Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/plUb918t58zGoRY35WmjiFcrkSw.roa
File: plUb918t58zGoRY35WmjiFcrkSw.roa (raw, json)
Hash identifier: FOZeVAdk++RXLvuOgxptclbr369WfPE0SP0tyX/jsMk=
Subject key identifier: A6:55:1B:F7:5F:2D:E7:CC:C6:A1:16:37:E5:69:A3:88:57:2B:91:2C
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01928A75D8FA620C2C85EF41AF81ED7D15D1
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/plUb918t58zGoRY35WmjiFcrkSw.roa
Signing time: Mon 14 Oct 2024 09:57:11 +0000
ROA not before: Mon 14 Oct 2024 09:57:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204552
IP address blocks: 62.205.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:75:d8:fa:62:0c:2c:85:ef:41:af:81:ed:7d:15:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 14 09:57:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6551bf75f2de7ccc6a11637e569a388572b912c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:e1:50:a7:1e:5f:3d:16:64:fe:c1:5b:51:
bf:75:79:9a:77:42:f2:f2:df:c9:33:4a:84:56:04:
8c:8e:85:6f:34:67:fd:bc:7b:98:73:d6:ac:24:dd:
52:62:19:65:74:06:24:49:4b:48:1e:00:dc:ea:8a:
eb:15:04:2e:6a:ec:ed:b7:24:e7:d0:38:19:fe:7c:
72:bc:18:96:26:7c:f1:0d:a9:a9:f7:e8:41:eb:48:
3d:16:15:98:65:b4:be:5b:b0:a9:fc:bf:54:b5:86:
9a:3c:95:ad:5a:71:15:e7:22:35:db:5f:48:4f:8b:
56:37:d4:f0:f6:ca:91:5f:11:c8:9c:93:c2:9c:96:
50:b6:3f:72:c9:d0:4c:77:2c:5f:47:b8:3c:45:27:
7a:0b:b2:f4:54:af:37:f3:2a:9c:8b:a6:31:e7:7e:
28:cf:00:85:e2:16:80:52:1a:27:f7:71:f0:48:09:
2e:78:15:76:50:34:57:07:fc:35:03:35:ed:fe:98:
34:06:5d:6a:ab:c8:96:b9:32:10:26:72:f5:af:7e:
35:8d:e4:25:71:ba:c1:2c:52:2b:1b:bb:c6:81:bb:
51:e0:6c:57:d5:05:3a:c6:db:f0:2f:68:49:a6:c7:
24:e4:99:30:d2:73:b7:f2:fe:bf:1a:46:8f:78:00:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:55:1B:F7:5F:2D:E7:CC:C6:A1:16:37:E5:69:A3:88:57:2B:91:2C
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/plUb918t58zGoRY35WmjiFcrkSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.156.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5a:2c:20:98:6f:00:29:86:18:04:85:fc:9e:bc:17:9c:7c:
42:81:05:55:e4:d8:db:6a:99:4b:63:93:44:d0:88:dc:43:83:
6e:c7:00:d7:ec:26:02:8b:37:5f:3a:af:81:88:d7:6c:0a:bb:
8c:f4:77:14:a3:e4:93:bc:74:91:02:82:d0:f5:78:f3:89:53:
8a:01:64:83:6d:0e:34:90:fd:8a:17:08:f2:25:6f:77:b3:84:
24:90:84:7c:b0:8b:33:56:eb:f9:18:5c:2b:9b:5d:90:34:29:
2c:14:bb:43:a4:9e:d7:d4:5a:57:d3:93:d9:6c:2f:ce:55:d8:
f9:00:63:c3:84:27:c5:ba:38:2d:91:44:d2:85:eb:b6:58:ee:
85:ab:07:7d:74:a4:5d:92:f9:bf:26:43:90:e3:7b:6d:50:08:
71:f4:cb:69:cf:2f:94:f3:e2:65:ac:e9:57:b5:74:24:1a:5f:
54:be:7d:1b:41:4f:77:43:f8:45:9a:e7:23:ce:40:82:cd:d6:
09:93:09:11:86:07:20:8f:41:9d:26:ce:fd:a5:76:15:a2:40:
3a:d9:0d:8f:82:59:4e:79:05:4c:8a:f3:a8:83:e2:59:ba:e7:
aa:ba:21:a8:22:69:39:da:59:a0:a2:c6:d5:cc:db:96:f0:03:
25:db:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:26 2024 by rpki-client on console-ams.rpki-client.org