Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/HITJMFcfpCQfp5xaqgDDb2Y45-M.roa
File: HITJMFcfpCQfp5xaqgDDb2Y45-M.roa (raw, json)
Hash identifier: 7S+GokfFPtP9AC1os9WYE3tV52O0cd15Sqwejv4TTwc=
Subject key identifier: 1C:84:C9:30:57:1F:A4:24:1F:A7:9C:5A:AA:00:C3:6F:66:38:E7:E3
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 01922F5231BEDD473FC19613A43451ED216B
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/HITJMFcfpCQfp5xaqgDDb2Y45-M.roa
Signing time: Thu 26 Sep 2024 17:12:48 +0000
ROA not before: Thu 26 Sep 2024 17:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57928
IP address blocks: 37.157.8.0/23 maxlen: 24
37.157.10.0/24 maxlen: 24
37.157.12.0/22 maxlen: 24
193.41.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2f:52:31:be:dd:47:3f:c1:96:13:a4:34:51:ed:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Sep 26 17:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c84c930571fa4241fa79c5aaa00c36f6638e7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:81:73:7f:5c:09:79:c8:66:2b:b4:08:a9:
9a:46:f0:ab:2e:c8:8d:e5:00:b6:1c:ed:d9:9b:f8:
05:e5:38:5b:e8:43:f1:d5:65:0d:83:af:82:8d:dc:
50:02:5c:f7:09:39:b3:4b:22:bc:a8:a7:7a:98:7b:
56:bb:41:48:23:9d:95:a9:06:2c:47:bb:db:1a:35:
f4:80:ec:44:f4:5a:13:88:fb:6c:44:84:7e:25:79:
68:81:1c:b6:ce:a5:75:48:90:d8:e0:4e:93:8f:24:
6e:41:46:ff:a2:51:56:2f:1b:6c:24:d2:06:fa:a6:
17:7e:94:52:25:ea:87:b5:c0:96:19:b6:82:64:02:
05:4b:4f:6d:59:62:d0:7f:e6:06:8b:57:5f:1c:fe:
f1:64:0b:e4:aa:fe:a0:2e:be:8b:e0:b3:0d:3b:a8:
cc:88:61:c8:cf:32:70:c1:60:b8:76:a9:f0:84:99:
54:be:fb:67:58:41:ca:22:18:da:b4:f6:c5:0d:cd:
de:bc:3a:c8:a4:8d:45:c7:8d:df:98:b5:01:6c:d9:
71:b9:c5:f8:5a:82:7d:da:46:a9:71:cc:af:aa:3b:
3e:5e:bf:19:12:49:5e:30:35:2a:62:ce:51:af:a9:
e3:45:c5:5a:60:90:16:37:29:37:85:d6:66:be:f2:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:84:C9:30:57:1F:A4:24:1F:A7:9C:5A:AA:00:C3:6F:66:38:E7:E3
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/HITJMFcfpCQfp5xaqgDDb2Y45-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.8.0-37.157.10.255
37.157.12.0/22
193.41.95.0/24
Signature Algorithm: sha256WithRSAEncryption
22:70:a8:a5:f1:d2:52:9d:a7:bf:80:fe:26:c9:c7:e9:69:22:
9a:ef:8d:94:ff:ea:77:a4:2c:1e:02:50:2a:c0:ff:16:2b:01:
4f:b6:73:98:b6:7b:53:df:0a:8e:58:bf:48:0a:c9:cc:d9:c2:
53:69:cf:7f:90:72:55:5b:56:94:7a:2c:30:6b:ca:7d:1b:ca:
38:04:66:17:91:d0:08:40:44:ee:72:09:48:97:3f:b4:de:b0:
0f:6a:fb:3c:92:97:35:4b:fb:fe:d4:d2:9e:e0:9a:f0:8b:d2:
26:bc:28:d1:39:63:6c:cd:6f:99:da:35:69:03:e7:20:a1:90:
bf:b1:bd:8f:4d:73:63:54:70:6b:91:2d:f0:c3:4e:d0:b6:2c:
b7:48:28:3a:81:a6:cb:2f:42:b2:b3:62:da:a4:36:af:a1:17:
26:4e:a2:e2:ac:22:91:39:d6:8e:3a:dc:3d:c2:0d:49:f6:81:
64:88:ff:54:7a:d8:9a:e3:e4:01:dc:06:ec:6d:39:4c:5e:3e:
d8:f2:82:1f:eb:88:c4:49:a4:4c:98:47:a0:26:e5:40:d9:c5:
d5:4c:00:1d:20:d8:e6:eb:2b:76:dd:e8:54:c0:4a:e7:3b:fb:
8f:fc:09:a5:41:0e:a7:d0:26:72:ae:20:94:9e:9e:22:95:af:
c9:9b:59:3d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZIvUjG+3Uc/wZYTpDRR7SFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3
ODZlZjUwHhcNMjQwOTI2MTcxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzg0YzkzMDU3MWZhNDI0MWZhNzljNWFhYTAwYzM2ZjY2MzhlN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY+Bc39cCXnIZiu0CKmaRvCrLsiN
5QC2HO3Zm/gF5Thb6EPx1WUNg6+CjdxQAlz3CTmzSyK8qKd6mHtWu0FII52VqQYs
R7vbGjX0gOxE9FoTiPtsRIR+JXlogRy2zqV1SJDY4E6TjyRuQUb/olFWLxtsJNIG
+qYXfpRSJeqHtcCWGbaCZAIFS09tWWLQf+YGi1dfHP7xZAvkqv6gLr6L4LMNO6jM
iGHIzzJwwWC4dqnwhJlUvvtnWEHKIhjatPbFDc3evDrIpI1Fx43fmLUBbNlxucX4
WoJ92kapccyvqjs+Xr8ZEkleMDUqYs5Rr6njRcVaYJAWNyk3hdZmvvKKxQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFByEyTBXH6QkH6ecWqoAw29mOOfjMB8GA1UdIwQY
MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It
NjFlN2Y0MGQ1ZGQ2LzEvSElUSk1GY2ZwQ1FmcDV4YXFnRERiMlk0NS1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2
LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAMlnQgD
BAAlnQoDBAIlnQwDBADBKV8wDQYJKoZIhvcNAQELBQADggEBACJwqKXx0lKdp7+A
/ibJx+lpIprvjZT/6nekLB4CUCrA/xYrAU+2c5i2e1PfCo5Yv0gKyczZwlNpz3+Q
clVbVpR6LDBryn0byjgEZheR0AhARO5yCUiXP7TesA9q+zySlzVL+/7U0p7gmvCL
0ia8KNE5Y2zNb5naNWkD5yChkL+xvY9Nc2NUcGuRLfDDTtC2LLdIKDqBpssvQrKz
YtqkNq+hFyZOouKsIpE51o463D3CDUn2gWSI/1R62Jrj5AHcBuxtOUxePtjygh/r
iMRJpEyYR6Am5UDZxdVMAB0g2ObrK3bd6FTASuc7+4/8CaVBDqfQJnKuIJSeniKV
r8mbWT0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:58 2024 by rpki-client on console-fra.rpki-client.org