Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86HQIVsEJmwyedDwhMW1-ySjRuU.roa
File: 86HQIVsEJmwyedDwhMW1-ySjRuU.roa (raw, json)
Hash identifier: uWs9iJDrNKaWPV7UT5aC0fJ1AHmrfCLT7Ez3KmiadgY=
Subject key identifier: F3:A1:D0:21:5B:04:26:6C:32:79:D0:F0:84:C5:B5:FB:24:A3:46:E5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D798B67C93C4399275C9124B7A723FB15
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86HQIVsEJmwyedDwhMW1-ySjRuU.roa
Signing time: Mon 05 Feb 2024 13:53:15 +0000
ROA not before: Mon 05 Feb 2024 13:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44547
IP address blocks: 62.76.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:8b:67:c9:3c:43:99:27:5c:91:24:b7:a7:23:fb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 5 13:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3a1d0215b04266c3279d0f084c5b5fb24a346e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:c9:cc:2a:15:57:a2:6d:de:13:0e:83:6e:
ff:c5:bc:02:ad:d2:89:23:a3:c0:38:01:31:bf:a7:
34:6d:64:3a:cb:f9:c8:4d:e2:06:4b:04:5b:77:34:
ec:69:31:c0:34:6d:46:f1:30:73:f8:aa:f1:5a:81:
b8:2d:47:97:c3:85:a0:9f:7d:00:73:a9:ce:54:54:
df:80:ec:ed:13:3d:11:52:5c:7b:87:7f:e3:a8:f9:
85:c0:59:22:02:ed:ec:94:84:ff:7c:ba:5f:3a:c2:
9b:ef:4c:ad:7c:79:3a:06:01:5f:94:4d:8a:a6:bc:
81:f1:ce:f7:e2:b4:60:1a:68:f4:c2:34:12:f4:61:
c7:52:03:22:29:ef:2c:cd:6e:60:f4:21:fb:e1:b4:
9b:f8:f0:81:59:48:c2:99:10:40:d5:5a:1e:e0:79:
fa:df:22:1d:e1:62:d4:a9:db:c8:1d:3c:f7:df:22:
fb:77:e1:0b:0d:3a:06:c0:1f:e7:00:66:83:c1:ce:
7d:4f:b9:2e:7c:8b:0e:7d:3e:33:24:23:60:94:55:
28:a7:67:11:b6:58:e1:e5:51:92:b2:b0:8f:34:50:
22:a1:cf:2b:00:cc:c9:49:2a:92:83:70:33:31:e0:
ce:a3:55:0d:c9:32:b2:fb:b1:7e:ce:cb:7b:86:75:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:D0:21:5B:04:26:6C:32:79:D0:F0:84:C5:B5:FB:24:A3:46:E5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86HQIVsEJmwyedDwhMW1-ySjRuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:08:cf:e2:7c:75:e6:ce:1b:7e:7a:60:ff:ac:be:ef:32:30:
0d:a9:34:06:d5:78:97:e7:5d:9d:b6:0f:c3:10:f0:bd:30:ef:
bf:4f:90:c2:bf:77:3a:0d:e2:48:8a:f0:83:20:a9:3b:c1:d6:
39:78:05:28:f8:56:be:b7:8c:32:56:78:62:69:75:1b:69:cc:
6f:91:2d:e1:53:37:8f:78:85:a3:f4:41:13:17:53:9e:30:c9:
0e:15:b0:db:e3:68:5f:35:76:fd:12:72:7b:77:3e:56:cd:2b:
57:ac:d9:c9:c3:1c:cd:40:0e:db:62:b4:a6:8e:6d:70:e3:fc:
7c:07:21:c6:60:b9:99:4e:3e:e5:85:90:40:15:a4:14:e4:7d:
26:f8:48:a4:ce:25:37:aa:cb:ba:0d:4f:2f:7c:e9:f7:bd:15:
1e:d0:de:6f:98:57:bf:78:c0:d1:27:66:64:e6:69:ec:f0:0f:
09:33:10:7e:0c:a8:09:de:a9:8e:6c:1e:b4:f4:5e:5e:07:19:
62:ab:f0:c0:38:ef:c7:16:65:e7:27:56:8f:31:02:98:7b:6f:
f6:a7:09:92:29:bc:aa:07:c4:e4:33:05:10:bc:0d:82:6c:38:
bd:e9:3f:08:3a:17:e8:c4:98:67:6c:5f:e9:32:e1:f7:4e:a7:
f3:a4:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:34:10 2024 by rpki-client on console-fra.rpki-client.org