Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/CRMq_fCyIrn7QWVMmoKovh0DB7w.roa
File: CRMq_fCyIrn7QWVMmoKovh0DB7w.roa (raw, json)
Hash identifier: CXNsnToGHbe9oG4qdrr4m1cDhpU76zY91AkSG+A9oHM=
Subject key identifier: 09:13:2A:FD:F0:B2:22:B9:FB:41:65:4C:9A:82:A8:BE:1D:03:07:BC
Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial: 018CC9BBC1F04434750287185257F581F4AD
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/CRMq_fCyIrn7QWVMmoKovh0DB7w.roa
Signing time: Tue 02 Jan 2024 10:32:54 +0000
ROA not before: Tue 02 Jan 2024 10:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42273
IP address blocks: 194.50.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c1:f0:44:34:75:02:87:18:52:57:f5:81:f4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
Validity
Not Before: Jan 2 10:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09132afdf0b222b9fb41654c9a82a8be1d0307bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:f3:c3:9a:e1:a3:bc:00:74:ae:86:a9:eb:
42:6c:5f:9d:89:59:71:54:c8:f4:55:5f:a3:32:65:
08:c5:0d:c0:7c:41:ed:7b:9b:b7:2e:c2:8e:4e:43:
df:f3:94:e8:75:e8:fe:f0:8d:80:5b:2f:7d:54:5d:
68:9b:fc:da:1f:33:6e:df:90:bd:7f:10:a2:e7:87:
ea:d5:c1:52:ce:bf:90:ed:4f:95:14:63:f3:cf:85:
94:77:84:5b:a1:4a:37:77:10:a0:35:8f:7b:1d:1e:
1c:37:e0:d3:76:f9:02:6d:45:58:14:c9:86:b8:1d:
51:4e:7f:28:30:a4:b1:d3:ae:ed:ac:cc:a8:35:16:
e9:f7:bc:50:47:c0:01:a2:a2:ab:27:44:57:02:1e:
7b:6a:92:e7:74:90:37:ae:20:db:e1:95:97:50:e5:
1f:9b:7b:d2:f1:57:64:33:69:d7:e4:72:7f:32:9a:
b1:f1:02:d3:66:92:a8:a6:52:b2:d2:db:e1:f9:cb:
b6:55:ed:44:fb:0b:7c:7b:76:5f:2e:3a:c7:6b:d4:
75:96:e6:9c:25:95:95:1d:c6:ae:ff:ef:76:bc:fe:
6b:c0:83:a6:01:58:0e:26:48:81:4b:29:c6:48:43:
44:6e:3f:5f:85:50:b7:29:eb:ad:e5:25:01:b4:58:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:13:2A:FD:F0:B2:22:B9:FB:41:65:4C:9A:82:A8:BE:1D:03:07:BC
X509v3 Authority Key Identifier:
keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/CRMq_fCyIrn7QWVMmoKovh0DB7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:82:73:f5:cd:3a:59:1f:14:f3:0d:0c:12:d2:21:02:66:6a:
47:c8:5b:c1:05:f8:7d:d0:9a:e2:57:09:0c:4e:17:d4:b0:13:
02:16:04:1a:60:ca:65:f6:7f:7a:6a:55:7d:2b:c2:78:99:5e:
1a:a9:04:89:76:cc:ae:ce:94:b9:73:45:64:b6:dc:67:ba:04:
a5:81:c1:72:13:25:0b:a0:62:16:6a:b0:40:5a:62:5c:d5:0d:
aa:5e:d0:f3:8f:32:aa:7a:a1:dd:03:0a:3e:71:02:fb:d0:0d:
d4:03:9b:a1:44:77:bc:d0:58:cd:94:82:5c:12:4b:7a:13:08:
a0:57:33:34:2a:a4:0f:5a:1b:3b:21:03:e0:87:91:9f:9e:5b:
df:04:f4:ef:f9:e8:b3:d5:c2:dc:60:7f:f0:ef:4f:18:5c:94:
9d:25:b3:80:3b:22:b9:7b:0c:1b:9e:e3:70:94:8b:ad:40:d9:
71:a7:94:89:9d:60:3b:d0:db:cc:1a:29:70:cf:05:6a:24:e0:
37:43:b8:0c:db:af:e0:c2:4e:4d:16:76:30:a2:9c:9d:4a:f9:
5e:e9:fc:29:22:96:c6:d3:59:cc:08:af:ef:f8:9a:cd:68:dd:
18:dd:c5:d5:1d:03:24:7f:a8:99:b5:59:ce:da:25:79:6e:5a:
d9:42:fc:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu8HwRDR1AocYUlf1gfStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTM0ZDRjNDM0M2NkODk5MTg5NjlkNTZkYTE4NTY3NGIx
NjYzNTUwHhcNMjQwMTAyMTAzMjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTEzMmFmZGYwYjIyMmI5ZmI0MTY1NGM5YTgyYThiZTFkMDMwN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+nzw5rho7wAdK6GqetCbF+diVlx
VMj0VV+jMmUIxQ3AfEHte5u3LsKOTkPf85Todej+8I2AWy99VF1om/zaHzNu35C9
fxCi54fq1cFSzr+Q7U+VFGPzz4WUd4RboUo3dxCgNY97HR4cN+DTdvkCbUVYFMmG
uB1RTn8oMKSx067trMyoNRbp97xQR8ABoqKrJ0RXAh57apLndJA3riDb4ZWXUOUf
m3vS8VdkM2nX5HJ/Mpqx8QLTZpKoplKy0tvh+cu2Ve1E+wt8e3ZfLjrHa9R1luac
JZWVHcau/+92vP5rwIOmAVgOJkiBSynGSENEbj9fhVC3Keut5SUBtFg3EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAkTKv3wsiK5+0FlTJqCqL4dAwe8MB8GA1UdIwQY
MBaAFPxTTUxDQ82JkYlp1W2hhWdLFmNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82MGI2MmItOGUyYy00NDNlLWExNjIt
YjRjMmRjYTU5M2IzLzEvQ1JNcV9mQ3lJcm43UVdWTW1vS292aDBEQjd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82MGI2MmItOGUyYy00NDNlLWExNjItYjRjMmRjYTU5M2Iz
LzEvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjKmMA0G
CSqGSIb3DQEBCwUAA4IBAQDBgnP1zTpZHxTzDQwS0iECZmpHyFvBBfh90JriVwkM
ThfUsBMCFgQaYMpl9n96alV9K8J4mV4aqQSJdsyuzpS5c0VkttxnugSlgcFyEyUL
oGIWarBAWmJc1Q2qXtDzjzKqeqHdAwo+cQL70A3UA5uhRHe80FjNlIJcEkt6Ewig
VzM0KqQPWhs7IQPgh5GfnlvfBPTv+eiz1cLcYH/w708YXJSdJbOAOyK5ewwbnuNw
lIutQNlxp5SJnWA70NvMGilwzwVqJOA3Q7gM26/gwk5NFnYwopydSvle6fwpIpbG
01nMCK/v+JrNaN0Y3cXVHQMkf6iZtVnO2iV5blrZQvxy
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:31:25 2024 by rpki-client on console-ams.rpki-client.org