Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/l_cy48fG3RDeWnszp00XfJkY0HI.roa
File: l_cy48fG3RDeWnszp00XfJkY0HI.roa (raw, json)
Hash identifier: SNhezz2BEz6zr9QlCwil6tTNQwFI8Q4/O4doEQsLFVU=
Subject key identifier: 97:F7:32:E3:C7:C6:DD:10:DE:5A:7B:33:A7:4D:17:7C:99:18:D0:72
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B93250D4F04022AEADD163972FBE6E
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/l_cy48fG3RDeWnszp00XfJkY0HI.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38920
IP address blocks: 62.244.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:32:50:d4:f0:40:22:ae:ad:d1:63:97:2f:be:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97f732e3c7c6dd10de5a7b33a74d177c9918d072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:3c:a4:cf:c1:2c:91:ce:54:11:a4:75:4a:
da:24:88:a2:47:8e:b7:cb:c2:35:25:ba:dd:35:7e:
e5:06:fb:34:c0:16:56:08:08:18:00:6f:e6:dc:76:
4e:50:14:4b:ae:2a:7a:75:41:94:b1:0f:b5:ee:fa:
3c:07:b0:78:eb:ec:0c:53:a4:83:91:7a:98:66:db:
8f:2d:63:7a:d6:a1:6d:11:9e:e4:d8:a3:78:a8:f6:
d2:07:10:d5:02:0d:42:5e:dc:28:7b:e6:8e:16:b5:
24:9c:fc:d8:06:8b:fa:ed:77:92:40:48:a4:6e:3c:
4f:d2:49:f5:64:b5:da:b6:0f:f3:26:b2:59:d1:06:
e1:77:7f:94:b3:e1:b7:40:89:8a:39:1a:f8:d8:73:
96:e2:36:08:bc:ca:27:b4:24:d0:86:b3:15:58:bc:
21:83:46:40:0f:a9:af:75:54:d1:69:39:30:7e:ff:
4a:75:5b:19:db:13:15:19:b2:75:81:68:19:79:bd:
c4:c5:56:c6:12:16:a7:e4:9e:bc:6b:98:bc:50:76:
3f:bd:ba:a1:17:79:d8:e6:ae:48:5a:5f:6a:75:6b:
95:40:52:3d:ed:4b:3e:23:93:c6:a0:ca:44:70:07:
55:fb:6c:1c:bd:47:25:52:d5:23:78:dc:e0:23:51:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:32:E3:C7:C6:DD:10:DE:5A:7B:33:A7:4D:17:7C:99:18:D0:72
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/l_cy48fG3RDeWnszp00XfJkY0HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7f:d2:2b:63:12:6e:2e:96:2d:73:b0:c2:f5:fa:df:3c:10:
12:7b:4b:12:a9:54:48:3a:d2:08:78:5f:15:82:df:4f:7e:ad:
bd:ec:82:a4:1e:70:c6:50:c7:f0:45:ff:2f:14:4f:8d:2d:6a:
88:00:5b:e6:50:7f:ae:c1:80:cc:39:e8:49:f2:2e:0e:63:14:
ac:79:33:53:8a:0c:76:98:53:80:4e:82:0a:91:72:48:ec:4d:
a4:df:04:f6:0c:4b:45:0c:c6:8a:14:6a:55:1b:7e:67:7b:97:
e5:0b:f8:76:13:9c:09:c9:8b:1a:48:52:4d:66:9a:40:96:6a:
0c:ca:a6:92:a5:9c:11:81:a3:67:3c:dd:bc:51:3a:e5:76:1a:
9d:f5:8f:11:37:54:f7:ac:98:5b:2a:83:e6:e9:d7:c4:2f:57:
12:8b:b3:48:c6:7c:f7:58:5b:81:a8:d6:e1:5f:3c:40:f9:3e:
22:6c:21:48:ae:70:5d:90:2c:49:de:77:b1:98:51:3f:4c:99:
3b:95:2c:a1:12:44:1b:23:88:e1:30:e7:15:5d:26:db:b8:1a:
52:cd:e6:56:9c:70:5c:db:59:dc:8a:aa:90:79:51:b4:84:61:
02:91:ab:37:68:e7:e7:f6:af:4a:79:d2:1a:40:cd:45:a0:9c:
b1:f7:e0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:49:32 2024 by rpki-client on console-fra.rpki-client.org