Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/oF3tLW6W2taiqhTBm75QIk5aKKI.roa
File: oF3tLW6W2taiqhTBm75QIk5aKKI.roa (raw, json)
Hash identifier: nbE23GmYtyG9gpfyd8mZ4N0C1ughqFu4eJ/brnltgB0=
Subject key identifier: A0:5D:ED:2D:6E:96:DA:D6:A2:AA:14:C1:9B:BE:50:22:4E:5A:28:A2
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 018CC34892EBC1670F84B99A9890F9E65B11
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/oF3tLW6W2taiqhTBm75QIk5aKKI.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 62.202.152.0/21 maxlen: 24
62.202.160.0/20 maxlen: 24
2a02:1215:ffff::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:92:eb:c1:67:0f:84:b9:9a:98:90:f9:e6:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a05ded2d6e96dad6a2aa14c19bbe50224e5a28a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:d2:bc:40:6d:82:1e:69:b0:ac:07:3c:61:
62:79:41:55:3a:17:4b:1b:df:ed:97:17:d7:32:d8:
c3:ca:c2:db:e6:b2:17:51:ec:73:25:14:f9:92:c8:
99:23:a9:7f:a7:0f:1d:84:17:fc:17:47:93:a4:8c:
11:f8:b0:4a:17:cf:30:ae:86:82:3e:cb:86:9e:9b:
89:70:0b:7f:e2:a2:0b:fe:8d:46:af:e1:d8:fc:85:
4c:cc:a2:cb:2d:70:85:bd:72:43:8b:de:15:91:55:
9e:8a:5e:23:6a:96:54:7c:f3:19:83:ba:ff:46:87:
e6:b6:bc:61:cb:48:ab:7a:df:0a:c0:85:d4:e5:e6:
4e:7e:96:68:5e:19:9e:97:5e:4c:41:9a:a3:bc:fa:
1b:d1:95:a7:07:51:e5:fc:8e:da:4c:a3:b5:dd:c4:
e8:4e:64:05:50:ba:11:8d:fa:04:fb:ee:a9:da:c2:
66:09:bf:b0:31:50:d9:6c:07:c1:99:c2:b2:d3:c1:
3c:e4:91:36:b7:19:54:7c:5e:0e:12:71:5a:ca:78:
e7:a5:31:52:eb:4b:5f:27:a4:0a:d1:0a:56:09:04:
2e:e3:63:fa:29:80:fc:e7:1f:94:e4:78:c1:c3:63:
7b:f4:ab:4c:22:0f:fc:72:ee:a9:0a:ba:eb:85:08:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5D:ED:2D:6E:96:DA:D6:A2:AA:14:C1:9B:BE:50:22:4E:5A:28:A2
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/oF3tLW6W2taiqhTBm75QIk5aKKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.152.0-62.202.175.255
IPv6:
2a02:1215:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
76:8f:d0:57:5d:8f:2e:51:d3:a0:fb:8a:d5:1f:2d:57:71:a2:
a8:a3:65:79:ec:f8:3d:89:e1:a8:c5:84:20:da:d0:93:bb:81:
b2:72:54:78:aa:54:41:b5:8a:51:13:21:ee:de:73:48:da:c3:
f7:33:b0:fb:22:df:0b:c5:1f:9d:69:cb:78:e6:92:54:d5:be:
47:2a:c2:33:e6:10:c2:c0:55:e4:01:a8:50:96:de:4d:f1:50:
86:bc:c6:2e:c2:14:09:19:cb:ff:43:d9:ca:58:9a:47:c6:4e:
bb:a4:e3:7d:fa:b8:4b:41:d0:53:24:19:10:c5:2e:95:e4:36:
6e:8a:fd:bc:01:79:aa:a6:7f:b8:02:49:2b:51:89:cf:43:5d:
06:49:d7:0a:c3:19:b1:4d:3b:83:4f:10:0a:d3:3d:56:fc:7c:
d7:51:ff:2a:30:15:67:46:5c:e4:42:2d:8a:59:4b:d8:09:47:
b5:09:44:d5:fa:0b:12:e8:2d:ac:94:12:fe:bc:52:fa:8f:95:
38:09:e3:af:47:6d:98:ad:d6:d2:53:b4:21:a5:24:2c:52:e0:
01:a7:4e:a5:18:d7:8c:d5:46:84:fe:ab:6c:6a:04:ee:9b:85:
6e:ae:b3:e2:86:57:ca:15:5e:03:2c:c7:25:28:18:36:43:39:
91:12:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:59:50 2024 by rpki-client on console-fra.rpki-client.org