Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/efYdTowj3f6xLCADplMREZ84JME.roa
File: efYdTowj3f6xLCADplMREZ84JME.roa (raw, json)
Hash identifier: URCkLyKc3gYgTk8bG0JnTvIknbc8Dwa0siaT593T+Pc=
Subject key identifier: 79:F6:1D:4E:8C:23:DD:FE:B1:2C:20:03:A6:53:11:11:9F:38:24:C1
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 018CC3B6FD2C303DCDA28BF009E7284C2ECA
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/efYdTowj3f6xLCADplMREZ84JME.roa
Signing time: Mon 01 Jan 2024 06:29:58 +0000
ROA not before: Mon 01 Jan 2024 06:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44517
IP address blocks: 62.68.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:fd:2c:30:3d:cd:a2:8b:f0:09:e7:28:4c:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Jan 1 06:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79f61d4e8c23ddfeb12c2003a65311119f3824c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:f1:c1:4c:cb:03:e0:a4:cd:c7:51:b4:2b:
21:dd:94:6a:93:d9:07:c9:46:3a:a7:43:30:3e:75:
12:cc:98:87:08:24:e4:77:ac:b3:24:af:ec:d7:d5:
b5:a9:4f:dc:e7:2b:c3:f9:c2:2c:b4:9d:13:b1:67:
64:0a:98:34:d5:0b:ab:a0:67:b5:1a:79:42:f3:c9:
21:1a:a9:32:c5:37:8c:36:2f:90:ac:ed:4e:38:a1:
9b:f4:4c:48:e2:6f:d3:f3:a1:2e:c3:b7:cc:56:e1:
4a:a5:e4:40:e3:f0:89:3d:96:48:93:11:09:85:9c:
c7:1e:aa:43:52:c1:33:06:2c:d6:96:45:57:08:7f:
8b:64:ec:a1:46:b4:f9:8a:3d:c3:33:4d:f7:e2:bc:
5e:51:4d:4f:83:bb:98:37:dc:70:a2:f8:e5:29:36:
39:68:13:71:d0:42:a4:ef:91:49:2f:ef:51:c0:2a:
a9:a0:96:58:b3:7e:c5:07:0f:a3:bb:1c:50:ba:bc:
a0:7c:9b:e3:60:09:07:84:44:11:07:b6:62:d1:a6:
87:31:d2:b8:3d:b1:f6:fd:27:68:9c:68:86:11:2c:
11:7d:6e:9a:d8:c7:9c:54:63:87:d4:bc:d4:72:d1:
7f:a0:41:c3:cd:d0:10:b3:d7:49:f6:b8:ad:a2:bf:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:1D:4E:8C:23:DD:FE:B1:2C:20:03:A6:53:11:11:9F:38:24:C1
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/efYdTowj3f6xLCADplMREZ84JME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.67.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f2:0f:14:25:42:ff:91:b9:45:50:6f:7d:ed:1b:10:db:25:
cb:ae:bd:b2:5b:0d:12:ba:a8:e2:b6:fd:ea:93:33:37:1f:cc:
c8:62:f8:74:f0:46:40:92:40:85:17:93:98:78:66:ea:1b:f2:
bf:44:63:a6:30:53:53:d9:77:6e:40:b0:39:e2:d5:25:02:20:
71:98:95:6c:c7:c9:b8:ef:cf:69:51:01:40:3c:e6:98:cf:cf:
ae:35:35:d9:a7:25:76:66:f6:58:0b:9b:28:1e:88:16:4a:c0:
05:2a:49:39:8f:21:c0:57:b4:4a:cf:f3:6a:c0:75:cd:d0:2e:
91:c4:f6:ca:ef:e3:73:6d:ba:e6:12:fc:2a:c5:76:6b:07:4d:
8d:f1:69:9f:35:86:3e:d7:6d:1c:93:cd:d2:aa:ef:ea:0e:fb:
81:01:be:67:24:86:24:d0:e0:75:70:1d:7e:e7:c2:74:8a:2f:
16:25:74:e4:b9:da:1f:56:8d:e5:8f:62:4d:4c:3f:73:c0:a2:
32:e0:17:ca:bb:3a:e6:c1:eb:e8:e8:83:24:e5:e6:00:7b:84:
84:19:2a:b9:dc:00:24:b0:22:33:57:bf:f3:8e:4b:a6:ea:dc:
c2:54:82:17:1a:58:39:c3:a3:d7:39:52:a4:4d:f8:b0:d9:ee:
c5:81:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:57:05 2024 by rpki-client on console-ams.rpki-client.org