Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3r_7_I5EyrLtSzaQ5lcoUl_8cfo.roa
File: 3r_7_I5EyrLtSzaQ5lcoUl_8cfo.roa (raw, json)
Hash identifier: gK5csNTCLCVAHvXtd8vBb/epC94IeLIsn42fgTtOjdw=
Subject key identifier: DE:BF:FB:FC:8E:44:CA:B2:ED:4B:36:90:E6:57:28:52:5F:FC:71:FA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CE2BD0849919D7416598FE2017E0C34AD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3r_7_I5EyrLtSzaQ5lcoUl_8cfo.roa
Signing time: Sun 07 Jan 2024 07:04:48 +0000
ROA not before: Sun 07 Jan 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200704
IP address blocks: 62.72.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:bd:08:49:91:9d:74:16:59:8f:e2:01:7e:0c:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 7 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=debffbfc8e44cab2ed4b3690e65728525ffc71fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:91:0d:45:f9:6b:d8:98:fd:f8:70:9f:27:
74:9a:bf:88:c3:be:00:ae:a1:9f:22:dc:ba:56:62:
38:38:39:79:7c:7d:3a:f2:fe:7d:d4:f8:f3:26:80:
42:9d:78:c8:96:ea:ee:74:f4:27:a8:1e:31:e2:2f:
68:94:05:13:11:76:ba:03:cc:3a:b4:75:15:8a:25:
c8:b7:85:eb:de:3d:37:ea:75:32:4e:f0:ed:79:6d:
cc:4e:bd:6d:f7:90:23:b2:3d:57:08:67:79:d6:1d:
11:42:d0:81:b4:87:c2:1c:57:af:4c:a4:6e:cc:45:
71:dd:09:a3:27:ae:3d:9a:5e:f0:61:2a:fb:0c:36:
35:cc:b6:20:e0:61:5b:06:cd:00:89:d4:ee:4f:47:
37:03:84:5c:3b:29:b2:1e:c3:56:f4:bd:85:23:06:
56:c2:b5:60:3d:ea:e4:07:46:32:66:98:3a:88:dc:
d6:1e:08:c8:10:d8:f8:b0:94:79:be:97:4c:3b:71:
10:9d:40:f1:26:cc:4f:0e:0c:47:eb:75:90:37:ac:
51:7e:ff:bc:d6:02:95:15:b5:a5:f2:29:8c:a5:4e:
fa:c9:b9:7b:ec:d7:41:27:9c:1f:02:04:5c:63:4f:
96:6a:ee:38:b5:19:94:be:d3:67:5d:e7:13:99:3e:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:FB:FC:8E:44:CA:B2:ED:4B:36:90:E6:57:28:52:5F:FC:71:FA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/3r_7_I5EyrLtSzaQ5lcoUl_8cfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:52:7d:21:7f:e5:fd:0f:6a:f4:20:ca:35:60:f1:3c:1d:dd:
38:c6:7b:ba:79:6a:7d:e6:df:91:3f:35:f4:1e:6d:b4:21:c1:
79:ff:4d:73:5a:34:cf:5d:3f:64:6f:8b:bc:30:6e:be:54:c9:
ab:60:22:0a:f5:70:b2:22:2f:5b:0f:57:69:e2:bd:04:bb:87:
72:c5:84:c9:c6:bf:52:20:48:23:bc:39:59:aa:f0:57:ed:f8:
10:2d:82:b3:52:df:71:26:e8:15:e8:3e:25:41:2e:0a:00:7b:
e7:cb:db:fb:c0:5b:62:25:7a:40:7c:65:61:c5:c7:2d:23:fd:
3f:81:17:c9:c4:9c:25:a9:e8:4f:94:de:56:d8:8e:1f:1b:75:
14:0e:e0:97:23:0e:a0:d4:35:2a:42:60:9d:47:3a:52:80:ce:
98:ba:c5:ba:64:ec:b6:ec:75:7c:e4:fc:6f:5c:00:9f:56:cf:
30:83:3d:ae:03:ba:c4:bc:48:e3:96:3f:81:55:a7:e6:69:f0:
58:73:ee:4c:d6:2e:b6:36:af:a0:a4:1b:01:4d:3b:95:61:d8:
a1:38:18:e8:ea:98:51:e9:f8:f7:b4:36:c6:f7:87:da:16:6d:
52:66:61:0e:7f:5a:8f:f9:a8:f5:8f:9a:7a:3d:00:80:2f:2d:
33:8b:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:05:24 2024 by rpki-client on console-fra.rpki-client.org