Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7Db53WugGAmtWMjiFbToUVtXcKk.roa
File: 7Db53WugGAmtWMjiFbToUVtXcKk.roa (raw, json)
Hash identifier: KbSwvPoa0g2J9n4DdSCsAsxFK5lG0SaSrb2Lv8T0Wtk=
Subject key identifier: EC:36:F9:DD:6B:A0:18:09:AD:58:C8:E2:15:B4:E8:51:5B:57:70:A9
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F6B8EE0D9B84E6B88C1E2C45BD5F8D0F0
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7Db53WugGAmtWMjiFbToUVtXcKk.roa
Signing time: Sun 12 May 2024 06:47:56 +0000
ROA not before: Sun 12 May 2024 06:47:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152672
IP address blocks: 62.72.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:8e:e0:d9:b8:4e:6b:88:c1:e2:c4:5b:d5:f8:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 12 06:47:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec36f9dd6ba01809ad58c8e215b4e8515b5770a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:15:9b:c0:7b:16:6e:a9:e2:a7:4f:82:43:
b4:de:ef:fb:20:a5:7c:65:ce:5d:02:fd:1b:14:a0:
d4:1d:ea:65:40:4d:62:a8:d3:53:06:eb:ec:ad:54:
b8:cb:62:10:ee:0b:83:9e:65:2a:49:f2:b0:0f:b9:
92:d8:e5:f4:8b:f6:6f:de:53:56:51:26:bb:27:8d:
34:5c:97:d8:7f:5c:10:db:44:98:14:9c:d8:24:06:
a2:af:1d:dd:6a:b5:86:0d:c5:23:61:0a:e9:14:ba:
9e:28:09:01:ee:8d:17:b5:46:ed:27:b3:92:1c:f5:
57:52:df:aa:bf:b6:36:dd:53:c0:84:06:38:e8:f1:
30:a4:08:f4:55:ef:61:ad:3a:8f:7c:ed:39:8c:4b:
81:15:82:84:15:e9:83:c5:50:5d:f9:e8:c8:31:41:
f0:0f:f7:0e:a9:66:87:10:68:0b:47:07:61:b1:65:
16:a2:54:6f:da:9b:58:98:bf:97:ac:39:14:3a:a1:
42:b8:94:14:18:9b:80:19:9e:57:14:31:1c:49:51:
b1:f6:f1:32:63:05:02:4f:1e:36:b1:39:3d:b2:b5:
f5:61:27:ea:b4:68:f1:7a:20:7b:4a:3b:09:8b:2a:
29:66:b8:82:1d:ad:c9:20:b2:e8:6b:7b:c6:63:60:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:F9:DD:6B:A0:18:09:AD:58:C8:E2:15:B4:E8:51:5B:57:70:A9
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7Db53WugGAmtWMjiFbToUVtXcKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.171.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ae:5b:cd:ad:8d:1c:5c:dd:85:d9:2d:5c:af:ac:ab:2b:21:
4e:69:a9:48:e1:78:be:d4:14:d4:6f:c6:be:d7:2a:12:35:27:
ca:6e:96:55:bf:8d:e4:5e:18:a3:23:50:15:c3:20:6c:56:8f:
d5:ba:65:50:06:24:b6:68:47:87:6e:10:46:95:06:f5:f5:f2:
48:3b:4e:94:4a:51:48:61:f6:30:e4:bd:fc:a2:5d:a6:97:49:
57:87:b3:ad:8a:c5:94:60:e8:a3:dd:a2:37:75:eb:f6:7c:ea:
52:c3:75:fb:88:01:61:06:52:d6:6c:e1:7f:e6:ad:85:f6:0d:
14:28:36:8a:ce:1b:d4:18:85:f1:61:36:39:59:46:3a:07:c0:
af:d3:87:71:4d:1f:46:3e:78:74:12:f7:e0:7a:82:08:f5:b9:
56:6f:26:12:25:85:38:45:6b:9d:73:27:bf:78:85:57:96:b5:
91:f5:26:a3:cb:a6:a9:46:90:03:9c:d7:ed:00:90:3b:39:dd:
12:2d:6d:f4:76:16:f7:a2:f5:5b:4e:31:98:6f:0d:6c:4e:2b:
75:f1:c6:25:e4:ad:61:3a:c8:3b:db:a2:47:99:42:de:00:99:
d7:6d:63:6c:27:29:27:6a:36:82:c7:c6:df:6a:aa:b3:d4:ba:
4f:b8:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:52:24 2024 by rpki-client on console-ams.rpki-client.org