Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/314IcnjJxSSRp05ARlAcHYHYze8.roa
File: 314IcnjJxSSRp05ARlAcHYHYze8.roa (raw, json)
Hash identifier: lUR8eWUSYt1VTqbRvukOau+NrmjCOGz34IIMt4jdURM=
Subject key identifier: DF:5E:08:72:78:C9:C5:24:91:A7:4E:40:46:50:1C:1D:81:D8:CD:EF
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 018CC3B723E7510FB7DE778A0DAFCBA0576B
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/314IcnjJxSSRp05ARlAcHYHYze8.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15541
IP address blocks: 62.121.128.0/24 maxlen: 24
62.121.130.0/24 maxlen: 24
62.121.129.0/24 maxlen: 24
62.121.131.0/24 maxlen: 24
62.121.132.0/24 maxlen: 24
62.121.135.0/24 maxlen: 24
62.121.136.0/24 maxlen: 24
62.121.138.0/24 maxlen: 24
62.121.133.0/24 maxlen: 24
62.121.142.0/24 maxlen: 24
62.121.141.0/24 maxlen: 24
62.121.143.0/24 maxlen: 24
62.121.145.0/24 maxlen: 24
62.121.144.0/24 maxlen: 24
62.121.148.0/24 maxlen: 24
62.121.150.0/24 maxlen: 24
62.121.152.0/24 maxlen: 24
62.121.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:23:e7:51:0f:b7:de:77:8a:0d:af:cb:a0:57:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5e087278c9c52491a74e4046501c1d81d8cdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:4d:b6:0c:05:14:23:2a:7f:92:65:42:28:
97:f2:33:90:a2:7f:f2:76:69:0b:6d:48:bb:e6:a6:
54:78:22:46:ef:79:0a:17:3d:b1:06:6f:6e:dc:3d:
12:9d:cb:fb:41:a0:e1:65:08:99:15:47:d2:eb:96:
66:c4:db:a3:0a:20:60:7e:66:96:39:ac:f9:92:e5:
4e:08:a9:30:ab:3f:7e:1e:53:5e:34:6c:18:ef:41:
92:8b:10:77:92:41:a6:1e:db:74:fc:0b:21:e7:29:
9e:eb:ea:9b:d1:9a:4e:23:0b:1f:5e:3a:4f:80:18:
dd:05:af:39:17:70:cf:70:86:33:a0:f2:02:ec:4e:
35:39:1e:6e:8e:43:b4:59:69:83:00:1b:5e:30:9e:
1c:16:c5:11:d1:c7:c6:0d:71:0c:02:27:bc:33:14:
1f:aa:fd:48:61:a3:eb:08:6b:f1:12:47:37:89:5e:
e3:0e:83:2f:a6:80:e6:49:8a:0b:06:f2:56:ac:45:
29:21:a6:6f:d2:38:a0:40:a7:78:52:65:fc:eb:40:
51:bf:c6:be:4a:64:54:c5:6d:31:18:fd:82:d4:e3:
c6:64:05:9d:c1:dc:6d:40:08:45:72:41:09:3f:25:
1b:e9:3e:d5:50:10:66:9c:23:60:9c:5b:54:37:d5:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:08:72:78:C9:C5:24:91:A7:4E:40:46:50:1C:1D:81:D8:CD:EF
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/314IcnjJxSSRp05ARlAcHYHYze8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.121.128.0-62.121.133.255
62.121.135.0-62.121.136.255
62.121.138.0/24
62.121.141.0-62.121.146.255
62.121.148.0/24
62.121.150.0/24
