Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-JcucGPi_ZDGbYJ6MVR3u8JZDW8.roa
File: 1-JcucGPi_ZDGbYJ6MVR3u8JZDW8.roa (raw, json)
Hash identifier: DG0btEsDhiGM4RoQzrrSxO6aRragGbKTlAytC8rRxwo=
Subject key identifier: F8:97:2E:70:63:E2:FD:90:C6:6D:82:7A:31:54:77:BB:C2:59:0D:6F
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC501504C0A36F5436D0EB833EC8CC6B9
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-JcucGPi_ZDGbYJ6MVR3u8JZDW8.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207971
IP address blocks: 62.228.246.0/24 maxlen: 24
62.228.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:50:4c:0a:36:f5:43:6d:0e:b8:33:ec:8c:c6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8972e7063e2fd90c66d827a315477bbc2590d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:ff:e3:a6:e7:51:40:dc:b8:db:c1:da:03:
2e:25:52:cb:d2:2d:ff:c1:cd:68:91:0d:17:a7:a4:
c7:ae:6c:fd:1c:bb:09:3b:c6:69:2e:4b:18:4f:fa:
ec:23:89:48:fc:d0:32:13:15:5c:e8:95:00:7f:6b:
66:fb:9e:16:a8:6f:2a:df:db:10:5c:37:99:07:fe:
d6:a6:ac:6c:ee:a7:ff:8d:02:d4:bd:4b:e4:4f:4d:
49:dd:f5:47:98:24:88:aa:21:6f:f4:8c:25:aa:49:
f1:57:f7:36:4e:b1:df:c6:47:bc:29:16:9d:b3:c7:
ce:65:93:ec:f9:78:ed:86:c4:53:de:dc:d1:cb:dd:
a0:7d:20:74:14:bd:f1:e2:59:67:2b:0e:34:6e:e3:
08:ff:92:82:a2:a2:b4:54:de:02:08:5e:e6:d2:1c:
fb:bf:20:90:ad:09:3e:ab:c0:b0:c9:cc:1a:e1:24:
44:12:36:f5:b0:0c:e2:cb:7a:a5:a2:ac:2c:94:c2:
d6:5b:7e:9f:82:48:05:58:5b:3f:29:7b:5b:e1:db:
0b:b1:24:03:29:85:14:70:ca:5b:bd:5d:78:35:c6:
bb:e4:b1:31:b1:a3:cf:a1:fa:fd:f0:bd:c5:78:b9:
60:b4:62:f7:88:60:4d:a0:c6:60:58:53:2e:b4:a1:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:2E:70:63:E2:FD:90:C6:6D:82:7A:31:54:77:BB:C2:59:0D:6F
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-JcucGPi_ZDGbYJ6MVR3u8JZDW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.246.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:b4:68:32:b1:d8:27:24:46:0e:b5:5e:c4:28:17:10:ab:e3:
c0:99:eb:8d:65:44:4a:35:ef:50:07:8f:f0:7d:ef:fb:1e:29:
2b:6c:65:f5:7b:32:c2:7c:ec:c0:43:71:8b:75:34:56:b8:45:
a6:2c:a2:a5:b0:32:cd:c8:30:56:ed:b8:da:6d:a8:8d:0c:b5:
6d:48:e3:4c:46:e7:06:1f:28:a5:0a:4f:24:66:01:f8:07:1a:
4f:fa:9c:e2:f9:28:e8:cb:b7:01:2c:36:81:46:d7:47:5f:09:
9c:00:ac:55:7b:cf:95:77:f1:cc:29:c0:15:7c:38:97:bf:c7:
5b:9e:17:f3:f9:7a:72:77:7d:33:7c:ef:1c:cd:d7:8b:ab:35:
fd:7f:07:43:6f:08:b7:a0:c4:b6:c3:0a:aa:e0:33:fa:17:8b:
43:67:d8:87:a9:cd:00:40:e9:02:cb:f3:9f:c0:25:84:aa:29:
15:a2:00:ad:9c:f9:78:2c:f7:22:14:5a:01:08:9d:0d:76:13:
be:ae:ef:82:a8:75:99:e0:8b:06:7b:db:20:29:6b:14:8b:35:
63:58:1c:74:30:c0:cb:f9:e3:08:a4:5e:20:f9:3c:81:93:fc:
0a:07:5b:52:d6:8d:d5:42:ef:75:49:78:8a:62:d0:4a:2c:5d:
af:ab:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:31 2024 by rpki-client on console-fra.rpki-client.org