Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-rxdfFJ9YyGN-xHSCB72dc2EZ-c.roa
File: 1-rxdfFJ9YyGN-xHSCB72dc2EZ-c.roa (raw, json)
Hash identifier: 9SJIgoH4IuIN0hOelBfxtD6T/gpzPOKnFCp5LP4S+Ow=
Subject key identifier: FA:BC:5D:7C:52:7D:63:21:8D:FB:11:D2:08:1E:F6:75:CD:84:67:E7
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC50150F23A298DAB72CE8F8233FA9968
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-rxdfFJ9YyGN-xHSCB72dc2EZ-c.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208601
IP address blocks: 62.228.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:50:f2:3a:29:8d:ab:72:ce:8f:82:33:fa:99:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fabc5d7c527d63218dfb11d2081ef675cd8467e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:b4:2c:e1:1d:fc:7e:71:c5:61:7d:70:0f:
9e:c2:8a:ed:ef:22:db:52:e3:90:c6:89:70:0b:08:
5c:5f:76:50:0a:04:18:14:55:8c:f5:35:e3:e3:12:
cb:b8:08:6f:88:70:f3:79:d7:c5:1c:b0:67:34:09:
7a:8c:31:dc:ae:f9:11:91:b6:bf:d8:9a:58:f1:a7:
1c:23:51:3e:01:d2:7a:b4:cd:46:99:64:31:d2:58:
6c:64:c2:fb:74:14:1e:61:30:8e:39:dc:a9:74:a2:
34:13:0b:f6:3f:04:c4:6e:8e:73:4c:bb:67:9b:d7:
88:7e:ce:bd:01:5c:f6:af:07:f2:e5:53:be:bb:74:
13:9e:a9:64:eb:d6:5d:a5:51:d4:de:88:36:f1:e0:
ba:1d:82:03:84:5a:61:76:c3:64:92:49:bc:6a:11:
d0:d2:2d:4e:d3:c1:d0:b8:67:e7:e2:96:ee:bf:5c:
71:d6:07:0d:02:b4:fc:0c:79:cb:c3:27:03:fd:3a:
b5:1a:7a:b9:90:01:b1:2f:2e:cd:07:84:c9:74:34:
17:5c:0c:8d:fa:97:06:f0:ea:11:9f:c8:de:64:33:
2d:e0:0a:57:af:89:02:17:25:44:88:6c:be:85:ae:
d0:7f:2a:87:d4:4c:62:b5:77:62:9a:96:3b:55:1a:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BC:5D:7C:52:7D:63:21:8D:FB:11:D2:08:1E:F6:75:CD:84:67:E7
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1-rxdfFJ9YyGN-xHSCB72dc2EZ-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5e:d1:d1:0e:ed:b7:16:4f:28:d6:40:c4:a5:11:e2:e7:0b:
4e:ef:df:79:fd:25:0c:b2:f5:92:b0:7a:5b:8d:cf:09:5e:70:
b3:25:4f:08:b5:49:c0:52:12:ce:d4:e1:52:fd:0f:ca:17:15:
64:3a:89:ba:4b:68:9a:9a:f7:40:1c:ec:cf:82:9a:71:f7:54:
56:2b:58:a1:6f:8d:07:6b:ff:26:40:9b:ec:6c:b8:be:84:f6:
ff:7b:fd:26:37:f1:d5:11:55:54:98:97:20:9a:d5:24:df:73:
01:4e:04:e8:84:09:15:55:b3:11:92:c9:f0:c7:2c:d6:38:06:
a6:4e:47:0a:20:70:81:45:81:73:2d:4a:62:f5:b8:f8:67:a2:
83:96:e4:e9:1a:56:c4:80:c0:70:c6:dc:95:d7:9b:c7:95:0a:
dc:8b:12:0b:00:eb:ed:35:84:9b:d7:ff:f8:7d:e3:fc:79:be:
01:ab:fd:9a:5b:04:72:e9:f7:16:6e:16:e2:33:f4:86:31:b2:
70:d3:2a:13:28:2f:e3:b6:86:96:e9:cf:29:9b:3f:bd:f5:2e:
30:66:9d:b6:ca:49:81:89:23:0b:7c:10:68:e2:2c:06:e4:15:
6f:67:95:e4:c7:ab:94:bb:5e:1e:f3:81:f2:a2:cf:3a:05:9d:
4a:87:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:51:40 2024 by rpki-client on console-fra.rpki-client.org