Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/RO8Kputm9sG1dwFfaYXv_Ad6T14.roa
File: RO8Kputm9sG1dwFfaYXv_Ad6T14.roa (raw, json)
Hash identifier: cRSCfH5EHNFCEmyWSDp5J9rb2R91LOuGh47KAiuJDbg=
Subject key identifier: 44:EF:0A:A6:EB:66:F6:C1:B5:77:01:5F:69:85:EF:FC:07:7A:4F:5E
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC5014F5F82189FC2A79A8A4C471FE3D3
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/RO8Kputm9sG1dwFfaYXv_Ad6T14.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204592
IP address blocks: 62.228.232.0/24 maxlen: 24
62.228.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4f:5f:82:18:9f:c2:a7:9a:8a:4c:47:1f:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ef0aa6eb66f6c1b577015f6985effc077a4f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:97:d4:f1:4d:ed:c2:ed:2b:58:b9:85:a4:
19:cf:e0:13:58:02:cb:9b:70:c9:55:98:cb:50:f5:
e3:6c:bd:7c:b6:00:a2:6f:10:f7:1a:71:7b:33:e0:
2c:bc:b3:00:af:31:92:ec:a5:78:5d:a0:9f:dc:a8:
e1:17:39:67:05:02:3c:de:fc:eb:6a:39:64:c8:44:
0c:2b:8d:30:9c:3d:7a:28:78:6c:af:b2:4f:64:53:
98:f4:ae:45:11:32:b1:e0:06:4e:12:0f:fd:dc:f9:
44:b1:1b:a8:10:45:71:d4:b2:b9:6a:e7:2e:36:c6:
d6:20:55:28:a4:59:be:a9:ae:94:eb:8a:da:08:6b:
df:7b:eb:15:c8:87:65:95:2e:64:27:23:ae:55:d4:
8e:05:da:61:56:9c:ae:a3:94:73:29:3d:e0:89:8c:
6b:b4:0e:30:c5:b8:3b:f5:cc:31:7a:1b:04:78:22:
bf:50:b3:d1:32:35:91:37:ff:47:8f:ec:e7:d6:54:
5a:83:8b:58:a6:e5:a7:fc:33:f9:41:f3:2b:19:c4:
db:09:b1:ee:79:41:00:b4:1e:f1:d7:06:f5:0c:25:
21:54:64:50:a4:6b:af:3a:2a:e0:b1:a4:26:af:d1:
9d:8e:84:23:26:f1:ac:fa:bc:97:cf:98:34:70:7b:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:0A:A6:EB:66:F6:C1:B5:77:01:5F:69:85:EF:FC:07:7A:4F:5E
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/RO8Kputm9sG1dwFfaYXv_Ad6T14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.232.0/24
62.228.244.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6e:c9:d8:fa:20:36:f6:16:61:eb:f4:ce:b3:34:a5:b1:bc:
07:91:60:f9:2b:ff:d1:bf:51:eb:2e:4d:da:1e:8d:92:53:4f:
f2:f0:59:d4:59:a0:3a:dd:f6:49:46:2b:c9:c1:0f:f1:10:fd:
d3:9a:35:64:a6:a8:cc:c3:ac:72:12:f5:b7:aa:bb:14:da:56:
4f:ec:ae:f1:21:79:3a:76:c0:bf:10:5b:56:10:91:cf:09:5b:
c7:f3:f5:80:c0:91:2c:32:ee:5a:75:68:09:f9:e2:00:27:d8:
ad:cc:4b:a9:cd:87:57:c1:01:a5:69:52:c1:b7:f6:3c:75:a1:
d2:1c:76:51:03:6e:d1:77:10:67:00:48:24:18:9b:a2:f2:a0:
b1:61:46:82:b5:32:6b:94:fe:39:20:a7:a6:20:14:e9:7c:e3:
12:9d:e0:a3:04:46:b7:24:9e:63:44:7a:1e:a1:eb:88:2c:8a:
08:6e:9b:80:c2:c2:85:e8:94:9f:de:37:f6:24:4d:11:9d:ea:
1a:4e:56:f8:be:44:13:f1:d2:bf:71:76:b2:dc:c3:a6:60:28:
f2:78:ed:7a:8b:21:c1:b4:d2:f4:a1:df:95:02:a7:21:eb:d9:
dd:37:76:02:2e:ae:99:f4:83:e7:67:06:4b:83:f4:1b:0b:be:
b2:56:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:53:08 2024 by rpki-client on console-ams.rpki-client.org