Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/1IMbVxxQaMV20B5dpJJh-5AaMRo.roa
File: 1IMbVxxQaMV20B5dpJJh-5AaMRo.roa (raw, json)
Hash identifier: +68hfPuz9GT6w7TMwEJIZla/TrlwaJjsanzyS5SOr5M=
Subject key identifier: D4:83:1B:57:1C:50:68:C5:76:D0:1E:5D:A4:92:61:FB:90:1A:31:1A
Certificate issuer: /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial: 018FBFA748F76E1BB2C8A53D708C400754B7
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/1IMbVxxQaMV20B5dpJJh-5AaMRo.roa
Signing time: Tue 28 May 2024 14:42:42 +0000
ROA not before: Tue 28 May 2024 14:42:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215008
IP address blocks: 62.106.85.0/24 maxlen: 24
2a13:4ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:a7:48:f7:6e:1b:b2:c8:a5:3d:70:8c:40:07:54:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
Validity
Not Before: May 28 14:42:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4831b571c5068c576d01e5da49261fb901a311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:b8:f6:18:da:0d:a8:c6:af:04:78:49:c9:
86:10:3f:3a:23:2f:13:d7:c9:91:53:c7:3a:ba:f1:
34:fc:8a:8c:58:df:7f:ee:15:16:5e:2f:97:0e:3c:
3e:1f:1d:19:86:6c:f4:7d:eb:d9:27:7f:4d:d5:f3:
52:9c:70:13:d6:28:13:95:97:d3:5d:26:2f:09:4b:
73:34:5d:20:5a:51:90:02:ff:11:87:cd:f3:1b:35:
d7:6c:91:10:76:b4:f3:98:8c:8d:79:19:fc:d3:19:
53:f3:2d:26:68:40:65:75:12:ba:01:81:e9:e8:97:
2f:2c:41:6b:54:b9:d8:8f:67:e4:82:87:14:9a:40:
9a:45:3b:bf:9f:73:5f:39:a5:4a:98:4c:79:f4:c2:
de:1f:50:43:10:b3:45:15:fd:03:e2:c6:c0:53:3d:
d2:34:3c:a6:6e:fd:0d:13:74:10:58:a2:fd:a4:cb:
8e:c7:98:7e:b2:07:9b:43:dc:e1:ae:96:06:55:80:
46:c0:8a:91:06:b2:9d:ac:e1:bb:67:df:2b:42:2c:
3a:32:06:5f:fd:f7:6d:66:32:f3:9e:2c:1c:6f:0f:
9f:2e:c1:df:2c:91:26:b4:ce:24:dc:88:bc:2c:bc:
2e:20:7f:02:5f:0d:be:45:1e:07:7b:fd:41:99:2c:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:83:1B:57:1C:50:68:C5:76:D0:1E:5D:A4:92:61:FB:90:1A:31:1A
X509v3 Authority Key Identifier:
keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/1IMbVxxQaMV20B5dpJJh-5AaMRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.85.0/24
IPv6:
2a13:4ec0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:bd:53:c9:54:27:6e:cd:a4:0c:da:97:0e:c3:81:b3:b0:9b:
97:6a:28:ee:91:53:fa:4f:ba:92:d9:22:49:02:38:bd:99:70:
4e:4a:35:51:b8:33:f9:55:9b:97:8d:7e:95:f9:91:00:a8:fc:
ea:71:99:61:16:52:06:8c:54:e3:8d:aa:d1:51:13:d2:a8:0a:
06:5c:36:f2:c4:7e:ff:a1:29:d8:78:fc:be:33:75:54:7a:1d:
2d:d1:e9:87:a1:0c:1a:8a:49:aa:5a:93:a8:69:12:6a:00:66:
41:62:95:54:59:0d:06:ff:62:d0:af:3b:e4:9d:43:66:8e:ae:
c4:0f:86:fd:95:6e:08:35:8e:76:7d:cf:62:31:b6:1a:28:d5:
3b:47:f2:4f:83:18:99:3d:6f:da:71:0c:ed:2c:9f:bc:59:f0:
a7:bc:f6:3d:ea:53:d9:d4:e4:73:14:78:d0:06:53:a9:6c:26:
d9:7f:1e:35:2b:a2:76:96:73:3c:ad:eb:63:05:df:b4:cd:6b:
56:65:01:46:fd:54:6e:8b:70:54:9c:29:57:e8:12:32:c8:37:
0a:1c:3e:a9:f1:40:2e:c0:5f:88:97:01:78:99:00:cb:60:8d:
f5:65:d4:f4:08:7a:bc:57:23:7c:0e:b6:71:9b:44:62:fc:f8:
45:0f:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:15 2024 by rpki-client on console-fra.rpki-client.org