Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/Fzq4BtXo74qTLXMQOS7z3Wskf-o.roa
File: Fzq4BtXo74qTLXMQOS7z3Wskf-o.roa (raw, json)
Hash identifier: LfLoBf6CM3k4S8M2Scrs7YPUMNqgckQlkOdpUyi03SI=
Subject key identifier: 17:3A:B8:06:D5:E8:EF:8A:93:2D:73:10:39:2E:F3:DD:6B:24:7F:EA
Certificate issuer: /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial: 018CC801C96DDBEF344CCA272A42C0E7DCED
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/Fzq4BtXo74qTLXMQOS7z3Wskf-o.roa
Signing time: Tue 02 Jan 2024 02:30:09 +0000
ROA not before: Tue 02 Jan 2024 02:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210584
IP address blocks: 62.204.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c9:6d:db:ef:34:4c:ca:27:2a:42:c0:e7:dc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Validity
Not Before: Jan 2 02:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=173ab806d5e8ef8a932d7310392ef3dd6b247fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:b3:80:05:b9:00:8f:b7:27:12:46:ca:29:
bb:5f:27:0c:05:ed:6b:b4:f2:33:e0:7c:28:ad:dc:
30:7d:12:5b:e6:3c:7b:f6:cb:a5:61:ec:af:90:75:
58:b6:fb:15:57:e1:02:ad:6e:f9:47:31:ef:35:f1:
a8:44:5e:b8:55:8b:80:2f:52:3a:7d:67:c2:0a:59:
2d:bb:d0:19:16:d5:e0:96:7e:96:d3:c6:0b:2c:b9:
30:b9:12:d0:8a:65:dc:fc:92:07:cf:ad:73:b1:0d:
f0:1a:7b:a6:7e:9d:80:9d:5d:a4:70:84:b6:07:1b:
fe:6c:7a:df:50:da:fb:b6:12:43:97:71:4e:4e:1d:
11:d4:72:43:10:a1:3b:3c:d9:e4:16:49:81:fd:53:
0b:28:f8:52:04:bf:2a:91:d5:c0:bd:e1:93:5c:55:
b0:9b:7e:75:d7:e3:ba:b7:72:81:fd:70:fb:a0:df:
83:a1:50:74:69:8a:35:72:64:12:71:40:aa:4e:d9:
7a:9d:60:56:6a:6c:66:45:a8:6b:f5:5c:97:8c:7b:
54:d6:88:fb:fb:02:d8:4b:03:cc:19:7e:fd:1f:fc:
4a:4b:cd:50:9a:60:38:4d:52:b3:96:a7:d9:a0:7d:
05:f9:39:d8:10:6b:49:79:ff:bb:3a:dc:39:5e:fa:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:B8:06:D5:E8:EF:8A:93:2D:73:10:39:2E:F3:DD:6B:24:7F:EA
X509v3 Authority Key Identifier:
keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/Fzq4BtXo74qTLXMQOS7z3Wskf-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5a:52:32:b2:2a:9d:eb:66:6b:8c:9f:68:33:47:59:68:9d:
9b:44:fe:0b:a3:46:0c:d1:31:16:21:01:f7:f1:27:90:ef:64:
95:4c:f8:95:6c:0b:da:b7:32:7f:fa:0d:ef:ca:2a:65:a5:5d:
3a:a7:79:a6:76:51:37:42:cf:44:cb:0d:2f:84:b7:c6:92:da:
a4:ca:51:16:d0:ca:fd:30:46:ad:42:0b:2e:8f:14:53:5e:f6:
ac:eb:26:ae:79:ae:0c:e2:a4:3d:34:cf:ef:9c:11:a7:7a:01:
5f:29:4e:16:3a:58:d3:72:7b:de:a2:2f:08:bd:e9:4f:35:d3:
2f:cf:b8:86:29:68:01:06:8d:45:68:dd:c7:81:7b:4e:4f:2d:
65:b9:3d:84:c6:69:21:c4:53:6b:8f:d2:57:c6:73:a7:c4:62:
94:2c:c5:0d:a9:a9:f4:90:16:b2:77:5e:39:41:f2:4d:40:74:
89:ee:5e:cd:70:ff:74:a8:0d:00:f3:a6:ad:36:e2:3d:28:2b:
fa:9f:be:2c:19:bc:fd:b9:08:85:df:0b:dd:a3:69:ea:16:84:
ec:13:3d:88:db:8f:81:7c:7e:74:ed:b8:b6:e5:27:b8:5b:f1:
b0:17:6a:2b:be:24:d5:02:59:8f:a1:1d:79:25:56:6c:a1:6c:
b1:91:ec:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAclt2+80TMonKkLA59ztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWUwZDczMGUxYTU2ZDU3ZjgyN2UyZTU0NDZkMDFkOGQy
NjE1OGUwHhcNMjQwMTAyMDIzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzNhYjgwNmQ1ZThlZjhhOTMyZDczMTAzOTJlZjNkZDZiMjQ3ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt32zgAW5AI+3JxJGyim7XycMBe1r
tPIz4HwordwwfRJb5jx79sulYeyvkHVYtvsVV+ECrW75RzHvNfGoRF64VYuAL1I6
fWfCClktu9AZFtXgln6W08YLLLkwuRLQimXc/JIHz61zsQ3wGnumfp2AnV2kcIS2
Bxv+bHrfUNr7thJDl3FOTh0R1HJDEKE7PNnkFkmB/VMLKPhSBL8qkdXAveGTXFWw
m3511+O6t3KB/XD7oN+DoVB0aYo1cmQScUCqTtl6nWBWamxmRahr9VyXjHtU1oj7
+wLYSwPMGX79H/xKS81QmmA4TVKzlqfZoH0F+TnYEGtJef+7Otw5XvrQ9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBc6uAbV6O+Kky1zEDku891rJH/qMB8GA1UdIwQY
MBaAFFVeDXMOGlbVf4J+LlRG0B2NJhWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQt
MGExY2E1NDkwYWZkLzEvRnpxNEJ0WG83NHFUTFhNUU9TN3ozV3NrZi1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQtMGExY2E1NDkwYWZk
LzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsw/MA0G
CSqGSIb3DQEBCwUAA4IBAQAtWlIysiqd62ZrjJ9oM0dZaJ2bRP4Lo0YM0TEWIQH3
8SeQ72SVTPiVbAvatzJ/+g3vyiplpV06p3mmdlE3Qs9Eyw0vhLfGktqkylEW0Mr9
MEatQgsujxRTXvas6yauea4M4qQ9NM/vnBGnegFfKU4WOljTcnveoi8IvelPNdMv
z7iGKWgBBo1FaN3HgXtOTy1luT2ExmkhxFNrj9JXxnOnxGKULMUNqan0kBayd145
QfJNQHSJ7l7NcP90qA0A86atNuI9KCv6n74sGbz9uQiF3wvdo2nqFoTsEz2I24+B
fH507bi25Se4W/GwF2orviTVAlmPoR15JVZsoWyxkewS
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:08:23 2024 by rpki-client on console-ams.rpki-client.org