Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D1f3uH7gwk7D4TBJhYlVuS0iu3s.roa
File: D1f3uH7gwk7D4TBJhYlVuS0iu3s.roa (raw, json)
Hash identifier: vRNc/Fs3kEqWDlsBb+p9HMndkwWj6OEE/XiFfzmVZyc=
Subject key identifier: 0F:57:F7:B8:7E:E0:C2:4E:C3:E1:30:49:85:89:55:B9:2D:22:BB:7B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7AA9FC98AE13C2E80B07F9119A17B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D1f3uH7gwk7D4TBJhYlVuS0iu3s.roa
Signing time: Mon 01 Jan 2024 20:29:34 +0000
ROA not before: Mon 01 Jan 2024 20:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 62.72.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:aa:9f:c9:8a:e1:3c:2e:80:b0:7f:91:19:a1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f57f7b87ee0c24ec3e13049858955b92d22bb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:26:97:7c:4e:70:58:a7:cf:59:11:c9:07:
c5:42:41:09:bb:6a:7b:75:1d:ce:f1:a0:c0:36:59:
4b:25:ea:0a:2c:c6:51:b9:bb:0f:f5:ec:ed:fc:90:
ca:63:d6:f1:e6:cd:c0:35:55:76:42:d9:85:2c:da:
55:28:9a:86:2c:31:1d:7d:41:52:26:1d:7b:e0:8b:
d1:42:40:8d:95:30:d8:76:e3:7c:dd:9e:4f:7c:a9:
f3:34:b2:fe:36:34:ae:0f:73:c9:01:03:67:a5:b5:
22:82:28:a5:56:3e:45:44:21:43:d9:2e:96:58:c2:
c3:ca:30:7a:ea:dc:92:68:0a:dc:fa:09:85:c8:eb:
e6:79:05:6b:de:03:a9:35:07:b0:e7:86:c6:4e:91:
d2:d3:90:bf:94:53:09:21:86:42:85:01:85:b6:2d:
7c:82:fb:dc:77:cb:98:ec:d2:cf:3b:3d:88:9f:b7:
20:93:3e:75:0e:8f:b0:25:27:74:4c:c1:d1:c5:2e:
43:d8:cc:db:9d:6c:bd:1c:04:92:69:a5:eb:5c:d2:
47:3d:70:5c:f0:b0:3a:7c:08:a5:0c:e9:f8:82:ec:
80:a8:19:d9:72:34:43:e0:f6:fe:ec:fb:9f:04:a1:
c5:c0:30:9b:cf:8d:8d:e6:35:bd:aa:cf:90:0b:9d:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:57:F7:B8:7E:E0:C2:4E:C3:E1:30:49:85:89:55:B9:2D:22:BB:7B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D1f3uH7gwk7D4TBJhYlVuS0iu3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.166.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d0:50:67:02:ea:34:da:18:50:7c:ed:a1:f2:08:d6:64:4e:
aa:9a:5f:2e:1e:64:a6:09:ef:86:36:a3:54:b3:ed:5d:c2:17:
57:90:d1:dc:07:8f:1d:77:08:2f:27:1d:1f:69:74:1f:79:d2:
d6:75:b8:fb:19:df:18:f0:bf:a6:5a:31:25:82:fd:0b:93:c3:
5e:a2:ad:66:11:93:9c:5a:f4:43:ac:41:6a:34:14:5c:98:cc:
ba:73:6d:7e:a3:46:58:51:92:37:b8:a3:3e:8b:4a:4e:33:d3:
80:c9:cc:19:a6:15:e3:90:96:d7:fc:a2:46:b2:8a:b6:ce:0c:
72:f7:ab:83:0a:42:f2:81:59:1b:ca:9f:5f:59:cf:ab:e7:69:
93:35:df:ed:ff:67:25:d8:ad:65:a5:88:30:7a:6e:7a:b8:7a:
fb:5e:2a:ad:db:72:b9:40:13:3b:71:b5:5d:cd:b8:a5:84:bb:
4c:db:8b:49:f9:f4:aa:d5:44:8b:ba:0f:6d:0d:91:83:f3:69:
57:df:43:a0:9d:aa:e2:b8:64:fb:34:74:1d:08:69:00:a1:c9:
b3:04:1e:66:61:9e:24:41:3a:62:62:5a:f1:0c:ce:0d:22:2e:
51:ae:f2:9e:2d:84:f0:d5:58:e3:f0:d2:17:e0:e4:9d:f3:ad:
e1:b5:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:17:37 2024 by rpki-client on console-ams.rpki-client.org