Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/U8qy5gAB0dAxKVI21EPKkmzJq2k.roa
File: U8qy5gAB0dAxKVI21EPKkmzJq2k.roa (raw, json)
Hash identifier: 5J/Kf/rrEvkZxiJNYUUSRfd4y6NUaYNNcBhlt/v/PDQ=
Subject key identifier: 53:CA:B2:E6:00:01:D1:D0:31:29:52:36:D4:43:CA:92:6C:C9:AB:69
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 018CC3489299AACF14578840038A8E922CD2
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/U8qy5gAB0dAxKVI21EPKkmzJq2k.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12684
IP address blocks: 62.202.160.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:92:99:aa:cf:14:57:88:40:03:8a:8e:92:2c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53cab2e60001d1d031295236d443ca926cc9ab69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:8d:18:09:bc:00:25:10:2d:d5:7f:6f:35:
b7:95:4b:58:de:95:4e:e7:73:c8:c1:a6:6e:cf:63:
83:06:85:20:3a:ba:72:5b:4a:bf:79:45:c8:e1:a7:
d3:b9:22:f4:7f:dc:93:ff:98:fc:8b:0d:3a:1d:67:
12:96:58:7d:44:8d:54:61:b7:89:c2:0d:87:20:8f:
0c:e1:6c:5d:e2:ea:02:4a:ad:85:bd:73:f5:60:80:
99:0b:83:01:70:f2:cd:84:52:b7:0d:87:c3:13:44:
e6:06:95:05:9c:ac:b5:22:02:66:b5:ca:6b:6a:d4:
7b:cf:e3:19:fb:dd:c0:57:b4:0f:6f:c5:e4:ae:46:
92:48:2e:6e:85:a1:52:52:bb:3b:3d:b3:f8:43:8c:
87:8b:a1:4d:91:04:3d:45:79:32:bd:6c:e4:fc:af:
75:cd:a6:7c:09:58:e9:8b:d8:da:78:22:6e:f7:ce:
71:c6:a0:d1:2a:10:f5:5e:bd:5f:54:88:e8:fe:ae:
6e:19:50:43:fb:f8:71:63:90:c5:65:65:98:a4:cb:
1e:81:43:ce:aa:86:97:07:05:30:68:1e:97:1e:0d:
0b:02:6e:f7:23:b7:64:bf:35:23:ca:bc:5d:d0:35:
fa:e4:95:93:ba:1f:39:4e:26:fc:7d:a6:9e:ea:17:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:B2:E6:00:01:D1:D0:31:29:52:36:D4:43:CA:92:6C:C9:AB:69
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/U8qy5gAB0dAxKVI21EPKkmzJq2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.160.0/20
Signature Algorithm: sha256WithRSAEncryption
45:37:9f:e2:09:07:72:42:4f:86:72:b7:90:dc:b7:0a:87:4b:
57:6e:90:18:f7:54:d1:96:fe:88:31:5f:8c:16:b2:c7:cf:a3:
62:e7:fa:e5:ce:ee:30:4f:13:5e:6c:c6:5f:de:bf:9e:f0:30:
78:aa:2b:0e:ef:a8:01:47:94:2f:06:a5:dc:43:c1:cc:af:17:
e9:a5:21:59:26:0a:23:e6:2e:a1:74:ef:c4:44:67:ec:c8:19:
97:ac:36:78:06:e2:81:b2:67:49:f7:64:a6:01:d9:7a:c6:19:
05:16:c0:e0:ea:12:e3:87:a0:3f:b2:c1:65:42:25:e7:3b:81:
e4:72:c4:0f:7a:a3:bf:f7:76:94:03:b3:53:53:4d:f0:73:ac:
f7:ab:06:23:23:91:38:bd:89:64:1e:e0:9d:00:ba:a8:9f:96:
04:6c:6e:e2:ed:73:18:d9:63:b5:ed:bc:f8:b4:ac:15:b5:17:
41:f1:e2:02:bb:38:75:74:1a:16:4e:9c:6f:6e:f3:81:23:b1:
d1:5a:82:a1:a9:81:39:e7:62:79:99:19:ff:c8:d9:97:aa:2e:
cd:cf:a6:6d:6c:fd:68:95:69:86:f4:de:fa:13:23:b5:1f:e8:
13:11:67:f0:a0:a4:7d:a0:96:c9:55:f9:28:ff:b2:6d:3f:8a:
91:77:e9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:20:44 2024 by rpki-client on console-ams.rpki-client.org