Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/j6DKQ1AfL44f95h4MXhz-ySWdtk.roa
File: j6DKQ1AfL44f95h4MXhz-ySWdtk.roa (raw, json)
Hash identifier: rpZ9yPL8D7wIbkQOs92Eaoxs8AkhDpPoiUmxrm2JbQ8=
Subject key identifier: 8F:A0:CA:43:50:1F:2F:8E:1F:F7:98:78:31:78:73:FB:24:96:76:D9
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC5014D063073FD42B27B5D244D49E218
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/j6DKQ1AfL44f95h4MXhz-ySWdtk.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201444
IP address blocks: 62.228.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4d:06:30:73:fd:42:b2:7b:5d:24:4d:49:e2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fa0ca43501f2f8e1ff79878317873fb249676d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:99:ed:d2:bb:fb:4f:9d:3e:f5:7a:54:7a:
f4:5d:00:94:ed:b8:29:df:90:c0:b9:93:ab:8b:a4:
fc:f6:24:33:9f:8b:0f:bd:58:54:9d:f2:ed:8a:44:
dd:9d:49:a6:92:c7:39:bc:d9:69:1e:75:19:1a:ba:
5c:97:d5:34:ab:dd:cd:6c:1a:66:fd:34:48:af:7b:
d4:dd:9a:7e:14:3b:31:59:a9:6d:fb:17:34:11:a8:
b2:79:de:30:26:17:71:14:d5:fb:ae:65:1b:67:5e:
9f:8f:fe:e7:ff:20:0e:59:ac:ff:85:28:d2:73:2b:
14:c0:35:fb:9c:23:91:49:3f:b9:33:c4:24:aa:ea:
3f:3e:34:3b:09:e8:6b:8a:c1:a6:66:6f:63:06:9e:
70:9b:7d:86:97:63:c4:1f:95:40:b3:10:d9:72:cb:
d8:39:0a:cb:92:6a:a3:53:a8:fb:57:8a:03:39:94:
b6:cc:24:19:85:f1:2c:8e:fd:54:5a:9f:09:32:d5:
0c:04:5f:4d:4a:ea:b7:5b:a7:24:ee:14:e8:b1:27:
ed:ee:58:3d:fa:f1:1a:e6:02:79:1f:38:53:af:8a:
49:9b:c8:f3:5a:f3:18:ea:55:b8:71:6f:9c:70:32:
ca:8a:0f:63:e4:d0:ef:62:b2:bb:86:d0:a2:e1:bc:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:CA:43:50:1F:2F:8E:1F:F7:98:78:31:78:73:FB:24:96:76:D9
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/j6DKQ1AfL44f95h4MXhz-ySWdtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:35:b7:e2:90:37:98:03:b3:a2:52:54:ea:86:3f:be:52:0a:
02:77:48:25:1b:64:20:d4:5a:6a:fa:ce:f7:7e:a0:5f:6a:e2:
29:20:b4:03:0f:f9:e0:99:0f:93:f3:63:d0:eb:f3:89:8b:eb:
a7:8b:ac:11:0b:56:d8:7a:ff:ca:a5:08:c4:f6:4d:f9:3d:a9:
0d:fe:f3:8a:7a:e7:38:ab:1f:4a:72:23:84:cd:e8:50:e5:4c:
49:7c:55:d4:04:41:1d:a1:87:81:2b:4e:f2:ce:98:b3:de:97:
57:4b:9b:aa:32:1b:5c:98:4c:4d:03:23:9f:b1:01:ad:dc:fb:
0e:02:c2:09:2a:ce:49:09:37:91:69:d7:c3:44:40:0d:cd:0c:
88:8d:61:ac:20:04:d0:c9:bf:10:b0:6e:c9:bd:89:d5:ef:04:
e4:2c:e8:2d:c6:28:50:f6:2b:20:39:8e:3c:51:53:61:6b:ef:
c0:9c:5e:8b:53:60:6e:8d:82:48:70:4d:c2:fa:0d:5b:2d:b2:
04:76:05:66:20:34:04:c9:e3:fa:94:5e:4f:2a:b7:27:19:45:
2f:50:54:14:c5:b2:6d:6f:6e:c4:08:8c:38:28:f1:ca:fe:57:
36:6c:90:f7:25:9a:6f:a3:42:d4:1b:6c:6f:56:0f:3d:99:46:
3c:aa:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 05:46:54 2024 by rpki-client on console-ams.rpki-client.org