Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A62QVzOACBet3z_7ZjqVDA7q9qU.roa
File: A62QVzOACBet3z_7ZjqVDA7q9qU.roa (raw, json)
Hash identifier: sg262i2xlTjTv74C6EqsBw+RttfvodZKo4XbjQcROL0=
Subject key identifier: 03:AD:90:57:33:80:08:17:AD:DF:3F:FB:66:3A:95:0C:0E:EA:F6:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A7F301EAE0C79A152DD2EC81773DF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A62QVzOACBet3z_7ZjqVDA7q9qU.roa
Signing time: Tue 02 Jan 2024 12:33:51 +0000
ROA not before: Tue 02 Jan 2024 12:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151633
IP address blocks: 212.192.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7f:30:1e:ae:0c:79:a1:52:dd:2e:c8:17:73:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03ad905733800817addf3ffb663a950c0eeaf6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bb:ae:09:a4:f6:a4:34:2e:03:e9:37:a9:82:
db:bb:94:fe:04:b9:21:33:dd:e4:1d:2b:78:53:58:
8d:b0:72:7c:63:28:12:ab:02:37:29:fa:75:02:27:
37:40:6f:a1:47:e4:dc:36:36:de:44:82:72:af:b0:
35:65:ed:72:c0:c5:d6:47:49:f7:41:91:5c:5e:0d:
86:08:a5:df:c4:f3:f1:7f:33:c3:3b:92:1d:0a:1f:
89:07:ef:30:d6:5e:88:cf:e4:bb:28:bb:1c:4d:c2:
15:fe:b0:2e:e6:a2:40:70:75:6d:89:48:b7:03:13:
9f:d4:3b:09:ef:03:72:43:55:83:a5:e3:85:30:b6:
99:42:6d:2a:97:fb:10:6d:94:4f:a9:86:a3:b3:9e:
88:ca:f0:64:0d:ce:23:ac:43:78:50:cc:c7:27:2f:
f3:4e:8a:22:8a:1e:fa:46:11:e5:39:b0:c9:b2:85:
8d:20:4c:af:02:28:8c:f3:97:48:0e:95:f5:03:d0:
a2:20:20:1a:a7:8a:2d:b8:60:8f:0e:9f:2f:33:72:
78:c4:3c:00:bd:8c:16:e9:4e:55:1e:be:2e:b0:7c:
23:94:36:6e:6c:71:a0:1b:9e:8a:7b:a8:7b:34:75:
b5:da:ce:08:61:78:84:82:c3:be:8f:78:e1:34:58:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AD:90:57:33:80:08:17:AD:DF:3F:FB:66:3A:95:0C:0E:EA:F6:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/A62QVzOACBet3z_7ZjqVDA7q9qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.249.0/24
Signature Algorithm: sha256WithRSAEncryption
82:03:d6:4f:7b:ae:f4:79:6e:4c:13:9a:30:7b:58:55:4f:4d:
dc:d7:f5:12:0b:5c:b2:38:7f:82:10:a8:7b:48:06:ef:82:f3:
93:ae:0d:c0:07:40:4e:be:79:4c:79:14:b4:66:c0:c4:0f:f9:
31:87:73:db:a0:9c:b2:bf:df:f4:09:10:77:d0:81:da:36:3e:
ca:fc:0a:cc:dd:37:8b:b7:33:ab:10:10:f1:00:dd:61:6c:ea:
63:a1:57:a0:50:b8:a4:2c:02:67:c3:cb:e8:9d:a7:0e:d3:72:
d8:8f:c2:e1:d1:72:c9:25:59:5c:15:68:8f:e5:a5:12:b7:62:
a7:b7:bd:4c:85:ba:cf:49:94:b6:8d:77:f4:4d:2a:ff:52:58:
7b:8b:85:b3:ed:d7:37:8f:8f:1a:66:55:d1:72:a0:87:2d:8d:
78:86:21:c6:9b:47:89:27:57:26:43:d2:65:34:83:b4:55:94:
84:22:d7:46:aa:0f:4a:4d:29:4c:56:50:7b:0d:8c:bf:d9:b4:
d9:01:b3:ca:68:53:be:b3:73:6f:4c:73:4f:9f:a8:1b:68:dd:
9f:57:10:6f:10:9b:f0:17:5f:ec:a6:7b:e6:ed:b0:ef:66:6e:
26:90:0a:0b:f0:a5:51:fe:0b:0b:72:5d:e7:67:2a:c4:b0:5c:
2e:f8:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:32 2024 by rpki-client on console-ams.rpki-client.org