Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/L1VeIVQQZmHAmg4lk8ft9Y74iHE.roa
File: L1VeIVQQZmHAmg4lk8ft9Y74iHE.roa (raw, json)
Hash identifier: dyHjZpGNXyMvvbGKzf8NFI5ogZZ4NDjnJv5xueH4Yi8=
Subject key identifier: 2F:55:5E:21:54:10:66:61:C0:9A:0E:25:93:C7:ED:F5:8E:F8:88:71
Certificate issuer: /CN=5d644b902caa17a99d65c46cb3a6f8d939cd98b5
Certificate serial: 018CC4255C91237ADB9B6A2FB95B0AC77785
Authority key identifier: 5D:64:4B:90:2C:AA:17:A9:9D:65:C4:6C:B3:A6:F8:D9:39:CD:98:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWRLkCyqF6mdZcRss6b42TnNmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/L1VeIVQQZmHAmg4lk8ft9Y74iHE.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49321
IP address blocks: 62.3.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWRLkCyqF6mdZcRss6b42TnNmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5c:91:23:7a:db:9b:6a:2f:b9:5b:0a:c7:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d644b902caa17a99d65c46cb3a6f8d939cd98b5
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f555e2154106661c09a0e2593c7edf58ef88871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:4d:02:eb:21:08:72:ed:e1:0c:dc:9e:33:
96:87:6c:d9:3a:1b:d0:61:aa:d1:96:ab:19:e9:99:
b9:66:71:a8:33:8a:77:1e:16:86:a8:12:39:07:e1:
20:ea:aa:cf:58:14:ee:6b:9c:38:32:e9:63:d4:8f:
1b:09:28:56:ca:ae:b5:e2:2d:6c:49:73:fd:17:e7:
a8:ab:37:a3:62:eb:eb:fa:51:89:69:08:b6:ba:91:
69:7a:87:de:82:80:3b:e4:86:f9:31:28:ce:ac:23:
2e:20:12:c7:49:a5:65:a1:91:52:a0:90:4e:b6:20:
1c:1f:b7:7f:46:7f:1d:6a:3a:ee:12:49:b3:6e:eb:
d1:9b:fd:37:00:77:15:26:bd:bf:f8:e9:90:1c:32:
9a:f7:48:27:ac:48:20:96:db:a8:81:cb:07:44:9e:
43:6f:3d:a8:35:a3:8c:17:7b:ce:8e:76:57:0e:c1:
3a:a0:7a:62:9b:34:5b:8a:98:97:71:aa:c6:d7:35:
3c:27:27:b4:f4:1c:ab:e7:59:f5:87:e1:50:4a:d2:
79:8c:33:d6:ce:ae:53:47:c0:8a:26:61:2b:31:fc:
1b:be:e5:be:5a:e0:b3:cf:0f:8d:02:be:0b:a8:ef:
2a:ac:c7:f4:95:9f:81:31:e6:3d:12:73:0a:5e:9f:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:5E:21:54:10:66:61:C0:9A:0E:25:93:C7:ED:F5:8E:F8:88:71
X509v3 Authority Key Identifier:
keyid:5D:64:4B:90:2C:AA:17:A9:9D:65:C4:6C:B3:A6:F8:D9:39:CD:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWRLkCyqF6mdZcRss6b42TnNmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/L1VeIVQQZmHAmg4lk8ft9Y74iHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.43.0/24
Signature Algorithm: sha256WithRSAEncryption
86:74:40:e6:d7:4c:cf:d6:5d:8b:69:03:7f:60:bf:f2:b9:00:
79:46:ba:4b:41:8f:2f:c3:ef:5d:04:db:3b:97:10:3e:d3:55:
8b:41:6e:02:53:c7:48:df:24:e6:86:d4:3d:66:26:c4:07:43:
98:3d:12:ff:bd:90:f6:73:74:9d:9a:0a:8d:3d:2a:96:da:cf:
96:9c:d5:d0:e1:fa:7f:86:c4:c8:5f:1f:14:8e:85:57:48:49:
36:c4:99:e0:16:02:d4:fd:62:b5:00:9b:70:37:5a:3a:30:46:
d4:1b:5c:9a:88:74:7f:9f:66:2a:35:af:9a:a9:06:e3:98:ba:
40:fe:cb:6f:da:4e:45:51:85:48:7f:a3:c0:41:cf:ba:94:47:
61:f6:92:c3:41:d8:d9:49:6a:90:bf:88:c4:fa:e1:2a:4a:ee:
cb:6b:30:f9:a6:ba:0d:71:e6:7f:b7:51:c2:0c:64:54:25:c2:
e1:4d:2a:d7:ab:3e:6b:1a:9b:e0:37:0c:89:10:28:ea:bf:27:
8a:98:5e:9c:c9:7a:e4:ab:e4:ef:e5:9f:43:87:dc:2e:d1:45:
68:36:e3:e9:58:70:e0:0f:b2:62:92:6c:00:a0:ef:f2:9c:aa:
0e:1a:ec:37:a3:1d:15:38:3b:84:9a:c3:9b:68:1a:45:7c:4a:
dd:bf:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:01:25 2024 by rpki-client on console-ams.rpki-client.org