Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/n04jeAVRbsx6lum4w-0JHrqtDUg.roa
File: n04jeAVRbsx6lum4w-0JHrqtDUg.roa (raw, json)
Hash identifier: LHo+Tfxe3RaF7qcnX3BgTurVdElCc6z/uovmo8Dt6WU=
Subject key identifier: 9F:4E:23:78:05:51:6E:CC:7A:96:E9:B8:C3:ED:09:1E:BA:AD:0D:48
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC5014CE2EFE0FD45F5457DC9107B4CFC
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/n04jeAVRbsx6lum4w-0JHrqtDUg.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200649
IP address blocks: 62.228.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4c:e2:ef:e0:fd:45:f5:45:7d:c9:10:7b:4c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f4e237805516ecc7a96e9b8c3ed091ebaad0d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:05:f2:7c:c7:0b:20:d8:b0:7a:68:fd:e4:
f5:2a:d3:7b:24:74:57:14:7c:31:25:f7:fd:61:87:
15:26:fc:56:4b:3d:2d:26:f6:26:04:57:ef:71:8a:
e6:20:58:b3:88:91:56:9d:ba:00:5f:59:09:79:6f:
e2:d7:69:08:34:85:e0:05:69:b9:22:6d:6c:0f:81:
5e:3b:06:9a:e0:3f:10:80:91:4d:b6:d0:b8:f3:da:
63:12:c2:8b:0c:55:2d:93:ef:69:65:5c:38:4c:a7:
4d:1a:95:6c:00:22:4d:8c:89:ad:7f:a3:1a:03:e7:
d0:4f:56:8a:d7:5f:c2:bd:68:c5:28:64:36:ab:96:
e6:11:53:65:7f:bb:6e:1d:1f:41:2f:cf:4c:6c:b4:
81:61:e9:4c:6e:4d:74:8c:6f:f4:5d:26:4c:e0:6f:
ef:4b:c1:bd:82:c8:99:5f:2d:a2:e9:c6:11:74:96:
78:8d:75:bb:ef:e7:91:b1:8d:e9:2f:f9:95:17:da:
4b:17:3f:e0:c8:33:d4:38:a3:13:93:cf:54:c9:cf:
e2:70:d2:24:d8:47:63:33:38:70:55:5d:69:80:53:
34:88:93:79:ea:48:b3:74:e7:96:aa:96:e7:8a:4f:
42:f7:7a:dd:18:3f:94:d4:ab:90:a8:81:53:c0:e8:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:23:78:05:51:6E:CC:7A:96:E9:B8:C3:ED:09:1E:BA:AD:0D:48
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/n04jeAVRbsx6lum4w-0JHrqtDUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:02:d4:91:ea:78:ba:3d:c5:40:8a:0a:d4:1a:69:d8:06:6b:
1f:7b:dc:e8:4f:94:f9:62:7b:4f:0c:65:3a:18:df:67:66:07:
aa:e9:40:7a:fc:ae:43:aa:0e:c2:e9:ed:12:01:f3:a4:98:62:
8f:9d:41:20:b0:9a:a6:7d:4f:dd:a1:3e:ae:85:64:43:65:7a:
a5:66:f5:7b:62:10:f4:75:53:00:be:03:40:32:e2:7d:05:d5:
bc:82:e5:1f:bf:c3:2c:b0:fc:60:b7:cf:01:19:b4:98:bd:b0:
aa:82:50:4d:f1:16:d1:e5:32:d3:5b:94:84:b6:db:5a:9b:b6:
59:4f:a8:c7:f5:50:3b:d3:b2:99:ac:65:b5:bd:97:14:ac:78:
64:9f:44:50:37:9a:61:35:7c:c1:d2:b3:23:99:18:53:30:36:
a9:82:92:3e:3d:08:5a:3e:05:b7:42:c7:04:91:95:f5:da:ab:
1a:c4:65:fd:d7:3f:e7:d3:3e:02:3c:c9:42:b6:66:e0:79:a3:
a9:22:6b:d8:59:22:c7:33:8b:19:e1:18:0a:11:2a:45:1b:de:
a8:b0:ce:68:56:09:bb:4d:30:f4:72:aa:8c:62:13:20:e9:f7:
b7:f4:d3:f5:c8:2c:d6:4a:51:d3:90:ea:4a:e5:62:1c:76:20:
94:26:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 12:54:15 2024 by rpki-client on console-fra.rpki-client.org