Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/vexXV1wR4zNqnAbXry46LPBda94.roa
File: vexXV1wR4zNqnAbXry46LPBda94.roa (raw, json)
Hash identifier: YCwFzA9CcKB54ur/gGz+48sFo09E0XDtHHazUYBQeeE=
Subject key identifier: BD:EC:57:57:5C:11:E3:33:6A:9C:06:D7:AF:2E:3A:2C:F0:5D:6B:DE
Certificate issuer: /CN=619b9872dcc492fc9707f9ec7c16112f45b8535f
Certificate serial: 018CC802A6AB086A557A1EBD0D56FA76F106
Authority key identifier: 61:9B:98:72:DC:C4:92:FC:97:07:F9:EC:7C:16:11:2F:45:B8:53:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZuYctzEkvyXB_nsfBYRL0W4U18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/vexXV1wR4zNqnAbXry46LPBda94.roa
Signing time: Tue 02 Jan 2024 02:31:06 +0000
ROA not before: Tue 02 Jan 2024 02:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199508
IP address blocks: 62.220.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZuYctzEkvyXB_nsfBYRL0W4U18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:a6:ab:08:6a:55:7a:1e:bd:0d:56:fa:76:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619b9872dcc492fc9707f9ec7c16112f45b8535f
Validity
Not Before: Jan 2 02:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdec57575c11e3336a9c06d7af2e3a2cf05d6bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:7f:89:ad:6a:04:00:36:58:58:fc:33:08:
7f:72:00:e4:a0:2e:3a:b7:7a:01:c1:50:67:05:fb:
a5:7f:cd:f6:f9:25:0b:60:d3:25:2b:bf:a5:5d:21:
31:73:7b:3e:88:c6:ca:f9:da:2d:b5:c7:a1:cf:27:
39:0b:6b:ea:09:1e:24:86:ca:91:52:51:1a:20:ca:
17:cf:1e:f1:54:ef:fc:0d:1f:57:41:7b:05:19:95:
60:a2:63:bd:45:6f:72:53:81:31:28:f1:8a:40:d3:
47:c1:a8:9a:32:17:3a:e1:70:64:71:7b:12:91:de:
5c:d8:44:30:11:0e:69:10:03:e7:e0:76:9f:9e:e5:
cd:ae:74:c8:ab:99:80:38:bf:47:f0:6b:fa:cd:57:
d5:96:ab:e4:f8:42:93:0d:b6:97:c7:75:cf:38:e7:
93:47:1c:49:a9:25:30:ef:ed:ee:6e:2f:50:9b:39:
79:05:f2:cb:df:ba:e4:f4:ab:da:24:a4:3e:09:71:
53:2e:6a:5b:a8:22:98:12:fd:fb:ad:b5:91:b4:ff:
60:36:78:8f:a7:bc:a6:df:ea:88:4f:cf:fb:51:51:
2a:4b:21:6e:48:10:2c:01:b4:17:57:c9:d6:d7:80:
8c:e4:b4:b3:d1:19:01:17:db:b3:b7:7c:8f:da:16:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:57:57:5C:11:E3:33:6A:9C:06:D7:AF:2E:3A:2C:F0:5D:6B:DE
X509v3 Authority Key Identifier:
keyid:61:9B:98:72:DC:C4:92:FC:97:07:F9:EC:7C:16:11:2F:45:B8:53:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZuYctzEkvyXB_nsfBYRL0W4U18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/vexXV1wR4zNqnAbXry46LPBda94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c0ec5b-fce5-49fa-80b5-5561c5a62d4c/1/YZuYctzEkvyXB_nsfBYRL0W4U18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:f2:08:e0:28:18:69:8d:09:b8:cf:d8:63:98:4b:e8:2b:6a:
f7:2b:76:eb:72:46:2d:0b:0c:c1:75:3c:87:7c:8d:56:68:f5:
d5:9e:ac:e2:8f:21:a0:e6:99:64:4a:87:9b:0d:27:87:31:1d:
1c:30:f4:d5:c4:ed:0b:a2:1e:cc:68:fc:1a:a0:bb:b0:ff:45:
a2:48:2d:a8:f1:e2:bd:9c:98:4e:be:27:7c:98:aa:05:7b:17:
4d:39:98:a9:cd:5a:c0:93:80:25:fb:de:10:2a:e5:6a:1a:41:
6e:64:9e:09:f2:35:55:e8:a7:bd:44:9a:f4:39:b8:74:92:52:
fa:77:c9:1f:70:4c:e8:49:f6:7d:27:e7:33:60:b1:7f:8d:b5:
2f:c5:ba:99:65:25:97:f8:4c:cd:3e:12:c2:c2:55:aa:c3:d6:
eb:56:24:09:d7:d4:8a:a9:2e:22:83:86:26:b7:44:4a:27:c1:
19:64:8f:f7:01:63:ca:64:4f:23:65:3a:7c:75:fc:5a:73:19:
b4:e7:64:a0:9f:47:ae:99:1d:b3:d5:b2:98:38:1a:a3:98:0a:
e1:21:c7:09:3b:df:5a:e3:9a:97:5b:31:15:82:a9:ce:6a:8a:
1c:d1:e8:c6:c8:57:a5:47:15:44:fa:fa:cd:d6:a2:87:c9:29:
6b:fb:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:08:49 2024 by rpki-client on console-ams.rpki-client.org