Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/kTUEAWMp1gTCCcWjTzQAwttndPc.roa
File: kTUEAWMp1gTCCcWjTzQAwttndPc.roa (raw, json)
Hash identifier: on6lGaldRMbBmLtXikwnmsodKEuUDfHXj3g4c87+P0w=
Subject key identifier: 91:35:04:01:63:29:D6:04:C2:09:C5:A3:4F:34:00:C2:DB:67:74:F7
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 0192DC62D46A24421A11DDF8B66AD1261A89
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/kTUEAWMp1gTCCcWjTzQAwttndPc.roa
Signing time: Wed 30 Oct 2024 07:45:17 +0000
ROA not before: Wed 30 Oct 2024 07:45:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41008
IP address blocks: 62.233.0.0/20 maxlen: 24
109.233.24.0/21 maxlen: 24
193.58.8.0/21 maxlen: 24
193.201.162.0/24 maxlen: 24
212.113.64.0/19 maxlen: 24
2a02:2398::/29 maxlen: 48
2a02:239c:0:24::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:62:d4:6a:24:42:1a:11:dd:f8:b6:6a:d1:26:1a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Oct 30 07:45:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=913504016329d604c209c5a34f3400c2db6774f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:bb:76:97:f5:09:b8:54:7b:f3:10:43:05:
ee:72:18:b6:13:a2:07:66:2b:59:e3:c7:9b:52:f9:
b9:a8:5f:a4:c1:a6:6f:30:ee:55:29:71:54:64:27:
74:8d:e6:bb:91:92:1c:cf:71:e6:39:ce:50:30:54:
fe:69:2e:65:b6:71:8b:a3:1d:c8:2a:b7:f4:e6:e0:
f9:30:d0:5a:11:f7:aa:d4:b4:5a:33:f6:4f:ed:f4:
7f:17:88:fe:38:79:6e:db:c8:bf:da:0d:bc:82:ed:
c0:04:5f:cc:3e:88:38:d6:1e:67:5a:0f:0b:1a:b4:
71:73:a6:26:f9:1f:bf:7f:03:88:7e:93:9a:39:f0:
95:85:52:8c:1a:25:3c:84:be:97:48:f0:e7:7e:72:
fa:de:3b:41:af:25:0a:57:27:2f:e7:b8:73:c5:0d:
e4:89:46:81:39:d5:b0:60:62:39:fe:b8:89:7e:9b:
d2:8a:0d:ed:7e:ae:46:f0:50:27:e4:13:b6:93:75:
4e:75:05:f4:32:26:31:a8:0f:20:82:9f:06:4c:94:
f3:4c:80:f0:3c:66:59:a4:6b:75:5a:fd:1f:76:0d:
78:c9:14:bf:99:c2:be:44:8d:5d:2a:cc:f4:28:f8:
01:81:07:b8:63:cf:2a:81:53:6e:9e:cb:d2:7e:3d:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:35:04:01:63:29:D6:04:C2:09:C5:A3:4F:34:00:C2:DB:67:74:F7
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/kTUEAWMp1gTCCcWjTzQAwttndPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.0.0/20
109.233.24.0/21
193.58.8.0/21
193.201.162.0/24
212.113.64.0/19
IPv6:
2a02:2398::/29
Signature Algorithm: sha256WithRSAEncryption
50:2c:80:6e:4c:de:c1:c1:17:a6:e9:f3:76:e7:bd:60:ae:f2:
d5:62:f6:a8:fb:0d:ac:3f:12:ab:6c:b0:0a:24:87:70:41:e9:
0e:c2:68:9c:e4:0e:50:6f:82:41:44:88:59:03:70:22:42:c9:
64:1a:72:e2:09:1d:56:6f:4e:01:e9:50:83:62:dc:75:0e:3e:
49:f6:5b:65:9c:18:a9:f9:9e:ff:13:a4:68:c3:24:ba:42:1f:
25:ad:aa:41:2a:bd:7c:49:93:76:b1:f5:84:46:7b:96:55:10:
69:01:93:ce:50:1d:39:b2:b9:89:11:7e:58:78:69:76:bf:4f:
6b:bc:a5:b2:60:4a:7b:2a:c3:63:ff:da:83:c3:5c:e3:00:42:
cc:4d:8d:b4:6d:23:5c:3f:82:24:88:63:35:0b:d4:6b:94:37:
c7:df:ad:07:99:db:d0:29:c4:6e:75:d9:40:a1:e3:0e:85:e5:
8b:9a:f7:46:7f:9c:24:71:d1:af:b3:df:25:c4:ce:5f:de:22:
c3:da:cc:b1:d7:e1:f8:24:89:26:29:2b:41:77:22:87:94:d9:
05:34:e9:e7:59:1d:71:16:a7:6e:c8:55:cb:e2:7a:63:b2:ec:
ab:1b:9c:ef:b5:df:64:c4:32:ef:ee:4e:b2:e5:ee:80:04:17:
20:da:c9:f5
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZLcYtRqJEIaEd34tmrRJhqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzc1MjIzMjFjMjNkMTY5ZWQzMzJmZjQ5ODc5Y2NjMjQ1
MTcyZGIwHhcNMjQxMDMwMDc0NTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTM1MDQwMTYzMjlkNjA0YzIwOWM1YTM0ZjM0MDBjMmRiNjc3NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBm7dpf1CbhUe/MQQwXuchi2E6IH
ZitZ48ebUvm5qF+kwaZvMO5VKXFUZCd0jea7kZIcz3HmOc5QMFT+aS5ltnGLox3I
Krf05uD5MNBaEfeq1LRaM/ZP7fR/F4j+OHlu28i/2g28gu3ABF/MPog41h5nWg8L
GrRxc6Ym+R+/fwOIfpOaOfCVhVKMGiU8hL6XSPDnfnL63jtBryUKVycv57hzxQ3k
iUaBOdWwYGI5/riJfpvSig3tfq5G8FAn5BO2k3VOdQX0MiYxqA8ggp8GTJTzTIDw
PGZZpGt1Wv0fdg14yRS/mcK+RI1dKsz0KPgBgQe4Y88qgVNunsvSfj10nwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFJE1BAFjKdYEwgnFo080AMLbZ3T3MB8GA1UdIwQY
MBaAFB3HUiMhwj0WntMy/0mHnMwkUXLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYt
NzA1NTM5M2Y3NWZlLzEva1RVRUFXTXAxZ1RDQ2NXalR6UUF3dHRuZFBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYtNzA1NTM5M2Y3NWZl
LzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEPukAAwQD
bekYAwQDwToIAwQAwcmiAwQF1HFAMA0EAgACMAcDBQMqAiOYMA0GCSqGSIb3DQEB
CwUAA4IBAQBQLIBuTN7BwRem6fN2571grvLVYvao+w2sPxKrbLAKJIdwQekOwmic
5A5Qb4JBRIhZA3AiQslkGnLiCR1Wb04B6VCDYtx1Dj5J9ltlnBip+Z7/E6RowyS6
Qh8lrapBKr18SZN2sfWERnuWVRBpAZPOUB05srmJEX5YeGl2v09rvKWyYEp7KsNj
/9qDw1zjAELMTY20bSNcP4IkiGM1C9RrlDfH360HmdvQKcRuddlAoeMOheWLmvdG
f5wkcdGvs98lxM5f3iLD2syx1+H4JIkmKStBdyKHlNkFNOnnWR1xFqduyFXL4npj
suyrG5zvtd9kxDLv7k6y5e6ABBcg2sn1
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:13 2024 by rpki-client on console-ams.rpki-client.org