62.121.152.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5c:e1:c6:ef:01:b1:6b:1b:82:32:3a:2e:0f:72:67:e4:a3:
9c:c1:a2:2e:df:73:90:a1:74:b1:96:0d:e0:a6:d1:02:7d:dc:
c4:d6:17:7b:c1:fc:f5:02:17:2e:88:63:e4:e5:97:65:f4:ff:
59:61:5f:4e:81:56:a4:1e:19:7d:71:eb:6e:24:e4:20:ea:cb:
81:34:16:ba:b3:74:28:02:71:dd:da:a0:3d:ca:91:0b:51:cb:
13:1d:3c:96:63:29:13:87:b6:f0:99:f3:bc:7a:08:82:b8:51:
37:7b:35:a5:5b:fe:60:a9:bf:65:fe:4a:6f:0a:f6:00:0b:c2:
21:e3:45:06:97:80:28:c4:13:46:54:74:91:1a:84:bd:97:1f:
9a:3a:b3:8f:11:da:b1:71:9b:c3:c3:81:f2:88:19:e4:ff:3a:
ec:43:0c:eb:18:21:26:0a:ee:d6:f7:6b:3a:9d:12:44:ab:ee:
71:cd:5e:d3:3c:14:55:54:b8:84:96:a6:dc:38:7a:9d:1b:46:
4c:bf:2f:eb:fe:90:bf:d3:73:b3:ba:81:67:4b:4a:c6:22:6b:
6b:f2:90:27:78:61:50:51:2f:d9:0b:ac:b1:5b:7a:a7:c1:c0:
b6:c2:56:0e:c5:e9:84:97:53:a9:c5:bd:2b:9e:5d:79:f3:13:
97:22:0e:9a
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYzDtyPnUQ+33neKDa/LoFdrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx
MzRiMjQwHhcNMjQwMTAxMDYzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjVlMDg3Mjc4YzljNTI0OTFhNzRlNDA0NjUwMWMxZDgxZDhjZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfhNtgwFFCMqf5JlQiiX8jOQon/y
dmkLbUi75qZUeCJG73kKFz2xBm9u3D0Sncv7QaDhZQiZFUfS65ZmxNujCiBgfmaW
Oaz5kuVOCKkwqz9+HlNeNGwY70GSixB3kkGmHtt0/Ash5yme6+qb0ZpOIwsfXjpP
gBjdBa85F3DPcIYzoPIC7E41OR5ujkO0WWmDABteMJ4cFsUR0cfGDXEMAie8MxQf
qv1IYaPrCGvxEkc3iV7jDoMvpoDmSYoLBvJWrEUpIaZv0jigQKd4UmX860BRv8a+
SmRUxW0xGP2C1OPGZAWdwdxtQAhFckEJPyUb6T7VUBBmnCNgnFtUN9X0pQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFN9eCHJ4ycUkkadOQEZQHB2B2M3vMB8GA1UdIwQY
MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt
YWJkNGM1YzliMzc0LzEvMzE0SWNuakp4U1NScDA1QVJsQWNIWUhZemU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0
LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBAc+eYAD
BAE+eYQwDAMEAD55hwMEAD55iAMEAD55ijAMAwQAPnmNAwQAPnmSAwQAPnmUAwQA
PnmWAwQAPnmYMA0GCSqGSIb3DQEBCwUAA4IBAQCvXOHG7wGxaxuCMjouD3Jn5KOc
waIu33OQoXSxlg3gptECfdzE1hd7wfz1AhcuiGPk5Zdl9P9ZYV9OgVakHhl9cetu
JOQg6suBNBa6s3QoAnHd2qA9ypELUcsTHTyWYykTh7bwmfO8egiCuFE3ezWlW/5g
qb9l/kpvCvYAC8Ih40UGl4AoxBNGVHSRGoS9lx+aOrOPEdqxcZvDw4HyiBnk/zrs
QwzrGCEmCu7W92s6nRJEq+5xzV7TPBRVVLiElqbcOHqdG0ZMvy/r/pC/03OzuoFn
S0rGImtr8pAneGFQUS/ZC6yxW3qnwcC2wlYOxemEl1Opxb0rnl158xOXIg6a
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:28 2024 by rpki-client on console-ams.rpki-client.org