Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/g4UfOKLxAShzT7AdLCObHHSME00.roa
File: g4UfOKLxAShzT7AdLCObHHSME00.roa (raw, json)
Hash identifier: SU+fAzj/d2ib2Kt08cB/3bViDzfw9KsyOx7u42NRqFw=
Subject key identifier: 83:85:1F:38:A2:F1:01:28:73:4F:B0:1D:2C:23:9B:1C:74:8C:13:4D
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01916CAE5E8C1B8E1C3AE952BD03080360B1
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/g4UfOKLxAShzT7AdLCObHHSME00.roa
Signing time: Mon 19 Aug 2024 22:07:32 +0000
ROA not before: Mon 19 Aug 2024 22:07:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210075
IP address blocks: 185.62.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6c:ae:5e:8c:1b:8e:1c:3a:e9:52:bd:03:08:03:60:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Aug 19 22:07:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83851f38a2f10128734fb01d2c239b1c748c134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:34:f7:b5:78:03:52:c7:e2:7d:1e:a8:bb:
ac:17:26:df:4e:2e:ca:9c:27:57:d3:a7:92:2f:b7:
d2:d8:d5:d2:51:1e:5a:3b:11:07:6a:2d:d9:a6:8c:
b4:9a:91:77:ee:02:b2:8e:70:2a:d2:17:f9:eb:ab:
ee:80:32:6f:cd:1f:de:ae:6b:bf:d6:90:8c:fb:3a:
5f:61:fe:18:72:d8:9b:02:a6:1f:25:a7:f2:f2:d7:
24:26:7c:33:04:6e:32:fa:3d:81:f0:f1:6b:37:55:
32:77:e6:55:52:df:63:c8:17:df:8e:d5:a3:71:21:
29:ea:28:e1:10:76:fb:87:42:d0:3a:28:ef:00:8e:
d2:ce:f4:2b:9a:02:23:9b:5c:8a:60:19:ae:5e:7c:
99:05:56:1c:67:e1:84:bc:37:54:33:e0:88:b7:c4:
c7:90:c1:dd:2a:3d:67:be:10:50:fb:e4:74:74:bf:
78:c6:6d:1c:e3:4d:9c:8c:b7:43:db:21:d9:e2:24:
a8:fd:22:8e:7e:18:65:df:75:79:61:4d:a5:bb:94:
ad:1c:ec:53:fa:df:91:66:75:eb:40:2b:28:11:ae:
29:1a:60:15:f8:5f:ce:02:50:85:9a:b5:13:d2:80:
a2:2e:27:3d:5b:be:5a:02:72:32:f7:3d:07:39:21:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:1F:38:A2:F1:01:28:73:4F:B0:1D:2C:23:9B:1C:74:8C:13:4D
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/g4UfOKLxAShzT7AdLCObHHSME00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.3.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2f:43:69:7b:cb:3f:79:a1:b8:49:2d:e8:ba:a9:de:cd:4c:
50:19:17:3a:f6:29:2d:d9:e7:30:4f:75:f4:87:2a:02:c2:ac:
19:fb:72:d1:b5:be:0c:7c:3b:dc:15:e7:33:f6:1e:21:a3:59:
20:24:cc:a0:a1:3e:c7:c8:74:21:96:56:d7:7f:ba:db:0e:56:
59:f9:e2:e3:b0:3a:25:90:e7:d7:24:5c:d4:2c:87:a6:c5:40:
0e:71:d2:cc:05:00:7f:a7:d6:e0:64:02:4e:28:75:80:65:58:
5d:3f:a4:92:eb:bb:2d:74:bc:99:4c:d6:50:08:00:9a:4a:ec:
32:68:75:b2:5a:b9:8d:6f:50:a9:01:e2:c2:74:75:b2:74:43:
c2:31:f5:a2:03:68:15:75:16:9c:40:a5:f3:64:d4:bb:4e:75:
21:5c:30:39:6d:91:ac:36:7a:82:5c:14:84:a3:c6:4c:9f:52:
d4:b8:2e:b6:c8:cb:6e:82:35:0e:28:c2:12:06:26:a1:5f:f6:
8b:99:c6:aa:a0:5d:39:09:f2:14:69:d3:a4:c4:96:a3:ba:a6:
2c:dc:ac:14:3b:f8:f4:d3:35:3a:4d:7e:e4:49:3f:7f:d2:e3:
56:df:16:02:8c:bf:be:88:99:5e:70:0c:eb:0f:56:56:de:57:
11:66:5c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:53 2024 by rpki-client on console-fra.rpki-client.org