Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/j2Eqt8ARSWSyNSxKA2fB-X-f6G8.roa
File: j2Eqt8ARSWSyNSxKA2fB-X-f6G8.roa (raw, json)
Hash identifier: jgJSchCo9vZEUv+n3iEGT+F7xWxg5WKakc3vP0E/3s8=
Subject key identifier: 8F:61:2A:B7:C0:11:49:64:B2:35:2C:4A:03:67:C1:F9:7F:9F:E8:6F
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 01910D32489AA4B16FF3F5FCCA130047B88E
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/j2Eqt8ARSWSyNSxKA2fB-X-f6G8.roa
Signing time: Thu 01 Aug 2024 09:08:04 +0000
ROA not before: Thu 01 Aug 2024 09:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201961
IP address blocks: 62.244.102.0/24 maxlen: 24
62.244.103.0/24 maxlen: 24
62.244.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:32:48:9a:a4:b1:6f:f3:f5:fc:ca:13:00:47:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Aug 1 09:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f612ab7c0114964b2352c4a0367c1f97f9fe86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:fc:27:a3:e1:f3:65:0f:97:28:52:65:50:
9d:bb:bf:96:20:dd:37:27:bf:fa:ad:76:cf:bf:84:
6d:1a:4a:e2:28:fe:42:4b:29:37:99:bf:5b:35:e0:
54:83:83:8e:c8:7e:d1:d8:67:5e:41:16:5e:9d:19:
68:12:98:4a:46:e0:29:43:31:3a:83:65:99:f6:17:
54:46:53:8e:b8:0a:2e:c6:0d:72:53:59:ab:d9:43:
c7:2b:1e:80:5f:43:fa:52:af:95:4a:b2:42:7b:45:
32:45:41:76:c6:05:b0:04:5c:14:21:e5:b0:91:ce:
53:50:5b:9a:02:41:42:48:5b:dd:36:c0:37:90:2d:
9c:75:50:25:f0:98:a3:5a:c2:4f:05:7e:a0:8e:e6:
b1:e6:ba:48:09:97:71:ab:8d:67:e5:a2:62:df:a1:
06:d6:7b:63:a0:4c:d4:fd:7a:37:ff:d9:66:d0:52:
de:26:0c:64:b9:53:1b:56:aa:3d:35:19:8d:3e:ed:
77:6a:e4:31:8a:c6:58:01:74:62:4b:6e:72:be:d7:
df:a2:c1:c4:04:4d:9b:e2:ce:e6:3a:9b:42:4a:27:
2f:18:9d:92:17:bb:af:45:d8:54:f1:7f:1b:ab:d7:
b4:37:44:bc:02:04:fe:6a:2f:ac:2b:e0:32:d7:4a:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:2A:B7:C0:11:49:64:B2:35:2C:4A:03:67:C1:F9:7F:9F:E8:6F
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/j2Eqt8ARSWSyNSxKA2fB-X-f6G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.102.0/23
62.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cf:07:ee:21:cb:62:d3:86:a5:61:99:50:8b:00:05:2d:67:
20:5f:a3:55:3c:91:87:d3:89:b9:9b:68:39:8b:a9:a9:bf:2c:
a2:47:57:54:7e:15:85:a2:a6:3a:ed:23:b5:2a:c9:61:4e:01:
1b:9c:5b:9b:45:aa:45:ea:1b:5c:f5:2a:94:2e:92:e4:ac:36:
75:b2:35:c2:12:c3:ce:eb:27:03:a6:67:2f:fb:e3:a2:56:1a:
8f:23:ba:60:83:30:e2:42:c2:df:28:ec:7b:c9:0b:11:a8:5f:
6d:d5:aa:6f:69:0f:48:b0:ae:01:b8:24:c3:a7:07:fd:ad:6b:
0a:05:d3:27:a4:ae:69:4b:61:f2:53:62:b2:c2:90:5e:41:bc:
d3:f0:a5:6a:75:32:bd:b0:9d:62:a7:28:68:32:d4:8b:db:7e:
9a:1d:52:8c:30:ee:6b:d6:7e:39:10:b5:5b:a5:a9:14:5c:f9:
ae:9c:2a:5b:ff:9a:15:49:3b:fc:3e:2d:7d:74:e0:09:5e:4b:
a5:d6:47:6f:b7:32:1b:f4:e6:2e:20:a2:1b:fa:37:1c:df:80:
63:b7:0d:3c:13:28:db:be:84:a5:69:ce:95:78:3f:67:2e:98:
d3:83:43:f5:15:2f:cc:e0:3d:66:d5:60:72:d5:22:9b:6d:03:
e1:6f:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:16 2024 by rpki-client on console-fra.rpki-client.org