Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/av3h7N1L9UJFRGsqyo1zrtpEqRw.roa
File: av3h7N1L9UJFRGsqyo1zrtpEqRw.roa (raw, json)
Hash identifier: VTVKSoDwtHxUERTxz3zKX5sNN1HMZmbwUMlUnE/214g=
Subject key identifier: 6A:FD:E1:EC:DD:4B:F5:42:45:44:6B:2A:CA:8D:73:AE:DA:44:A9:1C
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018E13B7C6AD6D1E6BED23ACDBB7CB88CD0B
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/av3h7N1L9UJFRGsqyo1zrtpEqRw.roa
Signing time: Wed 06 Mar 2024 12:23:14 +0000
ROA not before: Wed 06 Mar 2024 12:23:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 62.68.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:b7:c6:ad:6d:1e:6b:ed:23:ac:db:b7:cb:88:cd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Mar 6 12:23:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6afde1ecdd4bf54245446b2aca8d73aeda44a91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:30:48:7a:ff:53:35:7b:ed:85:8a:48:f6:
59:f1:14:1e:7a:37:46:c1:39:0c:56:ca:cd:d9:02:
91:80:c1:db:f8:09:be:85:f8:64:22:0d:a5:9f:77:
d1:bc:14:af:e2:e4:66:b5:7a:0b:41:0c:a9:58:29:
39:8c:85:92:57:d8:ae:da:0c:6c:f3:72:4b:67:18:
d0:c2:64:24:4e:ec:54:c7:14:59:d1:e1:cd:5e:93:
bf:fb:4a:97:8a:7b:e7:34:65:f0:48:19:67:06:06:
a7:8b:1e:0a:63:4c:71:79:8b:ee:65:8e:16:3e:e4:
44:cd:c9:6b:2f:ec:71:1b:bf:84:11:34:37:b6:6e:
f1:5e:38:34:53:38:bc:67:a1:0c:58:e2:e2:ff:dc:
e4:8c:33:ce:88:43:c3:7c:71:7c:ad:63:07:fd:07:
fe:37:a4:fb:e0:e3:f3:62:d1:27:de:8d:c1:2b:5c:
8a:45:09:a0:ad:0d:91:39:21:28:05:74:ca:68:1c:
a3:e7:ce:4e:08:23:af:0c:ad:c2:f5:09:0c:4e:49:
e2:73:7a:be:7b:72:d5:64:18:32:81:a3:50:2a:b4:
e3:1a:86:a6:24:97:72:51:94:13:07:2f:14:2c:47:
37:74:26:9e:6b:80:81:02:13:e2:be:95:a9:4f:43:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:E1:EC:DD:4B:F5:42:45:44:6B:2A:CA:8D:73:AE:DA:44:A9:1C
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/av3h7N1L9UJFRGsqyo1zrtpEqRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:71:0a:bd:6b:58:c9:34:37:b3:3d:b7:78:78:45:a3:5b:c2:
9e:95:cc:27:5e:cc:df:f8:51:25:0f:ce:14:1e:aa:7e:13:28:
46:54:07:65:08:a1:10:76:7f:e8:88:98:68:75:0a:b0:a4:31:
f1:61:37:af:da:fa:3a:6f:9a:e7:e9:9b:ab:53:43:73:73:41:
c7:67:48:1f:29:3c:ae:a6:e5:20:6b:f4:d0:03:74:01:98:02:
9b:cb:8a:1d:e0:69:8c:25:40:7b:45:0d:7e:54:0e:2b:04:5e:
a9:c9:ec:68:47:99:51:65:3b:c2:1c:73:94:cb:e2:3f:ba:39:
aa:06:eb:1b:df:0d:16:e3:37:d6:70:7b:5c:86:9b:38:2c:d5:
d2:d0:ea:7e:de:7d:99:ac:d9:a7:76:97:9c:96:bc:66:12:d1:
73:b6:1d:cf:d8:2d:25:b7:fd:81:43:3f:05:2d:fa:76:92:35:
c1:89:ae:7a:65:bd:b1:73:03:3a:14:3c:ba:94:c7:69:02:cb:
f4:0b:98:f3:7a:ad:9f:e1:1a:57:ee:37:b5:55:bb:a0:a9:42:
7a:8b:28:56:ec:64:77:45:50:84:85:40:88:16:36:d1:84:7c:
6f:69:ec:97:54:fa:58:6c:e7:e1:03:36:4a:de:48:1c:57:32:
09:50:a7:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4Tt8atbR5r7SOs27fLiM0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjQwMzA2MTIyMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWZkZTFlY2RkNGJmNTQyNDU0NDZiMmFjYThkNzNhZWRhNDRhOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFgwSHr/UzV77YWKSPZZ8RQeejdG
wTkMVsrN2QKRgMHb+Am+hfhkIg2ln3fRvBSv4uRmtXoLQQypWCk5jIWSV9iu2gxs
83JLZxjQwmQkTuxUxxRZ0eHNXpO/+0qXinvnNGXwSBlnBganix4KY0xxeYvuZY4W
PuREzclrL+xxG7+EETQ3tm7xXjg0Uzi8Z6EMWOLi/9zkjDPOiEPDfHF8rWMH/Qf+
N6T74OPzYtEn3o3BK1yKRQmgrQ2ROSEoBXTKaByj585OCCOvDK3C9QkMTknic3q+
e3LVZBgygaNQKrTjGoamJJdyUZQTBy8ULEc3dCaea4CBAhPivpWpT0MXiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGr94ezdS/VCRURrKsqNc67aRKkcMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvYXYzaDdOMUw5VUpGUkdzcXlvMXpydHBFcVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRdMA0G
CSqGSIb3DQEBCwUAA4IBAQALcQq9a1jJNDezPbd4eEWjW8KelcwnXszf+FElD84U
Hqp+EyhGVAdlCKEQdn/oiJhodQqwpDHxYTev2vo6b5rn6ZurU0Nzc0HHZ0gfKTyu
puUga/TQA3QBmAKby4od4GmMJUB7RQ1+VA4rBF6pyexoR5lRZTvCHHOUy+I/ujmq
Busb3w0W4zfWcHtchps4LNXS0Op+3n2ZrNmndpeclrxmEtFzth3P2C0lt/2BQz8F
Lfp2kjXBia56Zb2xcwM6FDy6lMdpAsv0C5jzeq2f4RpX7je1VbugqUJ6iyhW7GR3
RVCEhUCIFjbRhHxvaeyXVPpYbOfhAzZK3kgcVzIJUKdG
-----END CERTIFICATE-----
Generated at Thu May 30 09:36:07 2024 by rpki-client on console-ams.rpki-client.org