Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/dJe8H_JEgT_AbwbbuhdFLEJuOyE.roa
File: dJe8H_JEgT_AbwbbuhdFLEJuOyE.roa (raw, json)
Hash identifier: KqJeIgbjcfDzPO+nXDY/MbzeQnpdfkKLF5yu/9U+sxI=
Subject key identifier: 74:97:BC:1F:F2:44:81:3F:C0:6F:06:DB:BA:17:45:2C:42:6E:3B:21
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC5014CAFB5CD1D7D9245A3CD16220F4F
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/dJe8H_JEgT_AbwbbuhdFLEJuOyE.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199598
IP address blocks: 62.228.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4c:af:b5:cd:1d:7d:92:45:a3:cd:16:22:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7497bc1ff244813fc06f06dbba17452c426e3b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:df:81:13:a7:de:d4:c5:2e:f3:94:e4:43:
9d:7d:7f:d9:a7:ba:66:03:b1:0f:34:63:88:7e:63:
58:01:a5:b2:00:bf:7c:e8:51:51:0d:08:bc:d7:19:
62:3e:e3:a9:69:9e:c1:cc:7f:1d:66:94:57:a7:03:
b6:cb:40:c4:9b:0c:5f:be:2c:c4:13:f9:6a:87:c8:
4c:0d:41:19:37:36:b3:0d:ca:8a:b9:2c:89:20:83:
be:6a:e4:e9:ea:23:4a:d8:7c:b6:d1:cb:7b:c0:dc:
0b:7b:6d:1c:92:01:30:07:8b:65:0b:db:2b:87:df:
85:d2:8d:6a:0a:d2:cf:8c:66:64:a2:51:34:85:c1:
52:1d:58:c7:0c:40:86:48:e4:57:76:1f:0a:55:39:
8c:b0:e2:b2:a6:67:81:1b:8a:9a:35:00:e8:67:60:
8d:3c:0f:d2:53:ab:19:a1:9d:2c:46:25:09:a9:a2:
a4:97:6c:b4:fa:e9:ae:21:17:81:38:8e:32:ab:0e:
49:82:66:d4:b7:03:48:27:0e:b4:5b:72:c9:23:e4:
49:d1:09:6f:7a:b8:1c:07:48:0a:7b:e7:8a:e9:84:
61:a1:27:36:32:24:4b:fc:d8:f1:e9:e4:a2:38:a2:
ed:a5:f6:42:05:47:c7:a6:8e:6c:5b:e2:ff:27:57:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:BC:1F:F2:44:81:3F:C0:6F:06:DB:BA:17:45:2C:42:6E:3B:21
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/dJe8H_JEgT_AbwbbuhdFLEJuOyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.253.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e1:6f:65:c5:4d:c5:7d:4a:28:ca:87:f2:4a:70:cf:3a:0e:
30:af:00:07:0c:16:f3:29:68:7a:f1:73:80:80:69:4f:d4:20:
34:d5:44:55:17:0f:38:f9:2d:d5:e8:b3:4f:71:d5:a7:d9:b9:
cf:99:a1:4f:69:45:f5:e3:8b:23:ba:85:91:e9:60:03:e2:0c:
20:8b:56:d7:c8:e2:a0:91:9f:a3:ab:4d:94:91:fe:e6:f9:df:
a7:20:ef:64:1e:37:d5:d9:7f:dd:eb:13:fa:87:45:cc:02:bf:
0c:83:74:f4:9c:bb:4d:14:af:ba:a1:e8:c8:eb:0a:3d:f9:4f:
38:c3:47:e5:b0:ce:33:76:a5:09:a7:c2:25:38:f4:2d:df:b1:
22:10:30:9e:05:c9:25:26:cb:cd:3d:6b:66:4e:1e:e0:30:c6:
bb:df:ea:22:98:4f:69:72:88:7a:b7:5b:bb:2d:7a:3f:70:e0:
7e:0d:44:36:cb:c1:af:16:52:2a:40:27:6a:1b:9b:91:f1:d1:
49:da:b6:e5:cb:6f:dc:39:11:8f:a9:fe:0f:38:9c:79:91:43:
0d:4c:d3:de:a5:f1:8d:03:bd:07:73:91:61:4b:e2:31:be:96:
bc:f7:41:d9:1a:15:59:1c:e4:ec:b4:c7:ce:ff:af:ac:b2:f1:
66:b4:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 10:57:14 2024 by rpki-client on console-fra.rpki-client.org