Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/D5oPAAmD5ByypKLeDyO1Nz0HGQw.roa
File: D5oPAAmD5ByypKLeDyO1Nz0HGQw.roa (raw, json)
Hash identifier: vPqMg8jyM3FAvV6mydCXT5qVW5GRyv9raN2ZIN8UYVA=
Subject key identifier: 0F:9A:0F:00:09:83:E4:1C:B2:A4:A2:DE:0F:23:B5:37:3D:07:19:0C
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018CC87071747BCE912BF46C87395D0F34C0
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/D5oPAAmD5ByypKLeDyO1Nz0HGQw.roa
Signing time: Tue 02 Jan 2024 04:31:01 +0000
ROA not before: Tue 02 Jan 2024 04:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8764
IP address blocks: 62.122.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:71:74:7b:ce:91:2b:f4:6c:87:39:5d:0f:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 2 04:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f9a0f000983e41cb2a4a2de0f23b5373d07190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:e0:7c:6e:12:11:9e:cd:0f:1e:71:67:a5:
cd:6e:57:3e:9a:7c:fd:93:98:5c:59:c0:60:6b:c2:
33:a7:f1:67:df:cd:11:0b:6f:d1:89:cf:10:0c:c1:
53:3a:85:42:1d:9d:bf:db:57:49:92:6d:b2:05:71:
91:22:d4:83:db:31:51:a6:99:cd:61:68:23:96:86:
48:b2:16:6a:76:b6:20:38:bd:ba:24:81:76:8a:a3:
d8:35:6f:53:98:41:c6:ef:08:59:65:7a:65:ba:e4:
11:48:65:63:91:ee:bb:87:58:4e:1c:87:81:b2:19:
aa:ae:57:f9:c3:c0:50:3a:00:d0:6e:53:d5:ae:c2:
0b:36:e3:6f:fd:84:89:08:15:dd:78:a1:a0:b7:e3:
89:b8:f6:33:40:2a:65:3a:b9:ec:86:a6:ec:a2:03:
5c:29:7c:db:6f:67:a4:5d:01:be:52:b4:f4:4c:0a:
43:b3:38:17:8c:00:4f:57:7f:7a:ab:dc:4c:a3:2b:
0a:13:5a:de:fc:79:cc:6d:a1:47:db:c6:76:8a:ab:
fc:5c:92:94:d9:09:fb:a2:c5:5e:da:ab:74:4f:dc:
73:35:cf:e2:c8:09:ee:81:bf:58:73:4e:37:5c:a0:
2f:e6:d5:21:02:6c:4b:fd:ef:32:34:96:b9:bb:1a:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9A:0F:00:09:83:E4:1C:B2:A4:A2:DE:0F:23:B5:37:3D:07:19:0C
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/D5oPAAmD5ByypKLeDyO1Nz0HGQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.76.0/22
Signature Algorithm: sha256WithRSAEncryption
66:6e:6d:7b:37:44:f1:03:24:2a:20:20:c9:8c:61:21:f1:01:
6f:1a:52:fc:1b:6a:7a:d4:70:37:d0:c6:ad:f5:dc:2c:0c:10:
4b:3c:6b:ad:d5:8a:5b:3b:64:b7:03:40:80:7d:56:28:44:c6:
34:58:91:3b:f0:46:fc:8f:aa:99:89:01:fc:22:5d:83:6d:a7:
5c:9a:ce:c4:72:66:ea:5c:e0:e1:9b:d0:8f:31:fe:e4:aa:ef:
00:2f:31:09:8b:a6:5a:eb:3f:f6:cf:37:a4:2d:ad:12:b3:19:
3a:e7:ef:d2:cf:a1:38:57:af:db:91:ea:36:19:57:14:a5:9b:
9f:22:d9:87:d4:f9:36:6e:42:c6:eb:56:b1:75:a7:39:d1:0d:
e1:a7:1d:b6:4a:c1:d3:65:85:76:96:9e:38:b1:6c:96:f7:96:
15:e7:0b:bf:fd:5e:cb:78:fd:fe:f5:b6:b0:5d:16:4f:24:78:
3a:00:4e:b1:da:71:bf:05:4d:61:88:aa:31:92:12:36:73:15:
06:c2:b8:34:63:c1:60:8d:f2:4c:a1:dc:5b:ab:b1:76:0f:f4:
73:23:8a:30:12:c5:0d:50:69:b8:70:3d:43:a7:84:ed:4d:56:
f7:71:aa:1e:7a:1f:81:58:75:84:e8:7d:5c:ba:65:0c:cd:e0:
2f:83:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:28:04 2024 by rpki-client on console-ams.rpki-client.org