Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/62cltH-4eVHTI9n8JceslMlWiNQ.roa
File: 62cltH-4eVHTI9n8JceslMlWiNQ.roa (raw, json)
Hash identifier: LYFJh4v7Cwh7aPt8GMFj1mWfjf+pmrmpRtqvE7erNEw=
Subject key identifier: EB:67:25:B4:7F:B8:79:51:D3:23:D9:FC:25:C7:AC:94:C9:56:88:D4
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 0190F39F58F934F1C1734F2B6FD8F013CC12
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/62cltH-4eVHTI9n8JceslMlWiNQ.roa
Signing time: Sat 27 Jul 2024 09:57:04 +0000
ROA not before: Sat 27 Jul 2024 09:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 92.205.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f3:9f:58:f9:34:f1:c1:73:4f:2b:6f:d8:f0:13:cc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Jul 27 09:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb6725b47fb87951d323d9fc25c7ac94c95688d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:6e:7e:6d:22:5a:31:ac:2a:cd:88:f6:74:
07:93:49:fd:c6:01:14:f6:1b:73:db:2e:07:38:3f:
88:d0:c8:df:9a:d4:58:e7:33:e0:9b:ee:96:af:1f:
9c:94:9a:58:03:9d:6a:43:a4:02:74:ec:34:d8:1b:
98:c8:6c:16:e3:6f:60:2d:36:f7:4d:0f:c9:68:e4:
c0:3c:72:ab:64:04:b5:12:b6:af:4b:bd:70:9e:01:
84:c0:bc:3e:5c:62:e6:af:f0:78:51:e3:47:57:86:
74:0a:26:33:43:f8:62:d9:03:81:6f:1f:07:80:ec:
b5:ee:0a:44:5e:45:7e:c1:db:09:ba:59:a8:ab:fa:
ef:23:c3:fd:e6:ed:47:33:16:01:df:ec:e9:94:86:
ef:ea:e8:91:1f:d6:b3:77:ed:98:b0:c7:b6:e3:01:
08:fd:e2:98:4b:6d:de:9e:7c:96:56:0e:e4:be:3b:
15:61:6e:3c:44:58:c8:12:6f:0b:7e:5a:4c:44:50:
ad:5f:21:19:80:86:ee:85:9c:1c:a7:12:f7:6f:bd:
1b:bb:36:04:b2:b3:53:22:e4:9a:11:fa:59:0b:51:
12:60:62:11:4f:de:77:5b:3e:2d:cb:ba:af:e1:b6:
aa:fe:3e:5d:c9:8b:9e:84:3a:10:51:fc:09:f0:90:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:67:25:B4:7F:B8:79:51:D3:23:D9:FC:25:C7:AC:94:C9:56:88:D4
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/62cltH-4eVHTI9n8JceslMlWiNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.205.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cf:ef:10:32:f8:ae:f4:7d:e6:15:b4:e7:77:62:87:28:6b:
a5:54:6a:67:a6:8c:26:39:d4:4b:9a:84:34:69:b7:d0:96:16:
a9:24:9f:73:fd:a6:4b:9b:12:4d:4a:88:d7:19:8f:6f:a5:48:
2c:44:8e:f1:86:07:d9:af:de:3b:ee:71:2a:80:be:e5:4d:08:
c4:8b:5d:0c:81:32:31:8c:51:a9:ec:4c:2f:3e:51:16:a6:23:
aa:01:63:ad:9f:b7:3f:f0:7d:79:ea:f2:c2:72:01:b2:29:64:
5c:7f:1a:99:a6:e8:dc:5a:ed:24:bd:7b:f8:4e:f2:10:24:58:
ab:0a:7d:56:53:bf:88:f5:8c:e6:56:2e:2d:2a:3d:fe:55:21:
19:d3:2f:da:ff:c9:ba:91:34:d5:0b:dd:bb:e4:37:11:76:3f:
36:9f:2c:15:28:80:67:5c:13:d7:80:f7:0f:d2:bf:3a:81:98:
3a:36:ce:e3:94:65:87:1e:f9:19:d0:3d:15:de:75:ac:60:e3:
46:f1:3c:e5:4d:01:53:11:ec:55:93:bf:97:a7:2d:60:87:5c:
b8:67:95:5d:60:92:d7:e5:e2:de:b4:8c:d5:89:ac:7f:61:c8:
c1:7e:fa:d2:29:9a:53:6f:22:44:16:1c:8b:18:50:09:29:cf:
4a:4e:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:31:44 2024 by rpki-client on console-fra.rpki-client.org