Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/TgSTvFQWjCBkYjh4K5zAO4U3BSY.roa
File: TgSTvFQWjCBkYjh4K5zAO4U3BSY.roa (raw, json)
Hash identifier: 04pJi3fg1HMi+mw7/Whvil0x5U1gmwdRO7cUR2PN30s=
Subject key identifier: 4E:04:93:BC:54:16:8C:20:64:62:38:78:2B:9C:C0:3B:85:37:05:26
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 018CC6B8DAC0904F4364E2A278DA4C8EB97F
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/TgSTvFQWjCBkYjh4K5zAO4U3BSY.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5618
IP address blocks: 62.193.16.0/24 maxlen: 24
62.193.17.0/24 maxlen: 24
62.193.12.0/23 maxlen: 23
62.193.13.0/24 maxlen: 24
62.193.14.0/23 maxlen: 23
62.193.14.0/24 maxlen: 24
62.193.15.0/24 maxlen: 24
62.193.18.0/24 maxlen: 24
62.193.20.0/24 maxlen: 24
62.193.21.0/24 maxlen: 24
62.193.3.0/24 maxlen: 24
62.193.4.0/24 maxlen: 24
62.193.5.0/24 maxlen: 24
62.193.6.0/24 maxlen: 24
62.193.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:da:c0:90:4f:43:64:e2:a2:78:da:4c:8e:b9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e0493bc54168c20646238782b9cc03b85370526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:f7:5d:a7:29:5b:04:96:c3:84:30:4e:6c:
25:ef:c7:7f:3c:0d:4c:2c:21:ef:3e:89:53:4f:07:
40:bd:42:54:8d:bf:f3:dc:ee:5d:31:48:c1:61:7e:
b4:99:0a:0f:45:35:b0:e4:7d:b5:66:8c:da:c6:2e:
79:2f:f0:21:25:18:ba:d1:bd:fd:9a:c8:2f:61:4d:
ac:47:96:67:94:cc:42:ab:8b:20:70:17:04:9a:df:
a4:81:ce:b7:f8:61:48:82:50:be:a6:8e:f0:fe:3d:
e9:c6:b4:b5:2b:23:a9:55:f9:9d:b7:b7:1e:08:49:
4f:aa:11:be:ca:7e:9b:3c:69:50:42:5e:05:6c:b9:
ae:39:7b:9d:47:0b:be:e8:64:c5:d7:9b:f8:5b:73:
5e:61:21:cd:b9:b8:66:4b:f5:0e:f6:6b:30:2e:7f:
63:8e:60:80:92:3b:56:2a:76:fc:e9:81:7e:3d:9b:
ac:fc:65:cd:ec:44:c6:fb:04:0c:c3:52:90:3e:d0:
c8:49:73:43:36:c3:55:26:6b:b2:3c:b8:fc:d8:03:
90:4e:b2:32:d6:eb:aa:e2:82:16:84:36:2c:a3:e8:
4d:3e:60:48:dc:5b:d0:42:29:d5:99:31:d9:1f:fd:
6c:99:75:83:70:8e:b5:0e:99:af:bd:a9:95:86:c5:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:04:93:BC:54:16:8C:20:64:62:38:78:2B:9C:C0:3B:85:37:05:26
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/TgSTvFQWjCBkYjh4K5zAO4U3BSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.3.0-62.193.7.255
62.193.12.0-62.193.18.255
62.193.20.0/23
Signature Algorithm: sha256WithRSAEncryption
81:ff:54:3a:af:c1:ea:44:d0:c6:02:f6:76:a6:92:06:cd:87:
1a:8b:74:b7:a8:94:3d:97:b7:27:ef:da:89:c4:83:cb:96:10:
b7:89:01:05:1a:2d:b9:22:0f:2a:ce:76:4e:64:5f:36:50:79:
91:7f:92:e9:99:35:6a:fc:7c:d9:6c:38:ad:e5:c9:70:d5:90:
95:43:18:94:8d:98:0f:90:c9:70:de:34:60:17:c0:8c:f1:5d:
ff:56:db:56:d0:4a:3b:a2:e2:5b:f4:4c:8a:a8:64:59:2d:97:
de:7c:24:eb:26:1b:58:0a:a3:4e:19:ea:1c:71:fe:26:45:aa:
00:55:a6:9d:e0:91:a8:10:fe:61:5a:0a:ef:d7:9c:36:f3:13:
33:de:3e:0b:ff:75:b4:43:d1:c2:9e:71:31:46:0f:a3:0c:72:
4a:03:10:65:52:82:a7:2c:de:96:2e:49:9a:ac:28:2e:40:57:
b2:7a:42:7d:70:19:d9:30:a4:0f:74:da:b2:2d:8e:29:a1:be:
76:ed:3c:42:37:12:15:c5:76:fe:1e:83:22:74:bd:68:a6:47:
a2:b0:90:96:76:85:4a:e0:71:49:b3:c4:f7:ea:61:53:c4:7e:
d4:7a:b7:1d:ce:ca:6c:1d:cb:00:2d:d2:d6:45:bf:6e:fe:93:
c0:05:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:56 2024 by rpki-client on console-fra.rpki-client.org