Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/E3ZQXHfWdhV3TTIcTrZX7SxG_8k.roa
File: E3ZQXHfWdhV3TTIcTrZX7SxG_8k.roa (raw, json)
Hash identifier: iyeMyGmaY2dGYI6FSAiZRCaAHXnNAybg8LrGmspIaVA=
Subject key identifier: 13:76:50:5C:77:D6:76:15:77:4D:32:1C:4E:B6:57:ED:2C:46:FF:C9
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 0192F8C2631CCD71D6D2735AD716198B4F77
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/E3ZQXHfWdhV3TTIcTrZX7SxG_8k.roa
Signing time: Mon 04 Nov 2024 19:59:01 +0000
ROA not before: Mon 04 Nov 2024 19:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214112
IP address blocks: 62.169.138.0/24 maxlen: 24
62.169.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:c2:63:1c:cd:71:d6:d2:73:5a:d7:16:19:8b:4f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Nov 4 19:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1376505c77d67615774d321c4eb657ed2c46ffc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:37:d3:e9:f3:0f:0c:2c:03:12:04:45:56:
31:15:cf:2a:d1:ff:61:d0:5f:4c:41:12:7e:95:78:
ff:b4:5f:a4:a4:ff:7c:d7:90:0f:02:2f:e9:66:93:
c3:23:fd:99:0f:d4:2b:09:b7:9b:4a:41:23:f3:e3:
e2:87:a8:1d:5f:a3:ac:e3:cd:b2:48:a6:71:5a:88:
80:81:37:7c:ab:ce:1c:7b:f4:25:a7:95:f4:d5:3d:
76:d6:f5:78:0c:d1:43:0e:fd:f8:01:f5:8e:cf:9a:
4f:57:31:d4:ac:f0:fa:e0:e5:0f:44:1e:fa:37:3b:
2e:dc:79:ad:c7:83:70:e8:e9:57:56:92:5d:b1:a4:
a1:57:4d:96:c0:c7:7d:5a:e9:ed:34:8a:ea:e7:c5:
cd:49:2e:46:45:7b:04:c6:61:c6:8a:5a:25:0e:cc:
0e:8e:46:88:54:9d:7e:b3:44:7d:5c:94:99:ef:86:
bb:4a:ae:27:58:a5:12:e4:ef:99:d5:79:76:80:a6:
a9:62:35:71:cd:6e:a0:2c:79:ac:7b:d1:6b:af:b1:
89:3f:50:c3:02:52:3a:e3:2e:04:f1:c7:e6:8e:cd:
1c:1c:bf:ab:15:70:8f:29:ed:46:8a:7b:f1:49:40:
fb:4e:5a:a7:62:d4:a8:d4:a6:54:3d:e9:3d:a8:32:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:50:5C:77:D6:76:15:77:4D:32:1C:4E:B6:57:ED:2C:46:FF:C9
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/E3ZQXHfWdhV3TTIcTrZX7SxG_8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.138.0/24
62.169.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2d:62:fc:de:4e:90:1e:15:ae:a8:36:a2:57:63:9c:73:2e:
24:4a:81:73:96:86:20:d7:86:9b:87:86:7b:81:2f:90:7f:c8:
ab:8b:24:43:a3:27:40:3f:18:2e:58:03:88:7c:ae:2c:9b:99:
cf:e1:9c:e2:51:87:4f:a8:d4:a6:dd:c1:97:06:14:fa:de:46:
7b:01:72:8f:cd:f0:de:b2:01:14:d3:d3:39:46:8e:92:98:03:
f8:58:4e:b8:f9:fc:1e:06:ec:a0:5f:d6:82:8b:37:c6:de:42:
0c:1c:03:27:eb:ef:31:53:2f:e6:fd:d9:97:af:04:6e:12:3f:
94:17:d7:30:c9:86:da:09:29:2e:63:fe:bf:05:2f:2b:13:5e:
67:2e:cb:2b:a4:a7:b3:67:72:8f:80:6e:ec:27:90:a2:43:5e:
8e:32:d8:b1:f3:c5:61:88:13:90:ae:d4:1c:22:c1:c9:54:ff:
ad:e0:b6:b8:a9:b8:46:47:1c:00:89:69:fc:47:bc:4b:4c:8a:
7f:f0:60:46:10:59:e6:42:bb:3c:58:ac:17:e8:df:07:13:62:
8a:61:56:de:b3:ba:69:11:1d:d1:a4:ea:db:30:be:54:7d:fd:
e3:2b:95:4e:53:1c:80:7e:fa:2a:34:99:b9:70:d5:fe:07:8e:
e8:ce:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:39 2024 by rpki-client on console-ams.rpki-client.org