Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/zD8FRnYOqH4VLEgYQJpXLKszFa0.roa
File: zD8FRnYOqH4VLEgYQJpXLKszFa0.roa (raw, json)
Hash identifier: unbf31YLM9GVMJ5oQO/P7vfWZ2Zn19btMy2asb9iBfI=
Subject key identifier: CC:3F:05:46:76:0E:A8:7E:15:2C:48:18:40:9A:57:2C:AB:33:15:AD
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 018CC2DB1E39F36F70D7CDE5FF7402353D63
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/zD8FRnYOqH4VLEgYQJpXLKszFa0.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210646
IP address blocks: 62.233.37.0/24 maxlen: 24
2a11:9d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1e:39:f3:6f:70:d7:cd:e5:ff:74:02:35:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc3f0546760ea87e152c4818409a572cab3315ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:b0:12:24:3a:a3:51:eb:96:57:fd:cb:31:
02:3a:7b:7f:b3:6c:a3:13:1f:50:80:e6:97:15:19:
94:5b:48:0c:18:ca:26:9f:02:98:03:cd:1f:00:2b:
ea:ff:f2:37:5f:66:b8:38:62:fc:6d:34:7d:e5:78:
3e:8f:f9:35:22:5a:9b:0e:e3:02:37:27:db:08:f0:
a4:18:be:6c:f4:52:0f:a7:f9:c8:0e:d4:fd:c8:b3:
db:ce:7f:d5:3b:6f:c7:82:08:f8:fc:7f:2a:9f:ef:
7b:7b:d8:b1:b2:e7:a6:a0:1c:b9:e1:7a:fa:d7:cc:
01:d5:82:af:46:7c:77:26:75:f3:88:61:dc:2e:40:
d4:51:74:aa:f5:e8:4f:72:dd:0c:06:7b:09:7a:31:
04:f7:a3:81:78:4f:ad:24:2d:39:0f:9f:32:d4:b3:
50:da:3e:fe:2c:d6:53:bf:70:a0:ac:3e:2a:ef:96:
8d:4e:8a:2f:f2:49:bf:05:6a:69:a7:d9:84:3e:4e:
02:c4:11:17:6a:30:34:fd:e3:35:87:42:10:ea:52:
fb:5d:1f:be:8b:c1:cf:c0:d0:61:cf:ec:fb:84:41:
ae:73:27:b3:1d:82:ca:cd:b9:78:67:26:b5:8d:b1:
54:fd:c5:b5:31:4e:c1:d7:c1:d3:2c:7e:8c:94:32:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:05:46:76:0E:A8:7E:15:2C:48:18:40:9A:57:2C:AB:33:15:AD
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/zD8FRnYOqH4VLEgYQJpXLKszFa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.37.0/24
IPv6:
2a11:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:d4:fd:bf:4f:b5:78:f2:7d:de:6e:a4:7b:fc:9f:0b:1e:65:
03:85:9f:6f:e0:8e:1f:88:c2:b2:f3:cc:36:f8:69:14:e5:79:
32:43:c7:9e:47:46:01:7d:bf:b2:2a:5c:46:44:34:0f:e9:09:
71:b1:09:62:68:94:9c:0a:1f:f5:85:5e:91:fb:19:90:ec:46:
0c:cb:6c:d8:ff:02:64:99:a9:4a:6b:ff:da:6d:da:74:49:ba:
b5:77:71:55:2e:84:c4:c6:fb:cf:b6:f5:48:9a:7b:be:ff:ae:
92:21:bb:86:7e:7e:b1:25:7a:88:b6:78:81:12:83:7c:d0:ca:
2e:3b:e5:4a:d8:da:4a:fb:a3:94:1a:dd:00:6e:53:ab:c3:4a:
24:9c:02:f7:82:54:3c:e6:42:5c:42:58:64:68:73:fc:6c:19:
20:2a:73:19:32:d7:ea:fb:38:4f:43:b8:d3:72:12:b4:43:38:
f5:83:dc:cc:30:a5:d8:e4:5e:b4:cd:8d:52:36:c9:e0:42:35:
49:49:39:a9:63:f4:30:e0:56:80:3f:08:5a:33:fe:f6:b5:a9:
16:10:ed:8b:44:8a:78:5a:5b:da:20:85:30:91:ea:fb:66:87:
11:dd:ac:1d:8a:7e:23:4f:ad:26:44:f6:4f:a0:ec:f8:71:d1:
4c:99:fc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 19:59:35 2024 by rpki-client on console-ams.rpki-client.org