Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/WOAqX6RHnb8d7-zv5b4La1rrMn8.roa
File: WOAqX6RHnb8d7-zv5b4La1rrMn8.roa (raw, json)
Hash identifier: ALjPM9P8L2XAWYXfvG32lKJaYFzKaGPvXMmI/wv1rWA=
Subject key identifier: 58:E0:2A:5F:A4:47:9D:BF:1D:EF:EC:EF:E5:BE:0B:6B:5A:EB:32:7F
Certificate issuer: /CN=993b9ea9fdb611b91c8574410ac925c5869f5a60
Certificate serial: 018CC94CE611D64532A0BBD8F84D645A10DA
Authority key identifier: 99:3B:9E:A9:FD:B6:11:B9:1C:85:74:41:0A:C9:25:C5:86:9F:5A:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/WOAqX6RHnb8d7-zv5b4La1rrMn8.roa
Signing time: Tue 02 Jan 2024 08:31:49 +0000
ROA not before: Tue 02 Jan 2024 08:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56851
IP address blocks: 62.192.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:e6:11:d6:45:32:a0:bb:d8:f8:4d:64:5a:10:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993b9ea9fdb611b91c8574410ac925c5869f5a60
Validity
Not Before: Jan 2 08:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e02a5fa4479dbf1defecefe5be0b6b5aeb327f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:03:6a:fe:48:9e:b9:47:99:03:a3:0e:17:
48:ea:bd:6d:45:cf:39:20:ff:4f:b9:7d:2b:9f:59:
eb:58:c0:53:8d:66:db:66:89:f4:17:d0:15:c0:c2:
55:74:43:f7:29:88:31:5d:3d:e2:71:72:a2:b9:4a:
09:a0:03:94:5b:43:fd:f3:3a:28:e6:83:47:44:c0:
a6:32:58:c4:69:fb:21:c2:bb:d1:49:68:a9:11:ab:
72:d3:ad:d2:0a:1f:19:75:89:5f:95:21:23:97:55:
86:21:11:fa:12:6a:bb:54:e3:7c:41:71:6a:40:20:
4e:1a:77:b7:4f:5d:74:a8:18:12:19:30:4a:30:1c:
12:54:48:96:db:9e:06:0d:5c:b9:ed:d9:02:79:20:
a7:f4:ec:0d:06:36:89:39:ab:6e:b4:c4:58:c3:56:
e4:00:c8:09:68:51:69:f7:f4:15:61:d9:27:b0:46:
b5:66:65:6f:a1:a6:93:85:9e:e1:8e:02:a8:fd:2f:
53:18:c4:94:65:df:81:9f:1b:11:d8:24:33:97:cc:
0f:d2:39:a9:18:d9:0d:0f:74:b4:c3:78:14:07:c7:
c3:e4:9f:cf:d7:f6:78:18:b9:2f:76:f3:db:f1:73:
ea:47:f2:4b:43:bd:d5:63:c7:e8:28:62:97:cf:6e:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E0:2A:5F:A4:47:9D:BF:1D:EF:EC:EF:E5:BE:0B:6B:5A:EB:32:7F
X509v3 Authority Key Identifier:
keyid:99:3B:9E:A9:FD:B6:11:B9:1C:85:74:41:0A:C9:25:C5:86:9F:5A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTueqf22EbkchXRBCsklxYafWmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/WOAqX6RHnb8d7-zv5b4La1rrMn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f39d-ef64-46e2-9471-63622b66fb24/1/mTueqf22EbkchXRBCsklxYafWmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.154.0/24
Signature Algorithm: sha256WithRSAEncryption
84:30:e0:75:e8:1e:d7:8e:12:e9:c3:ba:7b:fc:db:36:fd:40:
63:a5:97:a3:00:5e:20:30:29:8c:38:2f:e8:7e:5f:94:fe:9a:
a3:7c:6f:d9:b0:4d:14:81:b5:2e:bb:e6:45:54:e8:01:79:59:
6b:f8:9a:a9:fc:d4:11:17:98:8c:f0:b7:0e:30:64:d0:1d:01:
f4:0f:ed:b6:e6:e0:c3:d2:29:f3:9c:55:a6:ae:28:4f:2f:45:
89:fe:14:30:a1:03:40:2b:a3:33:e0:27:77:a5:d0:2e:23:61:
5f:de:43:c0:ba:26:44:55:e5:16:8d:42:6d:b1:c1:5b:b2:42:
df:b0:46:2e:a9:58:30:e9:24:2e:f7:75:03:e5:1f:2d:50:5f:
e3:a0:56:ab:74:1d:1f:0f:6f:f7:e2:33:7f:c4:62:f2:38:eb:
4a:a1:b3:0c:a9:9f:66:10:c1:c0:bc:1a:7f:90:d4:f0:cd:6e:
f0:01:da:02:04:c8:57:d0:94:ff:b8:90:53:f9:6b:54:d8:68:
aa:4b:82:d1:62:5b:5a:ee:01:02:3e:74:f4:fd:fc:0a:10:66:
5f:6c:04:0f:72:d1:fc:ff:94:eb:17:37:74:ad:2d:18:7e:75:
a5:98:8d:cd:8c:b3:7e:df:d8:5b:95:71:7a:bd:f3:48:e9:e6:
90:12:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:53:37 2024 by rpki-client on console-fra.rpki-client.org