Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/fhEK-kPPqG3AeESHMqTA138Omno.roa
File: fhEK-kPPqG3AeESHMqTA138Omno.roa (raw, json)
Hash identifier: ykAqx5cw01Vm8e6b6Kvq3HJo+zCDx7w3ssQI6Um0WM4=
Subject key identifier: 7E:11:0A:FA:43:CF:A8:6D:C0:78:44:87:32:A4:C0:D7:7F:0E:9A:7A
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 018EB91830D5FA2D65B82B1A02933E675586
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/fhEK-kPPqG3AeESHMqTA138Omno.roa
Signing time: Sun 07 Apr 2024 15:05:54 +0000
ROA not before: Sun 07 Apr 2024 15:05:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15472
IP address blocks: 62.100.64.0/21 maxlen: 21
62.100.72.0/23 maxlen: 23
62.100.85.0/24 maxlen: 24
62.100.88.0/21 maxlen: 21
62.100.88.0/23 maxlen: 23
62.100.91.0/24 maxlen: 24
62.100.92.0/22 maxlen: 22
185.193.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b9:18:30:d5:fa:2d:65:b8:2b:1a:02:93:3e:67:55:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Apr 7 15:05:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e110afa43cfa86dc078448732a4c0d77f0e9a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:7e:c1:1d:75:f3:a0:43:67:60:d5:99:44:
0f:be:9b:a3:ac:ad:03:ab:f9:0e:4f:32:a9:db:dc:
34:ef:45:7f:c2:dd:ac:3b:7f:59:7a:a2:c3:00:47:
cb:2e:c8:9f:1d:d4:fd:1e:f2:90:eb:47:a5:dc:7c:
f1:f7:f5:54:8a:0d:69:14:25:00:41:90:dc:59:c5:
6b:ec:1f:bd:cd:97:2e:1d:16:f9:49:28:a1:81:9f:
b4:b2:0f:f5:d9:04:52:71:ca:c8:5b:01:72:ee:92:
06:2d:94:63:ad:10:25:95:1e:cb:f4:c9:47:ef:bf:
06:70:16:0f:be:4e:ae:de:73:21:ac:7a:c8:e6:8d:
d7:65:d7:d8:1e:2e:25:d9:4c:6a:79:aa:29:15:eb:
08:58:18:17:aa:a1:35:c3:24:b5:1c:60:34:25:4b:
2b:ce:d1:c2:51:96:fb:df:b9:bf:ca:89:80:c3:8f:
be:77:a7:86:89:a9:bf:e0:72:bf:98:d0:81:bd:ff:
ae:0d:ae:62:d0:08:33:67:8c:71:4e:a1:1a:1d:15:
07:c4:70:02:63:73:fc:44:f6:09:81:7f:05:f8:10:
51:60:2c:50:80:06:37:58:d3:bb:30:6f:4b:c8:d8:
ae:2a:fb:5f:5a:40:c9:ff:f6:0b:e4:36:a6:93:d4:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:11:0A:FA:43:CF:A8:6D:C0:78:44:87:32:A4:C0:D7:7F:0E:9A:7A
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/fhEK-kPPqG3AeESHMqTA138Omno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.64.0-62.100.73.255
62.100.85.0/24
62.100.88.0/21
185.193.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:29:ab:12:19:f4:c3:9c:a4:22:cb:49:7b:09:a2:8a:ff:45:
a1:b2:30:50:6e:11:4d:2c:10:ff:30:d4:20:69:a3:38:98:34:
e5:45:4a:0d:e9:2c:26:c4:76:7f:3e:a4:a4:cd:65:71:6e:3d:
8e:c3:20:69:fe:8a:48:c6:8e:3c:34:66:4f:e2:8d:b1:cd:12:
7c:f5:51:68:7a:59:65:12:3c:3b:8c:51:eb:2c:ed:1a:89:f1:
c9:eb:21:2f:78:14:42:9d:f8:c2:89:92:ee:5f:98:7f:3a:8d:
6c:87:c8:2d:67:95:95:07:4b:8c:58:d9:41:b0:fe:81:bf:ab:
29:5b:e1:14:82:62:a7:81:4e:dc:53:57:09:75:25:c3:08:c8:
3d:68:ff:cd:40:db:6c:c4:78:79:8d:51:51:44:55:b3:b3:f6:
a0:53:11:07:dd:94:0e:b1:01:e5:e1:ea:f7:d7:cc:24:75:12:
8b:de:d9:4c:22:e9:93:b0:f9:d7:cb:64:8d:32:3e:16:2d:3f:
af:e3:63:fc:e4:35:c7:08:df:2f:1f:9e:0c:45:d5:cf:32:54:
1e:90:5b:c5:95:65:92:46:ec:81:17:a0:01:d4:ea:09:d6:f2:
d4:6d:59:bc:5e:de:5e:db:69:ee:ec:0a:65:ca:a8:e4:46:e7:
43:86:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:36:35 2024 by rpki-client on console-fra.rpki-client.org