Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/X9yPlgDnQj7cQSBCDypekGuKFZ8.roa
File: X9yPlgDnQj7cQSBCDypekGuKFZ8.roa (raw, json)
Hash identifier: TMJqA9306/55hjJlpvLRNjZkRXuHIeKdP2xZDTih01Y=
Subject key identifier: 5F:DC:8F:96:00:E7:42:3E:DC:41:20:42:0F:2A:5E:90:6B:8A:15:9F
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018EBCA55030F0A56549C51ECED065243EE6
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/X9yPlgDnQj7cQSBCDypekGuKFZ8.roa
Signing time: Mon 08 Apr 2024 07:38:54 +0000
ROA not before: Mon 08 Apr 2024 07:38:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.112.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:a5:50:30:f0:a5:65:49:c5:1e:ce:d0:65:24:3e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Apr 8 07:38:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fdc8f9600e7423edc4120420f2a5e906b8a159f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:73:20:70:ce:bd:8e:bd:6c:19:34:eb:ca:
24:3d:be:31:5c:9c:d7:8e:09:14:ab:e4:43:07:65:
ec:bc:e9:ed:a6:c7:64:68:1d:6a:82:cf:1d:2b:eb:
73:50:95:6b:67:2e:6f:ff:b2:bb:7f:04:00:b1:65:
9b:21:1d:be:c8:08:5b:b9:ba:ba:a6:64:d8:da:0d:
33:e4:cc:37:ee:48:20:29:9e:7b:5c:24:43:10:a2:
fe:49:63:5f:ee:5f:36:2a:da:09:38:62:63:18:dc:
1e:62:6e:22:f0:22:b6:0a:98:27:45:e2:4a:50:e5:
d6:aa:e0:07:85:e9:54:39:50:ea:e3:cd:d1:b9:32:
e2:c8:32:4e:f9:7d:3f:eb:8c:5b:b6:92:6d:aa:41:
39:cb:32:5f:53:30:9a:02:29:a9:d3:f8:40:ad:05:
fc:7c:76:30:9d:38:31:b3:6f:32:23:5e:43:70:78:
1e:c2:a7:a6:52:95:cd:74:41:71:fd:96:5d:40:2e:
3f:23:e0:0e:7b:3c:f9:05:2e:ef:93:6c:f9:72:bd:
53:5e:36:81:c1:80:01:e0:b1:43:a2:8d:19:ea:cf:
92:e2:ec:05:42:61:96:80:48:32:c2:34:7d:f4:0a:
1f:b3:fe:95:b1:a0:4f:61:39:61:76:39:c0:2c:0b:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:8F:96:00:E7:42:3E:DC:41:20:42:0F:2A:5E:90:6B:8A:15:9F
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/X9yPlgDnQj7cQSBCDypekGuKFZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.207.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:33:1a:c3:44:fd:fa:c5:9f:80:43:40:64:c9:4f:a0:a5:9d:
1b:a1:d2:71:2b:4f:41:1f:87:ef:e8:4b:35:3b:02:65:6d:0b:
f5:c2:4e:f2:46:9e:c4:46:11:12:13:62:88:a6:24:ce:31:c4:
d8:b2:84:23:b9:5a:50:6b:bd:05:be:a2:d3:04:2e:3c:26:84:
34:93:4d:8a:76:ec:93:98:93:1f:f3:43:ef:10:06:f0:21:67:
b5:51:ed:f3:1b:8f:2b:53:75:2e:b7:ad:94:ad:42:60:1f:0f:
86:32:ef:7c:90:76:ae:b1:59:21:39:a5:bc:8b:4b:41:c7:2d:
19:e7:f2:8c:90:1e:ad:15:b9:35:1f:a7:2b:20:d3:7d:47:14:
47:3b:c5:81:b0:46:16:fc:a7:ca:35:eb:41:75:dc:90:e9:b5:
3b:9b:81:6c:9f:8c:be:2e:d5:2d:11:a9:fa:52:7f:c9:72:21:
a8:1f:b1:e3:47:8d:97:dd:fa:2e:67:97:8e:65:79:08:bf:d9:
ad:f9:fd:7e:92:22:33:72:13:8b:cd:d6:46:10:49:49:95:9e:
4b:99:2b:ba:b5:50:12:d5:75:fc:6b:e2:31:8f:d7:9a:02:54:
06:6f:6b:e0:b1:7d:13:16:30:24:fc:97:5c:d6:e0:cd:90:ae:
15:b8:c8:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY68pVAw8KVlScUeztBlJD7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjQwNDA4MDczODU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmRjOGY5NjAwZTc0MjNlZGM0MTIwNDIwZjJhNWU5MDZiOGExNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxStzIHDOvY69bBk068okPb4xXJzX
jgkUq+RDB2XsvOntpsdkaB1qgs8dK+tzUJVrZy5v/7K7fwQAsWWbIR2+yAhbubq6
pmTY2g0z5Mw37kggKZ57XCRDEKL+SWNf7l82KtoJOGJjGNweYm4i8CK2CpgnReJK
UOXWquAHhelUOVDq483RuTLiyDJO+X0/64xbtpJtqkE5yzJfUzCaAimp0/hArQX8
fHYwnTgxs28yI15DcHgewqemUpXNdEFx/ZZdQC4/I+AOezz5BS7vk2z5cr1TXjaB
wYAB4LFDoo0Z6s+S4uwFQmGWgEgywjR99Aofs/6VsaBPYTlhdjnALAuZywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/cj5YA50I+3EEgQg8qXpBrihWfMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvWDl5UGxnRG5RajdjUVNCQ0R5cGVrR3VLRlo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnDPMA0G
CSqGSIb3DQEBCwUAA4IBAQDTMxrDRP36xZ+AQ0BkyU+gpZ0bodJxK09BH4fv6Es1
OwJlbQv1wk7yRp7ERhESE2KIpiTOMcTYsoQjuVpQa70FvqLTBC48JoQ0k02KduyT
mJMf80PvEAbwIWe1Ue3zG48rU3Uut62UrUJgHw+GMu98kHausVkhOaW8i0tBxy0Z
5/KMkB6tFbk1H6crINN9RxRHO8WBsEYW/KfKNetBddyQ6bU7m4Fsn4y+LtUtEan6
Un/JciGoH7HjR42X3fouZ5eOZXkIv9mt+f1+kiIzchOLzdZGEElJlZ5LmSu6tVAS
1XX8a+Ixj9eaAlQGb2vgsX0TFjAk/Jdc1uDNkK4VuMj7
-----END CERTIFICATE-----
Generated at Sat May 4 13:55:03 2024 by rpki-client on console-ams.rpki-client.org