Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uS97Mbuu84hm7H0IVRbnJsvGpuI.roa
File: uS97Mbuu84hm7H0IVRbnJsvGpuI.roa (raw, json)
Hash identifier: I2DnDN72Uvf3hNrxNZRDFBichFf6T2Fqmn+af5znk8s=
Subject key identifier: B9:2F:7B:31:BB:AE:F3:88:66:EC:7D:08:55:16:E7:26:CB:C6:A6:E2
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC5014C02685B184D1ADB28A9243ED190
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uS97Mbuu84hm7H0IVRbnJsvGpuI.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51228
IP address blocks: 62.228.255.0/24 maxlen: 24
62.228.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4c:02:68:5b:18:4d:1a:db:28:a9:24:3e:d1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b92f7b31bbaef38866ec7d085516e726cbc6a6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fb:6b:df:c2:b4:c1:22:46:57:e7:aa:ad:bc:
5c:e8:e7:87:04:a4:bd:62:88:9f:54:30:56:3e:a1:
9f:61:42:29:b1:29:34:c5:51:66:33:82:b7:30:31:
74:aa:e1:fb:23:d1:4b:73:c3:a6:9d:32:f9:7a:f7:
b7:c2:d4:86:fa:45:bd:65:e9:a5:a7:4f:4b:7a:91:
f9:24:25:17:ac:52:57:ef:57:a2:d2:da:1b:ed:27:
94:c8:d2:f1:4b:3f:5f:fa:87:e8:ff:d6:d4:28:e2:
72:c9:e2:98:47:a5:7b:d0:30:ec:5c:57:5e:4b:a6:
31:63:f3:90:75:bc:e9:89:2c:43:0f:49:48:00:70:
d2:56:83:d9:b6:87:8a:9f:c6:33:10:ea:72:da:d1:
de:28:b7:c3:7c:6b:2c:7f:b6:4c:0f:54:45:69:60:
40:b6:71:f8:9f:35:4d:0a:49:a4:ea:b7:5b:74:32:
06:f5:a4:32:f5:82:d9:58:ae:a3:b0:2b:ee:7c:f5:
f6:c4:3a:b6:c8:40:1a:12:ab:0e:59:10:f8:3e:b5:
16:c7:bc:33:15:77:6d:d0:98:fd:74:fd:ad:20:00:
8b:98:36:dd:11:af:42:0f:b6:f0:50:93:8d:6e:fb:
a6:67:02:ac:25:9c:13:fd:d9:c4:f6:26:fe:c4:ab:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:7B:31:BB:AE:F3:88:66:EC:7D:08:55:16:E7:26:CB:C6:A6:E2
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/uS97Mbuu84hm7H0IVRbnJsvGpuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.254.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ad:3f:02:5c:e3:6f:0a:79:1d:8e:f4:76:6d:90:2d:b4:57:
e3:9b:3c:8f:2f:39:3f:51:96:63:e9:63:91:e4:17:14:59:71:
59:d0:72:39:61:8e:3a:9b:a2:e8:ba:65:e7:0f:f8:74:25:d4:
10:22:35:48:40:cf:4d:a1:9f:1f:6d:52:36:77:36:37:d2:44:
db:fc:99:89:2c:40:4e:06:ec:8f:da:fb:03:40:40:3e:62:6b:
cb:c1:53:66:db:b2:c7:0c:56:a4:78:a5:36:0b:1e:c8:98:99:
29:e9:ff:07:d7:de:2f:98:ee:da:a1:5d:9e:13:a5:8e:df:2a:
46:58:91:b4:87:8e:c6:1a:50:e5:84:48:1a:2e:d8:41:82:2a:
45:d2:b7:65:2d:f0:a7:5c:e6:37:70:38:b4:c1:f0:10:8b:ee:
c7:17:43:fa:2e:bd:ef:70:6d:dd:fc:31:e1:ba:07:f2:93:5f:
50:e2:0e:d2:04:f9:20:d2:64:d7:e4:17:ce:a8:e2:0a:39:4a:
73:0a:35:14:0d:df:8b:66:84:a7:95:cf:a6:38:90:76:b4:5e:
49:b2:4b:9d:dc:93:76:42:26:70:b0:da:2b:b4:c4:d4:c6:cd:
06:3e:ee:77:ca:54:39:01:73:ef:57:8c:43:29:0d:39:3b:df:
2c:70:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:56:55 2024 by rpki-client on console-ams.rpki-client.org