Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/tAE4wco71Iw2yUlu5c41eYSDQTw.roa
File: tAE4wco71Iw2yUlu5c41eYSDQTw.roa (raw, json)
Hash identifier: uKmpoP99/PrQdgNiGnpzTVK9ZSY2bAdtSfkvyUSbjdc=
Subject key identifier: B4:01:38:C1:CA:3B:D4:8C:36:C9:49:6E:E5:CE:35:79:84:83:41:3C
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 018CC2DACBD606F99EC5559FE17C57F4E991
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/tAE4wco71Iw2yUlu5c41eYSDQTw.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210365
IP address blocks: 185.62.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cb:d6:06:f9:9e:c5:55:9f:e1:7c:57:f4:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b40138c1ca3bd48c36c9496ee5ce35798483413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:ae:81:d8:ed:3e:e7:db:6f:ae:dd:7f:c2:
ea:19:56:17:e5:84:d2:8c:22:c6:f0:38:56:4e:b7:
f7:32:18:c7:83:1d:87:7a:ec:e3:60:19:63:e7:66:
61:a0:39:c5:7a:37:a4:30:22:74:24:5a:de:73:2d:
8f:d1:99:40:32:ca:e1:c5:6d:e4:13:bb:07:ca:78:
42:0d:37:fc:9e:1d:87:93:9a:e8:9b:85:67:21:7e:
15:4c:a8:45:0a:56:6c:51:be:9c:16:dd:fa:bd:7f:
b1:56:a3:01:17:a9:7e:b6:c7:e6:2c:94:ba:63:38:
25:95:3c:c0:17:f0:85:40:ca:4b:16:ad:6a:54:60:
7a:65:15:a1:6f:87:48:05:17:c7:49:1a:8c:f3:49:
43:d6:fc:e0:c0:cb:ef:8a:9b:dd:3b:36:af:2d:65:
76:fe:83:bb:97:8b:c1:9a:f9:9a:b4:8d:7a:68:d2:
6f:b4:d2:7b:da:c7:d6:d6:92:23:40:44:22:95:af:
42:7a:79:39:ff:b5:08:1f:48:13:1d:fa:26:ff:13:
dd:ab:14:9f:57:fa:76:45:ca:b2:0c:7e:47:8d:c1:
26:77:04:82:34:97:3e:fe:ac:e5:51:7d:c8:d5:f7:
20:f8:38:4e:f1:91:78:b4:95:2f:fb:79:7e:5d:89:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:01:38:C1:CA:3B:D4:8C:36:C9:49:6E:E5:CE:35:79:84:83:41:3C
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/tAE4wco71Iw2yUlu5c41eYSDQTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b4:8b:eb:60:0c:5c:2e:71:72:9b:65:0e:0d:83:c6:10:7e:
3c:cc:dd:90:41:16:27:eb:e8:5a:05:0a:20:92:28:24:a0:7c:
68:61:61:31:81:2e:c7:a0:f9:45:e1:0f:85:e8:17:8e:03:ec:
e2:68:37:ff:ed:41:91:52:2c:10:ed:53:28:e9:a3:d9:f4:04:
ed:cc:1f:67:2b:fc:32:2f:32:2a:59:09:79:c8:63:23:f5:a9:
f8:17:7e:1b:d0:d9:85:90:47:20:34:2b:9d:e3:4c:4b:e5:0d:
e7:4c:66:a3:ff:d5:e5:1f:02:7c:a8:16:7f:4e:cd:99:07:a2:
f0:ae:5d:77:56:3f:52:b1:75:f2:e0:3e:f1:0b:3f:99:c2:a8:
51:84:2f:3c:d4:74:2d:83:9a:2e:d8:e0:f7:0c:3d:41:5e:2a:
c6:a6:d0:c3:50:2c:75:22:c8:8d:7d:47:71:10:c6:55:e0:38:
67:1d:59:80:a5:5f:ac:37:ab:fb:d0:d7:f6:f3:aa:ca:ce:3a:
ef:52:34:f3:20:41:cf:b4:58:e3:a8:e0:38:32:40:05:5c:21:
14:33:f3:72:35:35:f3:d9:9a:db:a6:5c:5f:dc:b8:c6:fd:49:
6b:f8:83:cc:b2:1e:85:c5:c4:f8:15:17:d3:c7:e7:3b:60:7f:
80:cb:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:58:20 2024 by rpki-client on console-ams.rpki-client.org