Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/iMN3u1l_VT8imACA9MSIZ2jy6Xg.roa
File: iMN3u1l_VT8imACA9MSIZ2jy6Xg.roa (raw, json)
Hash identifier: +1emHBQ+AODmUk2SEYP9rLTXMq547Ss2lk8YAZsore8=
Subject key identifier: 88:C3:77:BB:59:7F:55:3F:22:98:00:80:F4:C4:88:67:68:F2:E9:78
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 018CC2DACD6C98369A590C102810D1C58772
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/iMN3u1l_VT8imACA9MSIZ2jy6Xg.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13097
IP address blocks: 62.100.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cd:6c:98:36:9a:59:0c:10:28:10:d1:c5:87:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88c377bb597f553f22980080f4c4886768f2e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:9a:c2:3e:91:61:7c:14:85:80:ac:5d:44:
62:79:0e:df:01:2f:86:89:1a:df:c0:e4:e6:07:b8:
fc:b9:7b:fb:21:58:fc:26:c4:80:49:9b:f6:79:ac:
b9:61:0b:07:58:d0:16:8e:e8:47:0a:ac:db:e1:b8:
9d:59:87:3e:9b:d4:4b:ff:34:db:84:2a:57:1a:0e:
d7:0e:b7:4c:c4:36:2e:c0:86:5a:e8:52:53:5c:55:
28:96:7c:f5:ee:7e:61:03:df:58:23:92:a9:50:a4:
8c:f2:c9:a8:48:6f:cb:14:7d:c2:b6:12:d8:e0:c7:
43:79:54:b5:7d:ff:4c:dc:0f:86:20:db:98:de:df:
82:35:ad:6f:53:0f:f7:90:08:ff:27:fe:19:1e:ba:
39:30:33:e6:cd:d1:4e:ea:6e:3c:f1:92:0e:ea:3f:
f2:37:97:db:3d:4a:11:46:d2:7d:65:b2:cd:e4:bb:
e7:0c:92:d7:69:48:14:a8:79:6e:83:5b:dd:08:1f:
8c:d4:59:41:64:bf:f1:46:d6:0e:9d:00:82:68:78:
8d:bb:3a:b8:b5:59:88:05:a8:fd:74:0e:ec:de:e3:
cb:51:06:46:19:1b:c6:25:b4:f9:a2:e6:40:b4:21:
92:ad:4e:b6:b9:cf:d3:1c:e6:d2:22:0e:d7:d5:11:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:77:BB:59:7F:55:3F:22:98:00:80:F4:C4:88:67:68:F2:E9:78
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/iMN3u1l_VT8imACA9MSIZ2jy6Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e9:c1:21:9f:8a:a1:24:b2:e1:e8:73:b4:f7:b0:45:03:07:
16:1d:70:3c:03:2a:e0:d3:e0:68:b5:ff:07:ec:c3:07:ef:91:
74:d1:7e:10:bb:24:77:9d:d8:d9:50:48:74:e9:95:1e:de:59:
b2:89:8d:71:4d:05:84:cb:ed:aa:2c:f3:1e:32:8d:b2:22:ea:
c1:54:52:b5:58:45:61:5d:b0:b0:6e:42:ed:a4:65:44:6b:30:
0a:f5:eb:e1:4d:6e:ba:2d:49:83:c6:a2:16:f9:66:c0:19:66:
a3:78:80:1a:fb:78:f6:af:09:d9:c5:45:5b:02:5e:c7:e5:e7:
1c:54:24:fb:cb:a6:22:fa:de:b9:8f:d3:24:62:c8:47:f0:a4:
d7:5d:d7:b3:10:f0:00:57:71:06:90:8a:50:81:8f:d8:02:54:
28:21:5f:f9:94:99:d7:ab:5a:a5:5f:b4:31:8f:83:3a:b4:4e:
2a:eb:95:d8:ff:8d:2b:7c:a8:94:84:6a:4d:5e:93:6e:c3:4a:
c7:37:0a:5c:f7:9a:61:d2:1b:60:ea:e1:da:bc:e5:3b:63:a4:
58:05:e5:32:03:b5:2b:66:6f:76:d1:a6:2b:6b:ea:ae:47:f0:
17:c3:fd:03:6b:3b:de:7f:32:b4:46:59:0f:32:bf:f5:93:db:
bb:d7:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:46:24 2024 by rpki-client on console-ams.rpki-client.org