Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/Yu6AEORxQNmDV-NzS4ySanVGegw.roa
File: Yu6AEORxQNmDV-NzS4ySanVGegw.roa (raw, json)
Hash identifier: HFCeHoAW8u+BBtdwDHItYiWSbm1ioD9bRwnTT4rfq6Q=
Subject key identifier: 62:EE:80:10:E4:71:40:D9:83:57:E3:73:4B:8C:92:6A:75:46:7A:0C
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 018CC649A92E930233E2C39C46BF91709B91
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/Yu6AEORxQNmDV-NzS4ySanVGegw.roa
Signing time: Mon 01 Jan 2024 18:29:25 +0000
ROA not before: Mon 01 Jan 2024 18:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42504
IP address blocks: 62.122.64.0/24 maxlen: 24
62.122.64.0/21 maxlen: 21
62.122.68.0/24 maxlen: 24
91.192.152.0/22 maxlen: 22
62.122.67.0/24 maxlen: 24
62.122.70.0/24 maxlen: 24
62.122.66.0/24 maxlen: 24
62.122.69.0/24 maxlen: 24
62.122.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a9:2e:93:02:33:e2:c3:9c:46:bf:91:70:9b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Jan 1 18:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62ee8010e47140d98357e3734b8c926a75467a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:fc:71:a1:54:b1:14:0c:71:0c:ef:b8:94:
38:b6:2d:d6:ad:93:93:69:5e:63:f1:3b:77:c4:0d:
d1:5d:06:58:27:8c:83:ca:05:f3:60:ef:b3:fa:f5:
f7:dc:43:ee:c2:3a:f0:55:03:dc:46:ee:52:d1:78:
f0:ed:3b:53:d3:c1:55:bf:2f:3a:0a:3f:8a:c8:01:
46:0f:2c:0d:8e:1f:99:de:78:05:8b:a9:e8:87:60:
bb:7c:47:2d:12:0c:cd:8d:70:6a:71:0e:37:1b:9e:
46:b1:37:b2:01:40:60:61:eb:2a:5d:b2:97:46:be:
cf:c0:11:2c:62:bb:a8:95:dd:18:aa:7b:51:aa:d6:
cd:42:79:e0:bb:d8:ef:7e:31:c8:fb:7a:de:6a:b6:
77:24:ef:1b:10:19:55:01:ec:3c:fd:6c:2a:46:3e:
da:9f:a0:d2:74:2a:39:94:15:f2:41:6a:d6:b6:23:
f2:27:6e:6e:32:19:cd:4f:15:4e:ec:11:62:a8:cd:
44:86:cb:9d:7e:42:8f:54:72:39:f3:75:c1:78:46:
c9:62:87:4f:6a:da:dd:6b:96:6c:07:56:db:20:f1:
1a:19:3d:e4:5b:cc:9c:3d:41:19:54:ca:22:50:e3:
4b:25:28:89:61:bb:6c:b6:70:88:7c:1b:5e:d4:9a:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:80:10:E4:71:40:D9:83:57:E3:73:4B:8C:92:6A:75:46:7A:0C
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/Yu6AEORxQNmDV-NzS4ySanVGegw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.64.0/21
91.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:de:74:6d:a2:8a:9a:4b:cc:c9:5f:c6:bd:d9:83:3a:ac:54:
d4:a0:a0:b6:55:eb:12:35:b0:44:a4:a2:03:2f:a4:68:fd:c9:
a3:fa:01:36:84:8e:84:d2:29:cc:54:ee:25:5f:cf:55:7d:69:
af:a5:1f:cc:aa:92:41:9e:8e:ae:8a:b3:9d:55:8d:97:93:13:
e6:29:fa:d2:9a:e5:6d:4f:ed:49:db:3d:8a:e8:72:28:5a:d0:
a1:5c:31:4f:0d:32:0f:1e:87:32:c0:a5:b0:be:c1:ce:df:3a:
2f:4a:b7:42:ad:c0:a9:fe:19:21:61:13:63:32:fa:b1:d9:d8:
47:3b:ed:0f:ef:e8:6c:10:96:99:5b:d1:62:2d:7a:c9:b9:44:
7b:e1:89:0d:f9:12:d7:f1:e4:78:af:31:22:82:1d:20:d0:1a:
1d:79:2b:50:7d:a3:57:77:f0:a3:40:d2:c4:b7:6a:45:b5:2e:
be:4d:91:73:40:7a:40:f3:14:7c:52:40:b1:9d:16:41:14:be:
c7:25:d0:4f:4c:4a:61:0d:5f:c3:ad:70:5c:bb:5a:27:78:71:
65:55:0f:07:ee:5f:93:fb:ee:bb:58:0c:9b:1a:13:e1:f9:a4:
b1:9a:57:6c:60:17:a9:bc:27:2d:0c:86:6c:08:9f:9d:f6:3d:
b0:32:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:10:31 2024 by rpki-client on console-ams.rpki-client.org