Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          3w0CT0PlCag44EcjYHioDOzanLz7916Dz0moH0kH7pY=
Subject key identifier:   20:92:52:97:85:C4:96:C9:04:BF:03:05:5E:63:3E:7C:B6:D1:A2:0F
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6E3F2A6E07A429E3203FC5B16D213D8726187431
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa
Signing time:             Wed 16 Oct 2024 17:19:25 +0000
ROA not before:           Wed 16 Oct 2024 17:14:25 +0000
ROA not after:            Wed 15 Oct 2025 17:19:25 +0000
asID:                     262287
IP address blocks:        92.112.170.0/24 maxlen: 24
                          92.112.171.0/24 maxlen: 24
                          92.112.172.0/24 maxlen: 24
                          92.112.175.0/24 maxlen: 24
                          92.112.200.0/24 maxlen: 24
                          92.112.202.0/24 maxlen: 24
                          92.113.234.0/24 maxlen: 24
                          92.113.235.0/24 maxlen: 24
                          92.113.239.0/24 maxlen: 24
                          92.113.240.0/24 maxlen: 24
                          92.113.244.0/24 maxlen: 24
                          92.113.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 10:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3f:2a:6e:07:a4:29:e3:20:3f:c5:b1:6d:21:3d:87:26:18:74:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Oct 16 17:14:25 2024 GMT
            Not After : Oct 15 17:19:25 2025 GMT
        Subject: CN=2092529785C496C904BF03055E633E7CB6D1A20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:f9:7c:25:73:c0:d0:6a:b3:c3:3f:f6:05:
                    f1:13:7d:75:5b:94:0a:3f:72:6e:a3:a7:a2:9d:b1:
                    40:d3:a8:99:b5:92:0e:a2:98:8c:9e:c1:0b:ef:7c:
                    16:e7:3a:d3:8c:de:ef:cc:6b:32:3b:6d:95:21:2f:
                    87:d1:a2:21:42:cd:57:ad:88:c7:b2:26:2e:d8:76:
                    5d:17:c2:e3:08:af:e9:ce:7f:5b:8e:71:39:18:ae:
                    0d:15:3d:0f:53:41:8f:ac:b8:ba:58:93:8e:40:c2:
                    0b:f5:67:ca:11:d3:8c:e3:c2:fb:1a:bd:f6:4b:42:
                    fb:0a:73:d6:da:e4:01:f1:52:9d:3d:8d:e4:70:57:
                    e4:e4:a2:50:b0:69:e7:4f:e2:1c:3d:fd:7b:9f:90:
                    f4:4a:57:c8:85:ae:97:15:a0:98:61:e7:ed:d9:2d:
                    5d:bf:40:ff:00:b4:60:58:98:74:fc:74:dd:9b:03:
                    4b:be:39:80:23:3f:68:3c:d2:3e:e5:cd:16:97:d3:
                    32:7a:5c:4f:38:65:e1:63:0e:64:50:69:e0:58:f2:
                    65:44:a4:e5:17:3b:07:15:29:81:8b:42:a7:e0:46:
                    a4:dc:bd:d9:d5:c4:78:bc:6c:a8:c5:15:8c:c2:4c:
                    90:f6:dc:f6:e0:cc:a7:bb:88:a2:45:98:86:00:b2:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:52:97:85:C4:96:C9:04:BF:03:05:5E:63:3E:7C:B6:D1:A2:0F
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.112.170.0-92.112.172.255
                  92.112.175.0/24
                  92.112.200.0/24
                  92.112.202.0/24
                  92.113.234.0/23
                  92.113.239.0-92.113.240.255
                  92.113.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:41:f9:45:9f:4a:e9:78:f7:b1:71:5f:72:29:92:eb:3a:10:
         ce:b2:b5:3a:82:cf:7a:d0:72:61:f4:29:64:a9:51:f0:b5:43:
         ff:25:e8:65:6e:a7:c0:ad:ce:78:39:6e:4c:36:71:81:8d:4e:
         35:b7:df:e5:eb:16:d2:16:50:f7:5e:7a:52:d5:63:62:c9:0e:
         30:89:e9:2d:ce:85:dc:b1:5a:e9:60:38:53:2d:5e:57:12:23:
         c1:7c:05:99:0f:4e:84:40:b5:ea:05:c6:23:81:8c:02:e0:0e:
         37:48:bc:71:2a:59:91:cc:73:9c:d7:1f:39:d2:9e:de:83:d5:
         e3:71:4b:b0:86:92:a4:34:23:a6:70:19:71:ec:b2:0a:8f:94:
         c0:de:38:39:65:80:98:fc:d7:3e:2b:dc:0b:37:46:ab:fa:7a:
         71:93:f2:75:ea:a9:3e:73:18:dc:a6:66:1d:80:39:39:7b:7d:
         3d:ab:73:70:76:ca:55:bb:53:c7:8b:70:73:02:57:3e:ce:50:
         39:c2:88:e7:e4:e0:9a:7f:7a:62:3f:65:76:c3:41:b8:75:58:
         cd:92:8f:31:45:cf:ba:cd:cd:77:21:12:84:90:d9:0e:21:fb:
         86:14:91:ee:2a:a0:04:e3:26:2b:3a:36:89:0c:f8:65:bb:3a:
         d2:5b:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:46 2025 by rpki-client