Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/213hPm3rntXZnFqf0ArcGKBPHSQ.roa
File: 213hPm3rntXZnFqf0ArcGKBPHSQ.roa (raw, json)
Hash identifier: ZlnzIlTjmXnGBAlCiPLKLDwIaSNrpwUHnTnA9jyzafg=
Subject key identifier: DB:5D:E1:3E:6D:EB:9E:D5:D9:9C:5A:9F:D0:0A:DC:18:A0:4F:1D:24
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 018CC64ABE3175F041FBD69FE149A9DD28E3
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/213hPm3rntXZnFqf0ArcGKBPHSQ.roa
Signing time: Mon 01 Jan 2024 18:30:36 +0000
ROA not before: Mon 01 Jan 2024 18:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208432
IP address blocks: 62.122.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:be:31:75:f0:41:fb:d6:9f:e1:49:a9:dd:28:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Jan 1 18:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db5de13e6deb9ed5d99c5a9fd00adc18a04f1d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:94:cc:00:a6:3e:50:60:b5:78:c9:18:55:
26:28:73:6b:93:de:eb:79:de:39:3a:b1:50:9d:91:
db:55:4d:3a:92:87:6d:99:98:30:3b:21:98:f5:92:
25:d5:af:2e:55:7d:a9:6b:a2:26:3e:6d:5f:e3:63:
b0:c3:90:5f:7e:0f:ee:50:5a:a5:43:19:59:79:2c:
c2:f5:80:80:bb:34:13:7e:a9:b9:22:e3:92:c8:95:
f8:d8:33:84:4e:3b:2b:6a:e3:1a:4f:fd:55:15:6a:
63:af:49:16:4c:6f:de:6a:2d:ea:05:6a:1f:e5:aa:
42:24:0b:c9:e8:8a:21:e7:50:20:83:33:34:98:16:
81:52:1d:3e:c3:b6:66:3f:12:7e:86:d6:d7:a8:0d:
ee:dc:3b:91:61:36:8d:b3:12:33:11:c9:ba:4f:05:
78:63:8f:24:e8:dd:66:45:c5:6b:27:12:31:15:7c:
71:e6:63:45:01:29:5c:ab:68:24:e8:8d:fa:f0:e8:
11:b8:5f:83:48:84:6e:65:eb:d9:15:5e:dc:4a:ce:
ec:10:33:7d:4d:ae:77:52:f2:e0:cd:94:73:bc:6c:
b4:9b:a8:40:41:c3:f5:c9:86:0f:a5:7b:11:f0:4b:
5d:14:32:52:b0:0f:54:0b:dc:40:07:06:5c:61:1e:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5D:E1:3E:6D:EB:9E:D5:D9:9C:5A:9F:D0:0A:DC:18:A0:4F:1D:24
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/213hPm3rntXZnFqf0ArcGKBPHSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.72.0/22
Signature Algorithm: sha256WithRSAEncryption
95:8b:dd:b1:ef:2b:a1:3b:ed:df:74:c3:2f:a5:e9:92:de:db:
63:ca:0a:8e:ee:16:1f:67:1b:19:09:02:5a:00:81:9e:5b:0f:
9b:06:e6:33:bc:8b:55:12:88:2f:23:75:83:16:95:35:db:0d:
0d:0f:f5:e0:cb:e4:3e:d1:1a:f8:e0:34:aa:81:b9:26:50:a4:
b8:60:4e:b6:74:6a:74:a1:75:b9:64:fd:c0:d2:fd:5a:26:9a:
08:ca:49:12:3d:d4:6f:d0:42:6f:a6:b7:5d:e7:cc:62:1e:cd:
97:f5:83:03:9d:cf:2f:ba:5f:2b:6a:6c:39:0f:27:a0:c8:5f:
85:58:58:7e:73:1c:2d:30:d0:6d:3d:76:9a:ee:5f:17:d1:49:
40:76:c0:7e:ec:6e:57:bf:53:6c:67:96:9c:99:8e:fd:4b:d4:
83:5b:b9:a6:ec:a0:ba:e0:3c:b1:61:c0:68:bd:cd:89:dd:86:
bd:b6:c8:e3:a1:ed:f3:12:ac:3b:f7:02:47:44:f6:a9:85:75:
0c:3e:d3:7b:96:96:6d:0a:c3:f4:da:b8:f8:93:2a:cd:5b:ab:
ba:66:fe:86:45:45:cc:bf:0c:80:09:c6:d3:f4:ab:6e:29:e2:
c0:60:21:c2:90:0a:5e:8d:12:27:5a:36:b4:6a:b8:98:66:3f:
fb:22:48:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:02:37 2024 by rpki-client on console-fra.rpki-client.org