Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Qh-yv3ZXe0bkFuxPo3uWeb7ID9k.roa
File: Qh-yv3ZXe0bkFuxPo3uWeb7ID9k.roa (raw, json)
Hash identifier: O4MW05JW3NfZQxJtESTcdoMHXh17ar9U1zE8s0ozua8=
Subject key identifier: 42:1F:B2:BF:76:57:7B:46:E4:16:EC:4F:A3:7B:96:79:BE:C8:0F:D9
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018FE2F8CEF21B8359F56C95E82F6BF50AC3
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Qh-yv3ZXe0bkFuxPo3uWeb7ID9k.roa
Signing time: Tue 04 Jun 2024 11:18:27 +0000
ROA not before: Tue 04 Jun 2024 11:18:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 62.100.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:f8:ce:f2:1b:83:59:f5:6c:95:e8:2f:6b:f5:0a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jun 4 11:18:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=421fb2bf76577b46e416ec4fa37b9679bec80fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:b3:fd:fb:dd:97:8e:b9:9a:4a:f1:40:db:
f4:e8:65:98:d7:d2:5a:4a:58:bf:8b:81:4e:a4:8e:
c4:62:3b:57:a3:ae:7e:b3:1f:0b:61:c9:45:c7:2f:
f4:45:6e:e2:18:3b:2e:1e:fe:e3:7d:65:e8:f6:8b:
f0:bd:22:10:ca:b3:e5:63:ee:91:c4:d1:77:5a:c3:
c9:a0:41:1c:a6:f2:9b:d7:97:a8:3f:65:d9:dd:a6:
d2:db:02:7e:ad:de:9d:9e:82:c7:e1:d7:04:cf:8d:
62:1f:fa:e0:ab:3e:65:8d:ed:1a:5f:30:fc:f5:e2:
8f:78:f0:29:2b:55:3b:b5:d7:c3:8f:83:4b:13:db:
0d:d1:36:b4:20:3d:b3:12:d9:57:8d:ae:75:b9:5d:
8b:85:c3:94:aa:3c:65:38:42:37:5d:49:8b:e7:7e:
7a:70:d4:38:cf:87:35:8e:cb:2f:90:8a:48:49:99:
ed:26:f9:9d:ac:5c:81:a1:70:9a:27:18:ef:1e:24:
dd:8e:ad:60:a2:90:40:2f:1f:11:52:fa:e4:f5:87:
40:c8:fe:0d:e5:20:83:5b:14:b3:b5:15:1b:af:8d:
b7:85:ad:2f:01:87:eb:78:6f:9d:5b:fb:13:c3:10:
93:5e:54:6a:f8:1f:f5:6e:e0:fd:9d:fe:c7:ff:84:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:B2:BF:76:57:7B:46:E4:16:EC:4F:A3:7B:96:79:BE:C8:0F:D9
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Qh-yv3ZXe0bkFuxPo3uWeb7ID9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4e:77:01:ed:04:ac:bb:ed:12:91:03:46:03:e8:c4:28:c7:
eb:76:65:34:7a:a5:7f:d7:e2:eb:f0:3c:de:17:fd:52:10:0b:
93:86:bc:9a:1b:33:88:a1:31:d6:b3:d4:74:f5:bd:ba:1f:1c:
a6:bc:3d:89:21:fe:ce:a2:83:10:58:47:ea:a9:05:4e:5d:e2:
ab:91:71:d4:dc:81:01:d8:59:02:08:bb:4e:d2:04:bb:30:70:
a1:df:b5:f6:58:8d:a2:ab:8e:a0:08:e1:89:3e:b5:70:77:3d:
59:8e:48:bd:7b:4b:ae:ee:6f:b8:56:0f:af:58:a5:c0:45:66:
f5:7c:99:49:f0:72:67:cf:f2:a7:06:8e:16:3b:18:cd:ca:c9:
e7:94:6f:8b:95:8f:66:b0:ad:0d:a7:06:a2:9d:55:bd:85:6c:
dc:9a:f5:bb:04:4e:be:ba:33:b8:ea:56:a0:59:2e:90:6e:b1:
14:04:8f:3b:46:54:e3:10:3a:ad:20:22:fc:64:48:e0:70:56:
7b:01:f7:df:27:f5:6e:85:95:82:36:4e:52:45:64:4a:17:90:
19:b8:21:35:1d:78:7d:5d:a9:fc:3c:9c:11:db:9b:10:f3:f0:
57:16:01:43:0c:2a:b1:10:3d:b3:18:0d:34:9a:c0:26:c0:42:
55:c0:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:43:18 2024 by rpki-client on console-fra.rpki-client.org