Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/tVqASIQEwD97IlUI8vvogh0Lmyc.roa
File: tVqASIQEwD97IlUI8vvogh0Lmyc.roa (raw, json)
Hash identifier: h+aCqM/6dRev+UZ7h0ZJvb0/hkWThEbPKlQgvNJUr+o=
Subject key identifier: B5:5A:80:48:84:04:C0:3F:7B:22:55:08:F2:FB:E8:82:1D:0B:9B:27
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC5014EE439AF7A7F8B45D600B7CF2560
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/tVqASIQEwD97IlUI8vvogh0Lmyc.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203598
IP address blocks: 62.228.240.0/24 maxlen: 24
93.109.225.0/24 maxlen: 24
93.109.224.0/24 maxlen: 24
87.228.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4e:e4:39:af:7a:7f:8b:45:d6:00:b7:cf:25:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b55a80488404c03f7b225508f2fbe8821d0b9b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:e3:ef:f2:dd:a5:5a:ca:e8:cd:3d:ae:95:
5e:bb:f8:c5:e9:bc:3f:44:0d:8a:33:11:15:c8:47:
f9:81:7d:b2:79:9c:a0:4d:9f:d4:4c:04:ae:ae:00:
99:56:5b:1e:31:2a:24:26:46:bb:13:c7:5b:2b:58:
78:ad:a3:ae:0f:65:c1:8a:85:86:4b:90:5c:9d:64:
6b:5d:70:43:21:73:24:3e:a0:97:b5:19:81:40:33:
d2:e4:fa:36:d7:7e:22:55:cc:a3:f1:3d:50:b6:92:
fa:26:cc:00:9a:9d:e7:e2:35:f0:5b:07:2b:82:8a:
80:7f:02:e5:bc:7e:1c:7d:3a:ae:e3:c5:9a:49:a6:
4e:28:49:0f:db:4a:7b:a7:ce:0b:80:4b:24:66:43:
eb:e9:47:7f:6f:94:7f:29:bc:94:b0:4b:11:1b:4b:
47:73:48:85:73:78:43:b2:66:53:26:f7:c1:db:c2:
a1:0a:9d:9a:bc:62:22:d4:95:03:6d:be:1e:ec:b2:
12:df:b0:fc:e9:a4:e1:39:d9:3a:be:a7:99:44:ae:
f8:db:95:d1:c0:cd:e7:3c:c9:22:32:b2:93:4d:e5:
c4:f1:73:80:40:76:ed:0f:37:42:67:89:ab:0d:63:
11:e3:62:a6:04:fb:e3:42:6c:3e:e8:45:a8:d3:d4:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:80:48:84:04:C0:3F:7B:22:55:08:F2:FB:E8:82:1D:0B:9B:27
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/tVqASIQEwD97IlUI8vvogh0Lmyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.240.0/24
87.228.203.0/24
93.109.224.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:51:23:60:aa:2e:a0:cc:bb:a5:62:8b:72:8a:08:94:5c:6a:
a0:b6:aa:6e:7f:ed:23:d6:ff:c3:d2:11:de:03:2a:12:68:f0:
05:9f:6d:17:3b:7c:22:5d:a0:4e:d1:72:5c:03:bd:b6:c5:99:
05:72:61:db:37:47:08:7e:0a:75:9e:8c:1d:44:ad:11:62:61:
a4:35:93:0c:b8:4e:8a:2b:80:b3:23:dc:a2:8d:af:b4:a5:22:
4f:53:5b:37:ee:6a:3b:23:88:d3:3d:e2:47:7c:b5:ff:4f:5c:
98:64:ae:17:e2:fb:00:0c:3f:4d:6b:6d:aa:09:98:f4:91:7c:
40:8f:45:de:76:6e:03:e5:4c:0a:0a:11:29:6b:9e:bc:ae:19:
d1:39:69:fd:f3:1c:3e:de:f6:95:56:b4:1c:83:14:76:79:e3:
34:53:f2:b2:e5:c2:f6:25:c1:b2:8b:4e:6f:a9:51:cd:99:70:
11:9a:6c:4b:7f:1a:32:ad:33:26:96:30:ae:db:63:d8:d6:f6:
59:a0:f6:07:9f:d3:bd:61:30:67:bb:84:12:c4:4c:5a:9b:d8:
b1:1e:46:f1:3d:af:c7:bc:63:ae:29:56:d4:9e:dc:1d:39:a8:
15:db:fd:e5:0f:33:b4:e4:c8:6b:6a:f6:81:e9:d6:34:1a:b7:
31:39:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:48:19 2024 by rpki-client on console-fra.rpki-client.org