc:53:f5:6a:e7:
7b:fd:c2:00:8a:a9:50:05:02:19:0f:66:2f:d1:f5:2f:14:7b:
8a:c8:55:85:dd:9d:76:b7:6b:6b:7e:0a:73:27:bf:50:d6:b5:
c0:bd:4f:fd:d5:35:b7:09:9b:d1:ef:8d:6e:b2:b4:c5:6a:c3:
96:50:5c:c4:a2:28:e3:f5:75:d9:e0:b3:44:40:2a:67:a4:17:
12:e1:ff:81:df:2b:6a:83:02:52:fb:af:0c:e4:db:cd:6c:c3:
c0:ca:85:79:79:7f:cc:17:04:3f:b8:b3:85:c8:91:be:81:01:
2d:9f:29:18
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZIFKuBFhLHwODoCCSH1nrleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjQwOTE4MTI0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWUyNzdmNWQyMTJiODEwOTc1ZjdiOTkyZDRlNzNkNzQzMjUyNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ebTx3hCPuwEMZYRlB08nW/zNfDy
xnl9pmM6T0cv2L2QSo5goz287fdqQagIIz+1/x0yk0urKsnL0xIzK/SmZO1jmzRC
vLmQAmwrPu+FphXFkmnaRDiQAte6HOpFNdl/8SPDKFvALphA0GF4cMBDszxBPozN
PjOKbf2VdxPh9sbC04tkLmGrXUpf0zCcOx3W+tGSXAYaPJvLBrk2jKtqDZCOHSa5
//aDZwxRvmRNIe496qtemR+4ysEDxdEwjM/ZZc26F4FgpD+U25g4W//Ic+Qwknos
n8HYG+JlLCvUVUlLdmjAEAiEaktKWA1AJbc6ZiEcUiougkitjykemCRyqwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFDrid/XSErgQl197mS1Oc9dDJSZyMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvT3VKMzlkSVN1QkNYWDN1WkxVNXoxME1sSm5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBAY+ZMAD
BAI+ZMgDBAI+ZNQDBAI+ZNwDBAJdvEQDBACdYZEDBAG5R9wDBAC5XBswDQYJKoZI
hvcNAQELBQADggEBAD8TAO5phBZNlrXR0SlH4B7PkJHyzw7Dr1/6FdFa6yGycvJv
pnVvppPFVPr3RbIRP1QMg/ksSQFfA0bNnn+3xWEIyRYk2UpwXxxUwiVYPVpqOJWQ
Xkz1juNgTS515voNt4oUgfdI2FlZZi2YjJGwV4ipp9MP7rOq9dIsH5MPBuTWT6/H
e0zkEaw3+cvMU/Vq53v9wgCKqVAFAhkPZi/R9S8Ue4rIVYXdnXa3a2t+CnMnv1DW
tcC9T/3VNbcJm9HvjW6ytMVqw5ZQXMSiKOP1ddngs0RAKmekFxLh/4HfK2qDAlL7
rwzk281sw8DKhXl5f8wXBD+4s4XIkb6BAS2fKRg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:49 2024 by rpki-client on console-ams.rpki-client.org