Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/A6I2zW816YFefNMSOw_bHGwIbks.roa
File: A6I2zW816YFefNMSOw_bHGwIbks.roa (raw, json)
Hash identifier: 4XZRkLz+Eyzm/SB6nVPbuJ3edvxFStWQoqogA90sv2g=
Subject key identifier: 03:A2:36:CD:6F:35:E9:81:5E:7C:D3:12:3B:0F:DB:1C:6C:08:6E:4B
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 018CC26D28DF65D52B8EA7F270389A5920CB
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/A6I2zW816YFefNMSOw_bHGwIbks.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9112
IP address blocks: 62.3.160.0/19 maxlen: 19
2001:808::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:df:65:d5:2b:8e:a7:f2:70:38:9a:59:20:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03a236cd6f35e9815e7cd3123b0fdb1c6c086e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:6d:0f:94:80:14:14:0a:d3:b2:91:1e:27:
a4:9b:3e:4c:3d:14:d9:67:e4:d7:9a:8d:ed:65:95:
0d:05:47:eb:c5:4d:b5:9d:82:7e:9a:5f:06:54:d4:
4e:2e:36:fd:85:91:e8:90:f0:24:d9:71:c8:44:77:
f5:59:59:2a:28:2d:83:8f:37:44:2b:06:9e:db:99:
63:43:a7:38:45:48:91:a7:4f:75:4d:6d:6a:b1:57:
68:8d:36:4a:fe:16:f4:19:ca:96:9b:0f:14:17:88:
b1:ad:0b:de:4c:bc:3b:7a:f4:a6:7d:c8:e5:b8:60:
b6:0a:1a:1a:d6:e0:44:44:eb:ad:5b:97:bd:c3:e4:
8a:ed:66:68:20:73:0d:60:e8:18:b8:29:8a:90:fb:
06:86:a9:f7:ae:6e:d6:8f:9d:bf:ea:f6:40:98:e5:
4d:66:75:25:ab:6f:c3:09:bf:60:3c:bd:a4:2c:cc:
ea:07:44:f9:c0:4b:8e:88:47:9e:26:70:c3:82:3f:
5e:a4:f1:2d:50:02:0b:d7:e4:c9:b5:77:ef:cf:5f:
41:18:ad:b2:db:92:9e:c4:86:44:f2:3d:50:5b:ff:
89:bd:83:d7:cf:31:e1:d6:bc:39:d2:6f:bc:67:ae:
6c:c4:fc:38:50:21:c7:06:91:4b:f0:84:1e:a5:4d:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:36:CD:6F:35:E9:81:5E:7C:D3:12:3B:0F:DB:1C:6C:08:6E:4B
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/A6I2zW816YFefNMSOw_bHGwIbks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.160.0/19
IPv6:
2001:808::/35
Signature Algorithm: sha256WithRSAEncryption
1e:e9:b8:b5:50:55:02:ce:08:aa:a2:5b:7b:f6:f2:c1:e2:67:
68:c7:78:20:f7:d8:d6:d4:83:89:3f:d4:6c:56:1c:03:72:df:
b5:cb:54:3c:f2:2c:95:9e:50:cf:67:6f:dd:01:86:dc:28:21:
fa:db:50:5f:74:fa:bc:bd:f5:c0:6c:50:30:36:52:ac:14:67:
c0:75:2b:9f:82:82:fb:a3:e6:fa:7e:a0:84:2c:1b:22:6b:2a:
97:4f:fa:81:6f:d6:b1:d4:6f:07:bc:6b:cc:96:b9:44:a4:01:
18:21:14:ee:a1:22:84:ba:bb:72:be:08:b5:b4:33:74:d3:ee:
61:b9:3d:e1:87:15:8a:d5:f2:33:0e:2f:95:4b:4d:33:89:29:
1a:1b:0c:89:37:7e:ab:a5:e8:25:cd:3b:ee:fc:8f:df:e4:10:
21:2d:c0:ce:47:40:d1:fb:e0:6e:3e:4b:19:9d:86:51:35:fd:
e1:69:80:85:ce:19:91:e8:a1:f9:7b:4b:47:f1:c4:6f:40:08:
db:44:ee:95:12:9c:3b:ed:2f:a4:6b:46:f5:2c:22:1e:df:93:
0d:ba:41:a1:4d:54:78:6b:56:14:10:44:15:f5:90:b1:b2:6d:
e6:5d:16:97:b6:68:60:3d:fa:a9:44:59:d2:be:3c:7c:5e:6c:
56:5a:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:49:54 2024 by rpki-client on console-fra.rpki-client.org