Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rL4QhDrsYI3g-VaskIZ61wW2NnM.roa
File: rL4QhDrsYI3g-VaskIZ61wW2NnM.roa (raw, json)
Hash identifier: GgF12ZVLFHaH3K5kNXTr16DG927H10GfGQBvR/AITe8=
Subject key identifier: AC:BE:10:84:3A:EC:60:8D:E0:F9:56:AC:90:86:7A:D7:05:B6:36:73
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC5014E6744120EFBB9C1E795A7F7C860
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rL4QhDrsYI3g-VaskIZ61wW2NnM.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202534
IP address blocks: 62.228.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4e:67:44:12:0e:fb:b9:c1:e7:95:a7:f7:c8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acbe10843aec608de0f956ac90867ad705b63673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:c6:fd:f3:59:97:60:52:4a:76:d0:72:d6:
10:0b:2b:cd:c7:47:cf:bf:0e:3a:8b:68:db:ae:2f:
14:53:cc:58:0e:4c:eb:83:8f:96:f1:15:60:a7:eb:
93:da:8a:93:ad:d6:2a:60:57:b3:88:77:e6:e2:b9:
0d:b3:7e:4f:b8:15:38:34:50:97:e1:df:31:a8:cf:
fe:c1:ef:09:07:7a:72:34:f0:9b:9a:94:61:04:47:
95:8a:31:50:fb:46:b8:09:3b:9a:d5:13:41:a6:70:
7b:7c:ff:f7:5d:d5:7a:0d:18:2c:64:d8:bc:75:2b:
ac:48:2c:e1:58:a0:d0:5d:a9:4b:12:f3:42:6d:8d:
af:d3:57:ae:95:62:17:a9:be:6f:f3:7b:1f:87:95:
83:49:f6:62:c8:27:d7:fb:82:a7:0d:fe:05:f9:c0:
72:26:3c:d4:c4:31:20:e7:be:48:8f:74:58:23:74:
a6:76:88:23:77:59:ac:10:02:0d:3f:ac:63:0b:95:
73:d2:71:fa:d2:51:fb:b1:75:63:2e:fe:ca:27:dd:
a3:25:c6:03:b2:bc:eb:bb:45:d6:30:e5:92:82:71:
b4:fb:77:10:3a:fd:98:ab:56:28:d2:ac:16:91:ad:
2b:da:80:86:28:82:b6:2c:ef:ee:fe:a2:b8:41:b6:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:10:84:3A:EC:60:8D:E0:F9:56:AC:90:86:7A:D7:05:B6:36:73
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rL4QhDrsYI3g-VaskIZ61wW2NnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6f:45:75:ce:dc:b9:6d:a6:7c:15:05:87:10:24:35:b7:6f:
9e:6f:47:3c:4b:99:51:a6:9e:38:e7:42:3e:25:ba:ec:28:46:
c5:78:0e:e5:6e:83:4a:85:5f:4a:b2:2e:79:57:d1:fd:85:b6:
86:3a:5c:18:d9:ae:d5:27:dd:bd:19:86:a1:91:57:ed:03:77:
aa:63:42:50:c9:00:e9:33:08:cf:78:e4:4b:e9:51:c4:69:d1:
5b:7a:79:ed:13:c9:c3:8b:da:4d:78:de:05:2a:fd:b7:a7:e0:
12:97:d7:1c:da:0e:6e:76:b1:14:4a:0b:86:4c:6a:7a:08:c0:
e5:b3:1b:fc:fc:01:25:31:30:86:87:b3:8a:fc:da:7a:de:ce:
3e:ac:84:b5:21:27:a1:58:32:f2:14:65:6c:f2:7c:b0:ed:c3:
57:af:58:85:fc:5d:a8:d0:34:5c:03:1a:d9:0b:6c:48:77:2c:
5f:4c:e1:a1:35:02:24:a0:72:1d:f1:37:24:3d:a1:29:f3:79:
63:bc:32:b3:73:18:2c:52:11:01:6e:f3:ac:ef:a2:54:37:35:
f3:cf:da:e9:fc:0b:55:08:88:99:4e:39:39:c6:e0:48:2f:21:
04:8b:5c:c2:3d:0c:18:0f:46:9c:95:fe:f1:9b:53:84:81:b7:
c2:44:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:33 2024 by rpki-client on console-ams.rpki-client.org