Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/L3wCSAD8yC0tq7ZF53nRo-RtlmQ.roa
File: L3wCSAD8yC0tq7ZF53nRo-RtlmQ.roa (raw, json)
Hash identifier: hf9t4djwLI0GUJk25PpPCO5nTGJgZYlqoP5wjy3fTpQ=
Subject key identifier: 2F:7C:02:48:00:FC:C8:2D:2D:AB:B6:45:E7:79:D1:A3:E4:6D:96:64
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7AE8CAE37381347C70CA85670BB87
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/L3wCSAD8yC0tq7ZF53nRo-RtlmQ.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 62.72.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ae:8c:ae:37:38:13:47:c7:0c:a8:56:70:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f7c024800fcc82d2dabb645e779d1a3e46d9664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:88:a1:75:8a:de:b9:ad:a2:fa:fc:3f:d0:
07:71:4d:ce:23:70:65:b4:13:8b:2b:eb:8d:01:9d:
2b:51:a3:82:b7:3e:b7:26:bf:a7:65:4a:8e:d3:f4:
ad:cb:0e:7d:7a:15:25:dd:e9:9e:ea:58:76:0a:e5:
06:dc:66:42:c5:cd:e3:ff:a2:83:56:c6:e1:7e:ff:
d4:ba:20:3e:e4:b8:4a:43:82:9b:76:15:78:e4:d1:
59:f2:d9:83:e3:db:70:1f:ac:a1:ce:73:07:26:7d:
b4:1e:45:66:6e:03:7c:ec:c8:70:b4:c8:b1:22:4c:
dc:f0:9c:d6:fd:1f:61:f6:95:b5:73:e5:ca:c9:a2:
08:43:ac:f6:1b:d1:4d:23:c6:87:4b:3b:97:30:f3:
d6:8b:e4:9c:16:f5:7e:fa:e3:ff:66:86:08:ad:7c:
f4:0b:43:d8:47:89:e9:65:7f:1f:52:34:4b:d2:c8:
73:35:c2:6c:4c:00:88:d6:bf:bb:da:e9:bc:c6:0b:
24:be:5b:85:75:f6:0a:69:ac:2e:7f:b2:80:08:ba:
22:96:be:f2:85:61:5f:99:dc:f7:99:52:ec:05:c3:
b8:bf:85:c1:b7:dc:4e:21:68:fe:03:86:b8:0d:44:
0d:19:e5:c7:df:5d:51:24:1a:05:38:85:e3:67:7c:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7C:02:48:00:FC:C8:2D:2D:AB:B6:45:E7:79:D1:A3:E4:6D:96:64
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/L3wCSAD8yC0tq7ZF53nRo-RtlmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:23:87:ca:10:12:fa:b5:ce:80:9a:3f:38:3d:bf:4c:c9:ed:
e9:a3:31:6b:0d:29:dc:d6:ce:3b:96:01:fe:db:90:a4:5a:fb:
ab:d5:55:af:a4:b7:ae:17:11:3c:e1:69:d7:fa:ce:4d:44:76:
42:85:47:96:4a:d9:80:70:bd:df:1d:07:fd:f2:58:59:40:a9:
ef:ff:55:d6:f7:94:0b:b9:14:2a:be:d7:af:44:a1:4c:ae:9e:
3c:50:d0:f1:8c:3d:96:98:29:6f:8d:f7:91:5a:2e:43:dd:8b:
eb:89:78:37:d0:64:df:46:94:92:a3:af:60:de:33:b5:2e:b5:
c2:33:32:56:01:70:0c:5d:8a:8c:31:ac:df:f1:dd:74:68:2a:
9c:38:a3:10:35:f2:e1:99:03:95:61:2b:70:d9:4d:2f:8d:2b:
a7:f5:c9:b8:eb:81:f0:5f:7b:8a:cd:ab:d8:65:3d:01:5b:46:
3d:a6:10:e6:e5:ed:10:f8:28:bf:c7:a0:2e:5d:e8:91:ad:4a:
b1:fe:a1:e2:b5:55:10:24:00:71:2a:a6:0b:e9:9e:97:fa:f9:
d1:ed:cc:af:3a:63:96:71:e9:e3:9e:dc:52:15:96:47:08:95:
b7:c4:f9:33:df:42:85:ee:cf:8a:c9:9c:de:61:fc:f5:f7:9d:
4f:08:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:34:30 2024 by rpki-client on console-fra.rpki-client.org