Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/Fumf5AWLLBRGcKcKwA-RFphOBH8.roa
File: Fumf5AWLLBRGcKcKwA-RFphOBH8.roa (raw, json)
Hash identifier: OnykNFrYEw2qF4DjrVzaR9kZkmRX/sWD6knGC7T/wQY=
Subject key identifier: 16:E9:9F:E4:05:8B:2C:14:46:70:A7:0A:C0:0F:91:16:98:4E:04:7F
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 018CC5DD33107630BFE32569228C8008C044
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/Fumf5AWLLBRGcKcKwA-RFphOBH8.roa
Signing time: Mon 01 Jan 2024 16:30:57 +0000
ROA not before: Mon 01 Jan 2024 16:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61146
IP address blocks: 62.108.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:33:10:76:30:bf:e3:25:69:22:8c:80:08:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Jan 1 16:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16e99fe4058b2c144670a70ac00f9116984e047f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:79:79:1e:80:d2:76:a8:21:cc:15:be:ae:
90:bc:a3:04:47:fb:93:8a:dd:ca:98:d2:fb:e0:60:
63:44:4c:80:8a:16:1f:39:85:3a:51:77:46:5e:12:
fb:66:28:d2:b2:56:36:6b:79:23:6b:05:02:a9:88:
82:a1:49:b4:a4:d1:92:55:58:87:b8:92:8e:07:ae:
8e:a8:17:8d:73:7b:27:b2:9a:c0:cf:09:39:70:06:
36:04:32:4e:30:46:45:43:a0:fd:97:a0:5f:3f:f1:
84:3a:bb:8a:a7:f4:da:37:94:78:b8:05:1d:e7:c1:
c6:91:93:be:ba:98:18:c4:5c:92:62:ad:8a:2a:ee:
13:a1:17:5b:a5:98:18:22:34:5e:6a:3f:fd:f6:83:
c0:d4:a0:0e:ca:11:7a:c6:5e:2d:d8:c8:bf:51:e3:
2b:83:3c:07:d0:c8:fa:fd:72:58:a2:90:c0:74:cd:
99:cd:6a:fd:5b:ba:12:37:2b:f9:98:ce:c1:ce:85:
e0:71:fb:8a:d1:0d:6a:dc:96:b7:b6:74:93:30:7e:
6a:9d:46:ca:63:4f:70:a7:39:55:dd:44:ff:0a:21:
b9:29:a4:61:a4:6e:15:39:b8:e4:90:58:14:38:1b:
d8:55:45:a8:09:c4:2b:1f:f7:24:73:9f:55:3e:d1:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:9F:E4:05:8B:2C:14:46:70:A7:0A:C0:0F:91:16:98:4E:04:7F
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/Fumf5AWLLBRGcKcKwA-RFphOBH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.216.0/21
Signature Algorithm: sha256WithRSAEncryption
67:9f:a3:f7:e6:37:9f:a0:96:e1:dc:13:51:d3:d3:c0:96:34:
d0:31:98:7d:11:e2:2e:b5:44:77:1c:64:54:12:17:b2:70:68:
32:84:1e:50:06:4b:2d:ea:60:43:40:1d:5a:e8:bf:dc:a4:e3:
ca:17:22:45:f9:fc:97:39:71:96:42:ed:19:3e:7c:e6:87:16:
1c:64:61:fe:60:b6:26:3c:9d:cd:96:65:48:fd:f1:f7:e2:bd:
d1:a4:40:12:f4:95:17:ea:16:de:7a:8b:71:62:ae:71:34:10:
f8:2a:99:4c:d8:9d:c4:19:29:b7:d5:77:25:cb:29:76:b2:c1:
30:66:ba:f2:76:b7:ef:69:84:70:e8:ec:96:24:2c:23:7f:ae:
6b:40:76:1a:b7:af:95:56:a3:a5:83:9b:1b:b5:1d:4f:c4:ab:
eb:9f:dc:88:35:e1:3f:e4:9b:5c:11:37:55:30:8e:11:43:f3:
39:00:d6:c2:27:0e:3f:ad:b6:55:b5:65:90:76:64:b8:8e:ef:
bd:60:37:3c:72:26:46:3f:54:42:1f:77:f7:db:ed:dc:f2:a0:
b7:f0:29:f2:9a:6b:14:1b:e4:34:2d:9e:bb:9e:c1:37:05:d4:
08:7e:33:86:e7:cb:21:cf:89:33:dc:49:f3:20:14:7d:f0:86:
76:44:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:51:22 2024 by rpki-client on console-ams.rpki-client.org