Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/B67diuNsH6SVKIQK5WS--ut1Tl0.roa
File: B67diuNsH6SVKIQK5WS--ut1Tl0.roa (raw, json)
Hash identifier: MYkrZeQF2SE5B22U7eKqWhJWET7nTPny9tPKIPyYCxc=
Subject key identifier: 07:AE:DD:8A:E3:6C:1F:A4:95:28:84:0A:E5:64:BE:FA:EB:75:4E:5D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01914572EAD2DADEA31C0F20B7CEA5F97827
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/B67diuNsH6SVKIQK5WS--ut1Tl0.roa
Signing time: Mon 12 Aug 2024 07:17:24 +0000
ROA not before: Mon 12 Aug 2024 07:17:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.72.183.0/24 maxlen: 24
81.21.6.0/23 maxlen: 24
81.21.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:72:ea:d2:da:de:a3:1c:0f:20:b7:ce:a5:f9:78:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 12 07:17:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07aedd8ae36c1fa49528840ae564befaeb754e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:3b:88:65:77:45:1c:7d:ac:bb:f5:99:a0:
02:a0:d8:d1:db:b0:f3:a2:2b:5e:39:35:73:02:41:
7e:a4:76:19:d3:ef:e2:ef:fc:e4:11:af:c1:6f:72:
84:96:0b:41:1c:e5:b7:93:76:65:01:85:65:b0:45:
7c:d9:4f:1c:75:5e:30:ce:2c:2e:5e:97:f8:2d:9f:
c3:d7:ed:79:c5:ae:be:5d:d0:b2:33:53:85:f4:4c:
08:fa:7f:16:d6:88:8d:82:2d:c9:6a:5e:42:91:92:
c3:b3:35:3c:6e:33:53:fb:76:9d:c5:b2:32:e2:c7:
69:fa:cc:93:00:85:52:15:45:45:8c:8f:69:ae:76:
05:76:e3:2e:3a:7a:6a:e4:f6:16:28:ab:2f:8a:0b:
63:b9:62:3f:c8:14:93:4a:22:87:54:d0:27:52:7d:
d8:99:3e:55:3b:6c:95:1e:57:bd:0d:54:58:9f:ee:
c4:13:7a:6f:e3:5a:9a:b1:0f:67:56:ff:e7:9f:ba:
b0:81:5a:6a:8b:47:96:3f:10:f8:75:a7:d4:7e:d3:
b2:43:74:b5:7a:60:f5:46:fa:c2:89:64:02:7e:a3:
4b:a0:f1:92:e5:61:c8:72:83:00:71:ef:79:9e:8d:
52:22:4e:5e:fa:cd:ca:20:84:7f:89:01:c1:24:ab:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AE:DD:8A:E3:6C:1F:A4:95:28:84:0A:E5:64:BE:FA:EB:75:4E:5D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/B67diuNsH6SVKIQK5WS--ut1Tl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0/24
81.21.6.0/23
Signature Algorithm: sha256WithRSAEncryption
10:d5:73:6c:fa:d0:ab:ce:a7:cb:93:d0:9f:77:35:c4:f0:4a:
4d:ca:6d:ae:75:79:68:95:dd:c6:28:d2:5c:3d:ef:52:30:d9:
fa:25:0e:35:e9:19:13:48:1e:d7:f4:4e:23:20:b8:fa:83:37:
97:ae:7f:a6:6b:27:ab:81:c4:6b:87:bc:60:6d:13:1a:4d:2e:
c4:8b:7d:1e:5b:0a:ee:69:59:e7:93:3a:71:8f:e6:a9:a7:6c:
85:ef:04:d8:4c:09:8a:b4:bc:6b:2d:df:60:0b:78:32:90:74:
7a:e3:a9:5d:1f:20:42:87:d2:0d:1f:a9:cd:6f:92:8b:da:54:
c1:62:fb:d4:64:63:60:81:7d:10:46:27:42:2e:6d:ac:f0:d9:
94:60:cb:75:13:76:88:b0:2b:9e:14:6b:dc:c3:6e:4c:56:99:
8d:12:2d:5f:54:c9:7e:b5:a7:c7:4a:ca:45:06:85:67:57:19:
dc:5d:19:3f:39:5f:6d:a3:52:a6:4a:f7:2e:88:83:23:9b:cf:
ae:49:bd:93:e1:1a:65:6d:34:b6:74:8f:6e:a2:fa:29:06:f3:
c1:d3:dd:e9:7f:a3:1a:ac:d1:3c:65:65:46:8a:f4:61:eb:80:
6b:8e:82:b1:b1:15:ef:54:97:24:44:2b:80:11:89:5f:2c:5e:
47:da:e9:dc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFFcurS2t6jHA8gt86l+XgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwODEyMDcxNzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2FlZGQ4YWUzNmMxZmE0OTUyODg0MGFlNTY0YmVmYWViNzU0ZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquU7iGV3RRx9rLv1maACoNjR27Dz
oiteOTVzAkF+pHYZ0+/i7/zkEa/Bb3KElgtBHOW3k3ZlAYVlsEV82U8cdV4wziwu
Xpf4LZ/D1+15xa6+XdCyM1OF9EwI+n8W1oiNgi3Jal5CkZLDszU8bjNT+3adxbIy
4sdp+syTAIVSFUVFjI9prnYFduMuOnpq5PYWKKsvigtjuWI/yBSTSiKHVNAnUn3Y
mT5VO2yVHle9DVRYn+7EE3pv41qasQ9nVv/nn7qwgVpqi0eWPxD4dafUftOyQ3S1
emD1RvrCiWQCfqNLoPGS5WHIcoMAce95no1SIk5e+s3KIIR/iQHBJKuVBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAeu3YrjbB+klSiECuVkvvrrdU5dMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvQjY3ZGl1TnNINlNWS0lRSzVXUy0tdXQxVGwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPki3AwQB
URUGMA0GCSqGSIb3DQEBCwUAA4IBAQAQ1XNs+tCrzqfLk9CfdzXE8EpNym2udXlo
ld3GKNJcPe9SMNn6JQ416RkTSB7X9E4jILj6gzeXrn+mayergcRrh7xgbRMaTS7E
i30eWwruaVnnkzpxj+app2yF7wTYTAmKtLxrLd9gC3gykHR646ldHyBCh9INH6nN
b5KL2lTBYvvUZGNggX0QRidCLm2s8NmUYMt1E3aIsCueFGvcw25MVpmNEi1fVMl+
tafHSspFBoVnVxncXRk/OV9to1KmSvcuiIMjm8+uSb2T4RplbTS2dI9uovopBvPB
093pf6MarNE8ZWVGivRh64BrjoKxsRXvVJckRCuAEYlfLF5H2unc
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:17:42 2024 by rpki-client on console-fra.rpki-client.org