Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rkcoN511e5yP-NlaeJ2TY_bk-FE.roa
File: rkcoN511e5yP-NlaeJ2TY_bk-FE.roa (raw, json)
Hash identifier: fX67gmuBDq/TVm/KLYFpjwHYMQ79M7h4unNG1INyNa4=
Subject key identifier: AE:47:28:37:9D:75:7B:9C:8F:F8:D9:5A:78:9D:93:63:F6:E4:F8:51
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019291CB4A05C9BB76E6137DF5E38B5AA0EC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rkcoN511e5yP-NlaeJ2TY_bk-FE.roa
Signing time: Tue 15 Oct 2024 20:07:51 +0000
ROA not before: Tue 15 Oct 2024 20:07:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 150.241.64.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.66.0/24 maxlen: 24
150.241.67.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
150.241.70.0/24 maxlen: 24
150.241.71.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.76.0/24 maxlen: 24
150.241.77.0/24 maxlen: 24
150.241.78.0/24 maxlen: 24
150.241.79.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
150.241.81.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.84.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
150.241.86.0/24 maxlen: 24
150.241.87.0/24 maxlen: 24
150.241.88.0/24 maxlen: 24
150.241.89.0/24 maxlen: 24
150.241.90.0/24 maxlen: 24
150.241.91.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.94.0/24 maxlen: 24
150.241.95.0/24 maxlen: 24
150.241.96.0/24 maxlen: 24
150.241.97.0/24 maxlen: 24
150.241.98.0/24 maxlen: 24
150.241.99.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:cb:4a:05:c9:bb:76:e6:13:7d:f5:e3:8b:5a:a0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 15 20:07:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae4728379d757b9c8ff8d95a789d9363f6e4f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:b6:3f:7e:46:5f:6c:c4:b5:b2:e8:b4:9b:
14:11:66:57:8b:ee:85:ef:28:d6:d4:c8:09:5a:a9:
9a:79:27:83:70:64:c7:9c:93:86:cd:c9:b7:9b:c9:
94:68:31:1a:f1:47:42:35:1d:9f:2b:9c:43:1d:0b:
85:c4:0a:3a:17:41:d7:5d:19:ae:b2:b5:0e:60:81:
ed:92:94:f7:45:37:af:4a:e2:7a:87:28:7c:d8:29:
48:c3:d9:4a:ba:08:e0:0f:43:af:2b:28:47:99:c2:
30:ec:8e:9a:7e:3a:1a:cb:4b:7c:47:dc:36:e7:4e:
1f:29:4d:03:31:86:89:a0:47:2a:d8:58:d7:8b:e4:
38:9a:89:e9:31:e9:1e:20:6c:39:5e:c0:fa:55:d2:
f1:5c:74:6b:d6:97:df:e0:b9:76:01:a4:d6:27:a5:
33:85:0c:72:c7:24:ae:4e:b8:0f:a1:e8:86:ed:2d:
ae:bd:49:f2:96:fb:8b:9a:ff:e7:de:26:7d:f0:ab:
4a:2d:61:9e:86:75:cb:73:2f:26:1c:d9:18:a6:c0:
cb:f4:31:3e:68:4d:c5:07:b8:42:66:1e:dd:21:3a:
45:36:dc:45:04:69:58:4c:d1:c3:40:43:ed:d0:fc:
14:ce:f5:96:7e:0f:4b:7d:a2:b7:32:48:fc:54:36:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:47:28:37:9D:75:7B:9C:8F:F8:D9:5A:78:9D:93:63:F6:E4:F8:51
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rkcoN511e5yP-NlaeJ2TY_bk-FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.64.0-150.241.103.255
Signature Algorithm: sha256WithRSAEncryption
1e:bd:5d:5d:44:cd:00:25:55:a0:0d:93:3b:cb:d3:c6:86:18:
47:7d:03:72:d9:6c:5a:19:3f:99:b2:87:84:b3:89:03:3e:f5:
cb:37:c9:85:13:7c:ca:1e:46:a1:52:af:c7:2b:52:2d:49:6e:
11:2e:eb:e5:c7:b6:05:71:af:38:b3:86:6e:b8:3d:7f:a7:c3:
49:71:da:67:c2:77:10:6d:b5:6f:f4:a1:4f:27:9a:30:53:03:
4e:a9:93:4e:07:40:1e:11:61:7b:2e:37:cc:ba:7c:4c:f7:92:
64:c3:3c:f3:ca:82:00:16:4c:70:88:09:66:76:e6:2c:96:8b:
72:92:29:02:bf:e4:00:3c:9d:64:29:7a:02:c4:75:35:b1:32:
30:29:bf:30:8b:9c:5d:c2:15:b2:a9:fa:72:28:f5:25:9f:82:
41:d3:dd:02:d8:c2:c9:5d:5c:a0:8a:d5:20:13:54:ea:ed:5d:
31:98:43:fe:c3:4f:0b:19:52:f9:d4:f4:f6:09:7e:3c:18:05:
4b:9b:dd:29:54:ce:ec:c0:9a:d6:d4:c4:7a:20:b4:7b:7b:fd:
2e:1a:06:91:a1:37:e1:7d:cf:d7:db:e6:13:9a:37:83:7b:a9:
43:a3:cd:74:b6:31:cf:b1:22:ac:ca:84:eb:68:5e:e1:db:d1:
fc:3e:e4:ba
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZKRy0oFybt25hN99eOLWqDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjQxMDE1MjAwNzUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTQ3MjgzNzlkNzU3YjljOGZmOGQ5NWE3ODlkOTM2M2Y2ZTRmODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLO2P35GX2zEtbLotJsUEWZXi+6F
7yjW1MgJWqmaeSeDcGTHnJOGzcm3m8mUaDEa8UdCNR2fK5xDHQuFxAo6F0HXXRmu
srUOYIHtkpT3RTevSuJ6hyh82ClIw9lKugjgD0OvKyhHmcIw7I6afjoay0t8R9w2
504fKU0DMYaJoEcq2FjXi+Q4monpMekeIGw5XsD6VdLxXHRr1pff4Ll2AaTWJ6Uz
hQxyxySuTrgPoeiG7S2uvUnylvuLmv/n3iZ98KtKLWGehnXLcy8mHNkYpsDL9DE+
aE3FB7hCZh7dITpFNtxFBGlYTNHDQEPt0PwUzvWWfg9LfaK3Mkj8VDbRrwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFK5HKDeddXucj/jZWnidk2P25PhRMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvcmtjb041MTFlNXlQLU5sYWVKMlRZX2JrLUZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaW8UAD
BAOW8WAwDQYJKoZIhvcNAQELBQADggEBAB69XV1EzQAlVaANkzvL08aGGEd9A3LZ
bFoZP5myh4SziQM+9cs3yYUTfMoeRqFSr8crUi1JbhEu6+XHtgVxrzizhm64PX+n
w0lx2mfCdxBttW/0oU8nmjBTA06pk04HQB4RYXsuN8y6fEz3kmTDPPPKggAWTHCI
CWZ25iyWi3KSKQK/5AA8nWQpegLEdTWxMjApvzCLnF3CFbKp+nIo9SWfgkHT3QLY
wsldXKCK1SATVOrtXTGYQ/7DTwsZUvnU9PYJfjwYBUub3SlUzuzAmtbUxHogtHt7
/S4aBpGhN+F9z9fb5hOaN4N7qUOjzXS2Mc+xIqzKhOtoXuHb0fw+5Lo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:58 2024 by rpki-client on console-fra.rpki-client.org