Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i0o96JO76KUtJGvtgXG6LgLrGlA.roa
File: i0o96JO76KUtJGvtgXG6LgLrGlA.roa (raw, json)
Hash identifier: kVOyOHKj7lp2Rn/Yf8Dk0G4I7SXGDwOUJ434G/ejkhU=
Subject key identifier: 8B:4A:3D:E8:93:BB:E8:A5:2D:24:6B:ED:81:71:BA:2E:02:EB:1A:50
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D4EE61C1A5995D6C71F07A7D7FBCC1984
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i0o96JO76KUtJGvtgXG6LgLrGlA.roa
Signing time: Sun 28 Jan 2024 07:08:39 +0000
ROA not before: Sun 28 Jan 2024 07:08:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400328
IP address blocks: 62.72.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4e:e6:1c:1a:59:95:d6:c7:1f:07:a7:d7:fb:cc:19:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 28 07:08:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b4a3de893bbe8a52d246bed8171ba2e02eb1a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:63:65:7b:e9:77:91:ab:a6:19:80:af:14:ee:
a5:89:29:25:d9:5d:6e:93:38:2f:27:10:9b:d0:c1:
d2:d5:62:fd:a8:c2:4e:01:f8:18:3b:af:8a:30:0d:
54:a8:41:ca:b0:85:86:3e:ca:0e:be:46:6f:e4:94:
2d:4b:8f:02:39:1b:da:f0:df:13:2a:6f:05:2b:06:
28:9d:d4:4e:98:41:40:93:87:e7:b7:71:1e:fb:72:
67:20:2c:ad:f0:9a:fd:02:da:61:67:15:ac:dd:56:
b5:15:28:c8:6d:f0:3a:f9:39:d6:4f:b4:83:58:72:
30:59:7f:30:7f:01:cc:a6:17:f8:e3:a7:26:75:b2:
07:16:f3:ab:cd:23:1e:a9:9d:c2:95:db:12:5f:26:
eb:21:d8:02:cf:a6:6d:2a:1a:ae:50:fa:b9:71:93:
87:08:83:71:73:25:c1:24:46:de:8f:1b:1b:3e:42:
82:a1:f8:ca:55:78:cc:d9:10:88:65:84:52:bb:d6:
a6:62:da:28:08:9f:33:93:9b:62:0a:ed:c3:66:9f:
f2:16:ed:54:ce:69:5f:27:f1:7c:eb:17:6c:3d:56:
1e:0f:5e:7e:55:10:9e:67:80:ac:5e:7c:33:5b:b5:
58:de:8b:13:1a:80:c5:7a:18:5e:31:4d:01:31:ef:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:3D:E8:93:BB:E8:A5:2D:24:6B:ED:81:71:BA:2E:02:EB:1A:50
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/i0o96JO76KUtJGvtgXG6LgLrGlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ae:8e:31:5e:8a:9d:7e:d8:87:87:0b:26:14:3c:6f:39:e6:
af:57:83:2a:fb:86:90:3f:16:f8:40:44:17:bd:6e:11:ce:5e:
c7:21:75:3f:b7:65:0c:bf:43:85:29:1b:b4:8b:31:76:72:c0:
ec:52:43:37:5f:51:80:19:18:e9:02:30:6c:00:81:f7:91:33:
04:8c:f0:dd:70:ad:85:a6:6a:1b:ca:11:84:52:0e:ee:5b:db:
20:dc:8a:3e:d6:84:af:00:b5:54:c9:10:1a:05:34:bf:83:21:
c4:1d:f0:bf:6c:24:b5:8c:49:ed:cf:95:ff:08:22:db:cb:aa:
f0:f5:52:eb:f4:e2:61:7e:e7:0c:32:31:b8:c1:32:ef:03:64:
6d:f5:fc:d0:16:09:64:2e:a6:b5:ef:2a:8b:b0:4f:90:c8:2a:
95:3b:91:23:ac:12:f1:90:93:8b:56:62:95:97:6c:f4:16:9f:
67:a1:41:a7:1f:47:9f:8a:0c:5b:e3:fd:2f:a5:1c:a1:54:8f:
58:4c:6e:98:42:30:a5:a3:48:fe:65:3b:eb:e2:72:33:97:f6:
e3:b3:75:01:fa:7b:0d:ca:49:f0:2c:9d:26:45:73:d5:d0:0e:
a9:63:60:28:b2:60:ca:c7:5a:e7:7c:25:d7:74:6a:ec:05:5e:
c8:29:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:13:27 2024 by rpki-client on console-ams.rpki-client.org