Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UhN-unRDxQtkBaN34dLB4srWylQ.roa
File: UhN-unRDxQtkBaN34dLB4srWylQ.roa (raw, json)
Hash identifier: tMf4lxF+jQRKIX26LQP/WJS8wL+YK2sJibMcJ3TIRLk=
Subject key identifier: 52:13:7E:BA:74:43:C5:0B:64:05:A3:77:E1:D2:C1:E2:CA:D6:CA:54
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CFED1A39C48D84257E16FA6AC2A8B9F35
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UhN-unRDxQtkBaN34dLB4srWylQ.roa
Signing time: Fri 12 Jan 2024 17:56:40 +0000
ROA not before: Fri 12 Jan 2024 17:56:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54252
IP address blocks: 62.72.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:d1:a3:9c:48:d8:42:57:e1:6f:a6:ac:2a:8b:9f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 12 17:56:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52137eba7443c50b6405a377e1d2c1e2cad6ca54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:f8:aa:35:d6:46:56:c5:4f:98:8c:59:35:
20:f9:54:21:bc:30:7b:9e:8f:da:f4:f5:de:61:d3:
6a:6d:e4:ac:08:99:13:eb:b5:11:ec:08:f2:c9:ae:
f7:4c:16:bd:34:7a:98:f3:c5:7e:17:49:3c:ce:7e:
de:8b:9f:fb:77:90:99:b0:90:68:83:b8:5b:39:71:
4f:67:14:c8:80:f0:12:7e:a4:1d:3b:5c:14:64:0e:
b2:92:fe:9a:2b:e7:9a:6d:dd:1a:e9:4b:dd:63:d1:
2e:a1:9e:29:e7:38:34:3b:51:9c:45:a4:66:13:c3:
ff:e8:56:4e:7f:89:b3:2b:cf:48:c9:2c:23:35:07:
f0:38:a0:fc:2a:51:c5:15:7b:08:31:44:cb:36:55:
c6:4e:47:c0:98:be:e7:32:2e:2c:c7:b2:ff:68:91:
7b:67:40:d2:0d:9c:8c:a6:df:5b:31:3a:94:45:fd:
38:8d:d4:d2:16:a1:3a:c7:96:6e:38:bf:eb:80:7e:
06:5a:d9:77:0d:f7:60:e5:93:13:c5:bb:1a:28:75:
77:83:b4:50:c6:b6:a4:fb:1b:ba:77:9e:a6:1e:8f:
3b:cb:66:41:56:23:fe:84:57:1e:07:7a:a8:89:91:
23:a9:c7:3d:19:35:e5:09:0c:5e:5f:c0:62:d8:9e:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:7E:BA:74:43:C5:0B:64:05:A3:77:E1:D2:C1:E2:CA:D6:CA:54
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UhN-unRDxQtkBaN34dLB4srWylQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0/24
Signature Algorithm: sha256WithRSAEncryption
93:40:85:b7:a6:cb:d1:0d:5d:07:e8:0a:38:bf:02:ab:2e:ec:
c2:83:56:b4:66:13:84:bd:7d:38:b1:5e:d4:bc:19:32:05:d4:
52:9d:e1:f4:25:7c:3d:a9:76:c4:09:7d:d2:a2:e3:8c:27:11:
61:50:65:55:c4:bc:f2:3e:04:72:af:fc:1a:13:a9:3f:49:00:
5b:f5:5b:33:70:29:0c:f3:aa:85:70:3c:fe:bb:f4:35:55:47:
e6:0d:65:45:08:58:ef:91:03:a7:3f:04:2e:44:42:3f:04:5d:
01:78:13:c2:4a:e9:eb:f7:60:ec:57:7a:82:38:0b:bf:0d:d8:
8a:db:a2:61:7a:87:b3:1d:ae:94:19:ab:18:7a:b2:16:65:cc:
c7:eb:89:1c:cb:4b:c3:c3:f6:2b:85:f9:53:e4:e3:5e:c8:c0:
90:03:77:03:43:8b:36:13:53:29:46:a1:5f:1b:ce:35:f8:01:
35:e0:45:50:1f:56:7e:ca:40:4f:de:57:3e:c7:f8:cc:82:d2:
03:8f:8d:0a:db:37:99:f0:da:95:94:5e:0e:74:a0:e4:3e:ff:
13:f5:04:ca:36:07:7a:d2:5a:26:3d:3c:2f:89:30:69:10:f8:
30:58:ef:24:07:a6:92:84:63:42:4c:5b:cd:58:50:83:60:6d:
c9:84:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:30:30 2024 by rpki-client on console-ams.rpki-client.org