Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/fv_xu6nl63wGHL3zb0Wj1RtZpMs.roa
File: fv_xu6nl63wGHL3zb0Wj1RtZpMs.roa (raw, json)
Hash identifier: vdDpWwiRQVz7MZF9QcYcaa2wA08WBJEsbvPppkBbnV4=
Subject key identifier: 7E:FF:F1:BB:A9:E5:EB:7C:06:1C:BD:F3:6F:45:A3:D5:1B:59:A4:CB
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 018CC5DBE3E53E2E0B908E863C75CADA0A00
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/fv_xu6nl63wGHL3zb0Wj1RtZpMs.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61121
IP address blocks: 62.181.50.0/24 maxlen: 24
62.181.51.0/24 maxlen: 24
62.181.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e3:e5:3e:2e:0b:90:8e:86:3c:75:ca:da:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7efff1bba9e5eb7c061cbdf36f45a3d51b59a4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:34:18:9e:87:5e:47:62:c8:b6:d5:de:27:
cb:29:40:da:c7:32:bf:6e:c2:24:7a:3d:e6:84:95:
cb:be:aa:43:e7:37:a4:2e:ae:0a:f8:24:d7:a9:c8:
1d:72:18:df:ca:c7:d6:c8:21:dc:68:55:df:7c:b9:
d7:89:81:b4:59:38:8a:e0:6d:fc:ad:25:d6:74:81:
6b:d9:5b:5f:05:03:5a:bf:42:1a:0e:f2:00:00:1d:
48:92:b9:85:ba:d0:69:60:c5:cf:1b:84:db:9b:8e:
96:e9:a3:84:c3:f5:a4:fa:8c:0a:7a:0d:d0:3f:a3:
be:fb:51:4c:d3:0f:24:f1:1d:b2:8f:20:f5:22:e4:
a3:c8:25:25:87:0a:23:2d:de:20:20:13:04:1b:12:
9e:7b:70:4f:94:4a:ad:d7:55:2f:34:ce:d9:6b:f6:
4b:8b:01:65:8f:a5:88:06:2b:6b:ee:96:81:7a:69:
12:d3:90:c4:59:67:df:9e:4a:14:71:af:08:f4:3d:
2e:a5:4c:48:ca:65:45:54:de:df:2b:e0:14:1f:29:
b5:79:7f:42:b4:ec:5e:fc:45:cd:91:bc:6e:10:41:
17:84:0f:8f:08:dd:e9:fc:0d:28:05:7c:8c:8d:1b:
66:e3:35:21:31:4e:f5:64:45:23:b0:e9:c8:36:88:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FF:F1:BB:A9:E5:EB:7C:06:1C:BD:F3:6F:45:A3:D5:1B:59:A4:CB
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/fv_xu6nl63wGHL3zb0Wj1RtZpMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.50.0/23
Signature Algorithm: sha256WithRSAEncryption
38:1d:0a:57:fb:98:e8:96:a5:9c:25:33:55:08:9e:ab:d4:20:
ee:2b:4f:91:4b:05:ec:61:32:75:74:77:32:f0:99:d6:e0:35:
4b:3a:ab:4d:6e:62:b1:dc:3e:91:c4:90:2c:a4:02:2b:91:e8:
a4:82:08:39:08:36:41:ce:7e:71:01:12:7b:8d:f1:9a:31:f0:
be:a4:d0:72:f6:52:01:55:c5:1f:bc:d0:65:5b:69:e9:13:c8:
d6:d0:50:48:de:4f:4a:2e:aa:d9:42:8b:44:d8:a6:ad:e9:21:
b6:6c:9e:60:03:a2:26:d4:ae:7b:68:af:7e:77:fd:c0:ea:50:
d4:22:1d:53:e5:cf:8a:b5:fb:0c:42:62:13:36:74:57:95:6c:
01:03:35:9a:5a:69:80:5a:1f:96:0f:64:cd:d7:8e:08:aa:90:
15:ad:e9:4b:65:1e:6b:3f:c4:98:46:f2:14:ad:67:54:7b:9d:
4d:ec:13:4d:7b:9d:4a:96:28:e7:1d:08:4f:d7:a3:b7:28:3f:
a9:16:14:27:ea:65:76:a3:40:73:b0:82:63:dd:55:32:af:9a:
28:4e:61:67:ea:a2:c8:59:00:db:b7:67:09:aa:d7:5a:74:a9:
3c:69:10:57:81:4f:d2:7e:0e:80:e9:f3:c5:3b:1a:82:29:8c:
e9:be:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:12:03 2024 by rpki-client on console-ams.rpki-client.org