Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/jIJ1AmX2hucgvn1K9WFJYyrI2jE.roa
File: jIJ1AmX2hucgvn1K9WFJYyrI2jE.roa (raw, json)
Hash identifier: 7PMrki80Ijp6LkAy9bZLsoGbKbwgtvOljaIlxGKcvto=
Subject key identifier: 8C:82:75:02:65:F6:86:E7:20:BE:7D:4A:F5:61:49:63:2A:C8:DA:31
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 018CC424DCCAF6CDABCD5D729B7F47ABEC12
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/jIJ1AmX2hucgvn1K9WFJYyrI2jE.roa
Signing time: Mon 01 Jan 2024 08:29:59 +0000
ROA not before: Mon 01 Jan 2024 08:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6660
IP address blocks: 62.25.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:dc:ca:f6:cd:ab:cd:5d:72:9b:7f:47:ab:ec:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Jan 1 08:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c82750265f686e720be7d4af56149632ac8da31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:11:19:6c:dd:c1:53:45:4b:50:0a:81:4d:
9f:8b:4a:ce:4b:cb:91:bd:35:fe:4c:92:01:cf:ed:
12:36:1c:3e:eb:8b:85:fa:85:40:42:40:1b:69:a0:
35:1d:b4:ae:a6:39:68:94:0e:67:36:2a:b9:32:77:
34:a9:6b:04:e1:74:32:a7:c8:8f:b1:06:17:50:a1:
5e:86:aa:f4:5b:4e:9f:a0:31:f8:aa:d0:71:71:16:
cd:35:db:f2:fe:8c:db:03:83:b9:dc:5c:29:a6:d3:
fd:1b:03:41:ce:8b:5e:a1:43:2e:0e:ad:5c:4b:3c:
f4:3d:ed:1a:80:ea:4e:c7:ec:11:1c:0c:7e:db:da:
87:84:3c:8b:e9:90:5b:e7:c2:7d:82:f9:60:b0:30:
75:15:10:07:1e:16:4c:9a:17:17:c1:a8:18:73:43:
6c:fe:76:c2:08:67:d1:31:04:96:22:9b:09:a1:a5:
7d:79:36:8d:17:bd:a8:cc:58:e6:1d:fa:bd:0e:df:
bd:fb:c9:13:66:18:fe:fd:ce:c2:01:cd:e3:a2:b5:
55:d9:61:8e:c6:23:ea:2b:b1:43:30:32:b8:99:c9:
69:9e:63:a1:7b:fa:9e:3e:1c:1b:b1:ad:97:89:11:
0c:f8:47:7c:ca:48:8b:a5:4c:30:32:c4:26:3a:1f:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:82:75:02:65:F6:86:E7:20:BE:7D:4A:F5:61:49:63:2A:C8:DA:31
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/jIJ1AmX2hucgvn1K9WFJYyrI2jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:d2:1c:6a:b5:0b:35:ac:c7:46:eb:6f:f5:62:aa:bb:dc:d2:
68:6f:4f:1d:f7:10:db:31:11:be:7c:01:fd:2d:82:c8:e9:8f:
90:99:de:e2:14:ac:22:fd:39:18:ab:50:a1:0a:e1:1f:4b:46:
02:aa:cb:36:fb:96:a7:e8:a1:fa:33:4d:b0:ac:c5:02:01:2c:
fc:30:aa:c4:f7:7b:08:d6:c4:8a:e0:f9:db:ca:51:e1:09:d4:
0b:07:89:43:5f:b8:51:2a:d5:1d:41:4a:17:88:60:aa:f8:81:
a7:5f:b1:66:12:9f:08:62:f6:ef:30:6e:c4:82:b3:59:8b:d5:
30:c9:40:27:15:98:13:a5:09:5c:75:64:fa:bc:31:6b:3a:0e:
a4:29:e3:78:80:4c:a9:97:12:72:e8:96:65:81:1b:5a:27:91:
13:ea:b9:5a:e4:f3:a0:0b:e6:6c:71:d2:0d:56:e5:c4:0a:8a:
07:ac:0f:2f:d7:90:19:47:af:c2:3f:f9:5b:da:08:26:55:f3:
25:a4:7c:67:e9:80:92:58:49:34:71:37:55:f1:f3:b2:90:71:
23:43:57:84:c0:90:30:5a:19:65:c2:17:97:ba:fc:d6:51:58:
9c:66:46:d7:48:bc:90:a2:47:c5:07:30:63:fe:26:97:03:87:
ce:b0:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:14 2024 by rpki-client on console-ams.rpki-client.org