Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/9N7rVK9sVeCCSaW55rXdnovM4mU.roa
File: 9N7rVK9sVeCCSaW55rXdnovM4mU.roa (raw, json)
Hash identifier: nahZTc9wkR4wQ1Q34NJGLh1zb7hIigcT1EckCWCRKYM=
Subject key identifier: F4:DE:EB:54:AF:6C:55:E0:82:49:A5:B9:E6:B5:DD:9E:8B:CC:E2:65
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 018CC3B720A2B6DF9AD91DA6333B7F0EC613
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/9N7rVK9sVeCCSaW55rXdnovM4mU.roa
Signing time: Mon 01 Jan 2024 06:30:07 +0000
ROA not before: Mon 01 Jan 2024 06:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48744
IP address blocks: 62.122.9.0/24 maxlen: 24
62.122.11.0/24 maxlen: 24
62.122.10.0/24 maxlen: 24
62.122.8.0/24 maxlen: 24
62.122.8.0/22 maxlen: 22
62.122.13.0/24 maxlen: 24
62.122.12.0/22 maxlen: 22
62.122.12.0/24 maxlen: 24
62.122.15.0/24 maxlen: 24
62.122.14.0/24 maxlen: 24
185.240.124.0/23 maxlen: 23
185.240.124.0/24 maxlen: 24
185.240.126.0/23 maxlen: 23
185.240.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:20:a2:b6:df:9a:d9:1d:a6:33:3b:7f:0e:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4deeb54af6c55e08249a5b9e6b5dd9e8bcce265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:e1:d7:85:44:1c:3e:e0:b8:be:1f:2c:b3:
9e:9b:91:45:56:58:db:5b:ec:77:5e:5e:0f:43:c6:
c9:7f:68:bf:f6:2e:d6:b3:f5:84:9d:5c:24:f7:b5:
0e:ad:ad:1c:f8:8c:7d:10:f9:74:1e:9c:f8:b8:06:
4b:50:67:35:4a:d2:7d:a9:22:7e:80:12:d2:4b:5f:
a1:72:97:6d:f8:bc:a3:bd:17:86:b6:72:a9:65:8f:
a4:68:60:bb:87:87:50:4f:e5:4b:a6:ce:43:a6:7a:
f1:4f:32:35:e2:94:91:ea:7c:4c:96:40:90:3d:77:
88:78:07:a9:f3:09:93:7a:b3:b3:1a:8d:f7:b7:88:
89:86:34:5b:1d:43:29:3e:4f:53:57:00:45:98:96:
44:17:cc:41:25:25:ef:59:e7:a1:e2:51:89:6f:59:
5c:a8:89:de:fc:6a:3e:78:81:72:f8:d1:83:9a:1d:
ce:74:86:90:82:6e:20:9b:1e:97:c8:d8:50:60:11:
00:87:54:8c:2e:47:b9:b3:66:43:78:fe:bd:71:f2:
e6:e3:a9:4a:73:76:58:a1:8e:c9:3b:75:43:7b:f0:
7c:97:37:31:15:bd:c6:74:df:ad:13:fd:72:de:2a:
c6:0c:b0:ca:48:43:26:40:0a:0e:bd:e8:9e:67:35:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:EB:54:AF:6C:55:E0:82:49:A5:B9:E6:B5:DD:9E:8B:CC:E2:65
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/9N7rVK9sVeCCSaW55rXdnovM4mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.8.0/21
185.240.124.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:5c:7d:92:7e:3e:3e:89:2a:ac:2e:55:14:11:e1:cb:d2:d4:
