Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/28gq9piEmXxpsvaDkKQ5vSwFOwo.roa
File: 28gq9piEmXxpsvaDkKQ5vSwFOwo.roa (raw, json)
Hash identifier: sHhTRHz9pvIoqZen3eAZukQVUH15MBJg8Cifdp2Ccmo=
Subject key identifier: DB:C8:2A:F6:98:84:99:7C:69:B2:F6:83:90:A4:39:BD:2C:05:3B:0A
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 018CC5DD32D964E8750CC7C0C9AD13C0F162
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/28gq9piEmXxpsvaDkKQ5vSwFOwo.roa
Signing time: Mon 01 Jan 2024 16:30:57 +0000
ROA not before: Mon 01 Jan 2024 16:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51132
IP address blocks: 83.68.224.0/19 maxlen: 24
185.95.160.0/22 maxlen: 24
62.108.192.0/20 maxlen: 24
91.145.0.0/19 maxlen: 24
62.108.208.0/21 maxlen: 24
2a02:eb8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:32:d9:64:e8:75:0c:c7:c0:c9:ad:13:c0:f1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Jan 1 16:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbc82af69884997c69b2f68390a439bd2c053b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:b6:67:fb:8f:ce:d9:d6:53:72:da:9e:f6:
1a:cb:f5:c0:cd:06:14:8d:af:4f:ff:2d:85:d1:e0:
b2:a3:e9:2a:86:54:8b:50:f8:43:2e:f3:80:10:c2:
05:18:c9:e5:7c:d8:40:fe:7f:72:bc:55:19:a8:e4:
38:7e:25:e1:52:e9:d4:b2:fb:25:2e:cb:c1:7f:b6:
0a:68:92:8a:6c:b8:4f:74:db:d1:7f:f6:ca:aa:d3:
6e:4d:2c:fd:d4:da:a5:6c:4f:b9:c8:78:85:d5:ba:
53:c4:d4:e9:6b:a6:48:34:2d:49:e5:c8:b3:94:df:
27:c3:59:1c:03:b1:58:a0:38:c9:d2:ac:28:52:c1:
1e:36:f4:a5:c1:51:82:7a:45:e2:80:65:57:21:b9:
f5:88:18:b9:d8:6c:23:c3:5c:80:b5:70:b2:f4:c1:
9c:da:4b:fe:c2:38:24:58:20:10:ad:26:2c:0c:ab:
a4:da:01:fc:9b:62:1e:68:41:60:87:ba:a4:b7:e2:
07:c6:eb:c5:9a:b2:d3:40:b9:d0:2f:69:5d:79:74:
dd:56:9f:87:1b:32:df:3f:7c:28:70:f5:f3:3b:0c:
28:4f:63:06:31:48:96:cf:68:57:ae:f8:89:f2:c9:
0b:ab:4c:41:c1:b3:7c:18:26:c4:bd:b5:0d:05:ea:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C8:2A:F6:98:84:99:7C:69:B2:F6:83:90:A4:39:BD:2C:05:3B:0A
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/28gq9piEmXxpsvaDkKQ5vSwFOwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.192.0-62.108.215.255
83.68.224.0/19
91.145.0.0/19
185.95.160.0/22
IPv6:
2a02:eb8::/29
Signature Algorithm: sha256WithRSAEncryption
79:e2:00:b1:93:83:c0:25:e6:3f:01:03:49:6d:44:81:b9:37:
79:53:6d:18:e1:93:52:7b:5a:3c:be:50:32:65:a5:25:4d:34:
f7:1d:63:f8:db:d9:f0:44:72:52:06:61:fb:e9:fa:fa:3f:ed:
a2:c9:ea:03:64:35:09:69:bf:98:0d:11:94:02:ce:5d:7e:ca:
f1:cf:86:b5:0c:1d:85:dd:51:56:ce:78:e4:47:01:44:de:30:
fe:82:c0:48:02:f7:cb:1e:7c:8b:43:bd:a1:00:00:45:22:e9:
2b:d5:84:f2:da:62:b6:6c:72:cc:15:e3:ff:4d:d2:7a:d0:d8:
ac:a5:b6:87:f8:e5:a6:5b:29:3a:f3:b3:32:97:ca:09:21:ca:
31:11:d4:90:2c:d8:e4:c6:0a:67:e0:87:d4:bd:7c:cc:ae:de:
0e:9e:db:3a:f3:7a:3d:2b:19:8e:3b:1d:42:7e:c6:55:1d:99:
d6:86:e3:cd:2d:b7:86:86:f2:c7:1f:9d:d5:a9:b4:3d:7c:af:
74:bb:47:1b:fb:77:71:78:66:1e:83:51:7e:d8:ab:22:86:14:
48:b1:f7:f1:dc:5c:20:fc:cb:cb:c2:e1:22:0d:42:81:92:a4:
1b:5a:47:15:03:39:38:e3:76:ff:54:5e:c4:26:3f:e5:e5:f4:
78:69:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:05:58 2024 by rpki-client on console-fra.rpki-client.org