Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/NWjU99hKkszeYs_FemFc3MN8zyY.roa
File: NWjU99hKkszeYs_FemFc3MN8zyY.roa (raw, json)
Hash identifier: CPvtHE1P1A989zvMihN1261KyU6aBCPkwacw1lPts4k=
Subject key identifier: 35:68:D4:F7:D8:4A:92:CC:DE:62:CF:C5:7A:61:5C:DC:C3:7C:CF:26
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 01907D826FB14D6FD5A6F97F5D4F32A33159
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/NWjU99hKkszeYs_FemFc3MN8zyY.roa
Signing time: Thu 04 Jul 2024 11:30:18 +0000
ROA not before: Thu 04 Jul 2024 11:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 62.108.64.0/22 maxlen: 24
62.108.68.0/22 maxlen: 24
62.108.72.0/22 maxlen: 24
62.108.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:82:6f:b1:4d:6f:d5:a6:f9:7f:5d:4f:32:a3:31:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Jul 4 11:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3568d4f7d84a92ccde62cfc57a615cdcc37ccf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:6d:9c:7e:27:fd:80:b6:16:15:be:ef:8a:
bd:fd:57:ad:ff:53:e2:99:e7:6d:cf:19:e2:39:85:
51:eb:03:8c:0a:a3:8d:e7:5d:1a:57:b7:cb:b3:4a:
e5:36:1a:8a:6d:05:c5:f4:e1:79:54:e4:4a:d8:a5:
03:17:2f:c0:8e:13:5c:63:60:7f:e0:2b:a4:29:c1:
07:24:89:76:7d:a2:a7:6b:e8:7a:33:67:9c:93:8c:
27:46:0a:4f:7f:04:af:d3:3a:4c:59:9b:42:90:af:
e9:0f:7f:75:74:ad:79:d5:39:00:cc:fa:61:3d:4e:
a0:fb:b6:66:99:ee:e7:e0:ef:58:43:bc:f9:9b:36:
3e:04:d6:d1:a2:ee:9d:ad:18:d6:a3:61:8f:8e:23:
29:52:50:76:f3:3b:ed:2e:73:12:17:06:d3:96:92:
d2:62:a2:ab:28:78:4c:41:e3:8f:6d:eb:09:28:e7:
d5:d4:2f:80:87:ad:ce:14:35:9a:2c:52:74:45:0a:
b2:91:8e:19:78:46:9b:49:1b:03:b3:0b:70:15:bb:
b8:b4:8c:a3:6e:d1:8e:44:37:fd:49:f0:ea:3d:4b:
d0:7c:0a:4a:5e:87:bb:82:c0:8f:21:07:31:2d:f5:
fc:34:1a:63:ef:3f:09:9c:58:90:a2:13:d3:7d:ef:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:68:D4:F7:D8:4A:92:CC:DE:62:CF:C5:7A:61:5C:DC:C3:7C:CF:26
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/NWjU99hKkszeYs_FemFc3MN8zyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.64.0/20
Signature Algorithm: sha256WithRSAEncryption
76:80:12:ed:7f:55:42:89:5b:46:90:81:d7:12:12:0f:65:42:
e2:66:b9:70:b4:e8:fe:52:34:d2:e9:98:da:cf:7f:2a:41:5b:
af:52:1c:5d:56:06:60:3f:6d:ae:53:cd:fd:ea:0d:98:f5:8a:
03:30:ae:e6:21:81:53:ed:32:40:02:59:b3:af:e7:ae:5a:ce:
ef:18:b0:c4:a7:6d:0a:b8:5e:31:e9:69:d2:c1:2d:f3:21:b5:
97:3b:38:47:1d:89:58:ca:22:83:04:6f:3c:1e:d1:15:72:c1:
8f:24:70:ae:e7:b7:f6:65:29:34:cb:02:37:81:7f:7b:09:3c:
5b:4e:44:61:11:57:97:81:00:02:6a:e8:12:bb:7a:ae:c6:00:
24:1b:46:b1:b8:ca:df:4c:c4:22:24:6c:9c:f6:ba:27:a2:c3:
3c:ef:ab:28:be:76:3a:01:0e:cc:c1:49:f0:af:a7:5c:49:e9:
b4:ac:c5:1a:d4:b7:b5:8e:78:a8:75:f1:4f:90:3d:e2:3e:b2:
75:84:1a:68:58:51:87:cb:75:23:9d:4d:61:5b:8c:f0:cd:f8:
bc:b2:8c:43:42:07:90:90:f9:e8:02:ce:7b:93:d0:2e:c4:62:
eb:d8:db:5c:38:38:10:2d:4e:39:45:1e:94:82:0e:28:65:b4:
6f:56:98:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:37 2024 by rpki-client on console-ams.rpki-client.org