b0:ad:46:e3:b1:b1:d2:22:66:08:00:9b:8e:62:f1:52:fd:a6:
88:d9:0f:50:e0:e9:86:17:f6:7f:ff:d0:2b:c6:0b:83:14:4c:
fe:4c:76:69:e6:1d:15:80:f3:e5:d5:39:de:6f:7a:6f:7b:f9:
22:02:7c:6c:8e:bd:ba:af:20:25:ee:49:1d:32:fe:e3:f8:34:
fc:6a:ea:e5:1c:3e:db:1b:97:1e:a6:a9:28:87:82:5d:4e:13:
9d:62:a5:7d:7f:70:b3:f9:e1:aa:0f:1b:6c:d2:d5:6d:8c:56:
fe:9e:46:90:fb:60:00:ae:32:71:50:f9:e0:c1:d3:cf:47:f1:
d8:3f:f1:8f:33:61:1b:80:d5:2a:fd:62:cd:59:e1:4b:21:6f:
10:34:5c:51:65:c0:4c:43:33:68:20:19:77:52:2f:9d:ac:57:
05:5c:98:fa:d3:04:02:d7:5c:cd:85:7e:4d:24:54:d1:72:39:
08:19:f4:2d:ae:e2:11:0b:b1:a3:c9:d4:81:43:66:9a:62:21:
d0:6e:04:70:9e:71:02:36:31:98:12:98:04:21:46:23:b4:35:
7f:04:60:e7:1d:03:df:05:0c:8c:88:06:77:6a:68:31:89:c7:
71:85:96:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtyCitt+a2R2mMzt/DsYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTIwY2VjYmEyNTFjZDM3Y2RmM2M0ZDVhYjAzNjI1NTIy
YmJhYWMwHhcNMjQwMTAxMDYzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGRlZWI1NGFmNmM1NWUwODI0OWE1YjllNmI1ZGQ5ZThiY2NlMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApELh14VEHD7guL4fLLOem5FFVljb
W+x3Xl4PQ8bJf2i/9i7Ws/WEnVwk97UOra0c+Ix9EPl0Hpz4uAZLUGc1StJ9qSJ+
gBLSS1+hcpdt+LyjvReGtnKpZY+kaGC7h4dQT+VLps5DpnrxTzI14pSR6nxMlkCQ
PXeIeAep8wmTerOzGo33t4iJhjRbHUMpPk9TVwBFmJZEF8xBJSXvWeeh4lGJb1lc
qIne/Go+eIFy+NGDmh3OdIaQgm4gmx6XyNhQYBEAh1SMLke5s2ZDeP69cfLm46lK
c3ZYoY7JO3VDe/B8lzcxFb3GdN+tE/1y3irGDLDKSEMmQAoOveieZzV3sQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPTe61SvbFXggkmluea13Z6LzOJlMB8GA1UdIwQY
MBaAFMBSDOy6JRzTfN88TVqwNiVSK7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYt
NzQxOGI5MmFhMjA5LzEvOU43clZLOXNWZUNDU2FXNTVyWGRub3ZNNG1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYtNzQxOGI5MmFhMjA5
LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPnoIAwQC
ufB8MA0GCSqGSIb3DQEBCwUAA4IBAQDXXH2Sfj4+iSqsLlUUEeHL0tSwrUbjsbHS
ImYIAJuOYvFS/aaI2Q9Q4OmGF/Z//9ArxguDFEz+THZp5h0VgPPl1Tneb3pve/ki
Anxsjr26ryAl7kkdMv7j+DT8aurlHD7bG5cepqkoh4JdThOdYqV9f3Cz+eGqDxts
0tVtjFb+nkaQ+2AArjJxUPngwdPPR/HYP/GPM2EbgNUq/WLNWeFLIW8QNFxRZcBM
QzNoIBl3Ui+drFcFXJj60wQC11zNhX5NJFTRcjkIGfQtruIRC7GjydSBQ2aaYiHQ
bgRwnnECNjGYEpgEIUYjtDV/BGDnHQPfBQyMiAZ3amgxicdxhZZe
-----END CERTIFICATE-----
Generated at Sun May 19 21:15:13 2024 by rpki-client on console-fra.rpki-client.org