Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/28cdiR3CLgOqiSwLV0B5zUDBpss.roa
File: 28cdiR3CLgOqiSwLV0B5zUDBpss.roa (raw, json)
Hash identifier: QP9up7+up0+Rl7/oskr9BD904btbLIzcSG1NVHpTAIQ=
Subject key identifier: DB:C7:1D:89:1D:C2:2E:03:AA:89:2C:0B:57:40:79:CD:40:C1:A6:CB
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018CC8013899125DAE7A49AEAC7978FEC3F1
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/28cdiR3CLgOqiSwLV0B5zUDBpss.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398395
IP address blocks: 62.204.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:38:99:12:5d:ae:7a:49:ae:ac:79:78:fe:c3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbc71d891dc22e03aa892c0b574079cd40c1a6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:dd:fa:27:3b:ed:36:b0:a5:13:99:d3:a1:
1c:07:7f:ef:8f:cb:2d:da:11:be:58:c3:e2:27:b7:
ca:b1:1c:7d:4e:cf:da:a9:16:52:26:eb:65:bc:3e:
9c:a0:63:f0:f5:e2:26:67:f2:b1:52:11:68:6c:48:
62:3e:6c:e9:64:08:6c:ff:8f:92:b1:b2:bf:d7:a1:
4f:99:29:18:28:1c:b0:48:70:09:b3:42:af:d4:bb:
92:85:9b:88:f7:6b:08:c2:2e:3f:0a:99:2f:a7:4a:
0f:47:16:88:96:b8:c0:76:cd:6f:68:ae:85:5c:03:
0b:8c:eb:7d:09:99:86:0d:12:58:b0:67:38:37:2c:
6d:93:68:0f:63:88:b9:be:16:e1:17:b0:2a:7a:38:
cd:6a:9d:82:72:72:c4:e3:e5:5c:0d:b0:4f:4b:79:
57:83:7f:5f:50:89:bc:a7:5d:66:f9:9d:01:2e:97:
c0:e2:89:4b:51:b7:53:31:33:f7:a6:3e:a5:e9:21:
af:43:97:d0:f4:83:77:ad:98:05:4a:da:d9:94:fd:
04:86:46:da:b9:d9:b7:97:f0:70:04:c6:4e:ec:09:
10:2a:12:0a:84:2c:31:be:e3:04:26:20:fa:72:e1:
b1:e9:ac:aa:20:fd:0b:16:5f:e0:a2:dc:75:fa:9b:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:1D:89:1D:C2:2E:03:AA:89:2C:0B:57:40:79:CD:40:C1:A6:CB
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/28cdiR3CLgOqiSwLV0B5zUDBpss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:6a:78:90:ec:d4:70:ba:80:b2:3b:ec:a9:aa:99:aa:1c:8e:
fb:42:da:89:50:97:bf:20:f4:36:d8:8a:f9:a1:0d:42:40:cc:
cf:77:85:bf:f3:c0:6e:2b:57:ad:9a:94:22:4b:6e:80:00:92:
56:db:b3:61:f1:74:04:66:41:a4:5e:a6:82:c7:65:ce:a3:80:
36:1a:92:86:b0:90:9e:bd:bb:c2:b5:84:36:e2:72:f3:dc:5b:
9a:40:45:02:95:9b:27:d2:f8:2a:6b:38:60:49:4b:23:95:1e:
c1:f7:c5:31:d3:ad:ca:4b:c5:8b:9b:a7:b3:2c:13:ae:77:63:
64:ec:17:3e:a7:c3:f9:91:b3:97:79:95:fa:62:4f:ae:ed:57:
96:f4:d7:70:03:7d:6c:86:93:e2:ab:16:ee:6f:f4:d3:d1:5c:
a6:15:a7:3b:c6:2e:b8:fe:f6:25:42:41:47:f3:84:a8:42:21:
b6:dc:7c:4a:11:3e:cb:73:f4:3b:0d:e7:f5:ee:89:24:bf:84:
8e:e6:21:cc:c5:0d:2c:2a:2a:07:42:cb:21:ad:5c:93:4e:48:
5d:47:4b:cd:a9:8f:d5:ea:10:d3:5a:b6:cf:59:ea:d6:84:fc:
3d:49:54:08:06:8f:b2:04:b3:91:e1:2a:bb:7c:75:99:5b:d3:
4a:dc:16:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIATiZEl2uekmurHl4/sPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjIxM2JmMTYyNzU0OGVmZGZiMWIyZTI2NDViYWFmMWQ5
ODNhYTAwHhcNMjQwMTAyMDIyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmM3MWQ4OTFkYzIyZTAzYWE4OTJjMGI1NzQwNzljZDQwYzFhNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLd+ic77TawpROZ06EcB3/vj8st
2hG+WMPiJ7fKsRx9Ts/aqRZSJutlvD6coGPw9eImZ/KxUhFobEhiPmzpZAhs/4+S
sbK/16FPmSkYKBywSHAJs0Kv1LuShZuI92sIwi4/Cpkvp0oPRxaIlrjAds1vaK6F
XAMLjOt9CZmGDRJYsGc4Nyxtk2gPY4i5vhbhF7AqejjNap2CcnLE4+VcDbBPS3lX
g39fUIm8p11m+Z0BLpfA4olLUbdTMTP3pj6l6SGvQ5fQ9IN3rZgFStrZlP0Ehkba
udm3l/BwBMZO7AkQKhIKhCwxvuMEJiD6cuGx6ayqIP0LFl/gotx1+pta+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNvHHYkdwi4DqoksC1dAec1AwabLMB8GA1UdIwQY
MBaAFIiyE78WJ1SO/fsbLiZFuq8dmDqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxJVHZ4WW5WSTc5LXhzdUprVzZyeDJZT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zYzAyNjktYzE5NC00ZTZkLWFiY2Ut
NzI3MzVlMTE4ZDUxLzEvMjhjZGlSM0NMZ09xaVN3TFYwQjV6VURCcHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zYzAyNjktYzE5NC00ZTZkLWFiY2UtNzI3MzVlMTE4ZDUx
LzEvaUxJVHZ4WW5WSTc5LXhzdUprVzZyeDJZT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPswlMA0G
CSqGSIb3DQEBCwUAA4IBAQC5aniQ7NRwuoCyO+ypqpmqHI77QtqJUJe/IPQ22Ir5
oQ1CQMzPd4W/88BuK1etmpQiS26AAJJW27Nh8XQEZkGkXqaCx2XOo4A2GpKGsJCe
vbvCtYQ24nLz3FuaQEUClZsn0vgqazhgSUsjlR7B98Ux063KS8WLm6ezLBOud2Nk
7Bc+p8P5kbOXeZX6Yk+u7VeW9NdwA31shpPiqxbub/TT0VymFac7xi64/vYlQkFH
84SoQiG23HxKET7Lc/Q7Def17okkv4SO5iHMxQ0sKioHQsshrVyTTkhdR0vNqY/V
6hDTWrbPWerWhPw9SVQIBo+yBLOR4Sq7fHWZW9NK3BaV
-----END CERTIFICATE-----
Generated at Fri May 3 23:59:43 2024 by rpki-client on console-ams.rpki-client.org