Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/rqSa04kcCzD4i-ktMshGxqvAFcI.roa
File: rqSa04kcCzD4i-ktMshGxqvAFcI.roa (raw, json)
Hash identifier: gTxfI5pnczDxxd3ZP8Pd8dnbo1JwzrgrcT1fo3QXbFo=
Subject key identifier: AE:A4:9A:D3:89:1C:0B:30:F8:8B:E9:2D:32:C8:46:C6:AB:C0:15:C2
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 018CC7943BC738A3AF51720F7426A12A6DE5
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/rqSa04kcCzD4i-ktMshGxqvAFcI.roa
Signing time: Tue 02 Jan 2024 00:30:29 +0000
ROA not before: Tue 02 Jan 2024 00:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198605
IP address blocks: 5.62.30.0/24 maxlen: 24
5.62.25.0/24 maxlen: 24
5.62.36.0/23 maxlen: 23
5.62.32.0/24 maxlen: 24
5.62.38.0/24 maxlen: 24
5.62.44.0/23 maxlen: 23
5.62.42.0/23 maxlen: 23
5.62.40.0/23 maxlen: 23
5.62.38.0/23 maxlen: 24
5.62.50.0/24 maxlen: 24
5.62.47.0/24 maxlen: 24
5.62.48.0/23 maxlen: 23
5.62.46.0/23 maxlen: 23
5.62.46.0/24 maxlen: 24
5.62.58.0/23 maxlen: 23
5.62.57.0/24 maxlen: 24
5.62.56.0/23 maxlen: 23
5.62.56.0/24 maxlen: 24
5.62.55.0/24 maxlen: 24
5.62.54.0/24 maxlen: 24
5.62.53.0/24 maxlen: 24
5.62.52.0/24 maxlen: 24
5.62.62.0/23 maxlen: 23
5.62.60.0/23 maxlen: 23
5.62.17.0/24 maxlen: 24
5.62.16.0/24 maxlen: 24
5.62.20.0/24 maxlen: 24
5.62.19.0/24 maxlen: 24
5.62.18.0/24 maxlen: 24
5.62.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3b:c7:38:a3:af:51:72:0f:74:26:a1:2a:6d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 2 00:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aea49ad3891c0b30f88be92d32c846c6abc015c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:00:a0:e8:08:eb:a4:80:59:92:7c:e3:0e:
0e:ac:22:31:62:57:3d:42:98:ae:99:6a:b4:87:f0:
fb:80:e5:cf:13:fa:e9:95:23:d6:c8:54:1c:61:bf:
44:de:30:6d:ab:6e:09:c9:82:b5:72:34:5e:07:35:
54:98:8d:6b:27:2e:f8:8a:af:17:7b:04:f1:0e:ec:
c5:5e:67:67:23:e1:e4:04:1c:c8:1a:76:87:ab:19:
90:cc:d4:97:d4:23:bd:fd:a1:4a:c9:d8:69:d4:ff:
ee:50:a7:e3:7a:59:5f:c7:c9:46:b7:df:8a:05:7e:
40:54:5a:f6:f3:e4:68:b7:5d:bd:fc:41:7a:62:22:
3a:97:c1:3e:ab:9d:e8:d7:fe:ac:22:ff:b1:b0:c8:
e1:01:6f:8f:e3:e4:d2:fa:9a:eb:5e:bf:4e:8b:2b:
31:90:bf:c8:74:76:49:84:7c:a9:1b:1a:83:35:3f:
94:3c:5e:05:de:c7:74:7c:d3:09:34:5a:9f:78:36:
9c:f9:ec:06:97:f7:c1:ba:31:db:e4:b3:de:ea:f7:
fc:ee:d4:79:a9:ff:8c:47:0e:b8:ce:43:0b:7a:22:
50:0e:67:a4:0c:02:df:b7:ae:b7:ba:52:91:c3:ee:
81:92:10:e5:c2:af:3d:80:f7:e6:da:c8:9c:0e:43:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:9A:D3:89:1C:0B:30:F8:8B:E9:2D:32:C8:46:C6:AB:C0:15:C2
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/rqSa04kcCzD4i-ktMshGxqvAFcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.16.0-5.62.20.255
5.62.24.0/23
5.62.30.0/24
5.62.32.0/24
5.62.36.0-5.62.50.255
5.62.52.0-5.62.63.255
Signature Algorithm: sha256WithRSAEncryption
2f:1d:bd:2b:8e:ad:92:fa:65:73:13:b6:86:5a:49:4b:75:6a:
22:b9:a8:ec:3c:27:41:bc:7e:6f:e0:6c:0c:c9:54:67:8e:81:
92:65:85:f2:24:80:be:9b:6e:f6:5a:1c:be:90:08:1f:4b:5a:
57:3d:a9:7c:20:0d:13:0e:7c:e9:72:d4:4f:5c:a0:ec:fa:52:
66:50:e7:55:98:64:73:0d:71:d9:a2:3f:f4:4e:b6:a6:b7:96:
05:7f:21:40:8a:72:c0:fe:31:ee:e6:4d:47:fb:93:f1:d3:93:
ec:f0:5a:1a:f2:65:f5:b0:31:eb:56:e0:55:6b:07:9d:ad:c9:
62:78:82:cc:84:5a:53:26:2a:b7:5a:a9:63:10:1a:fa:c9:a6:
c9:0f:64:a5:e2:b3:bb:cd:73:af:d7:3a:34:ec:fd:36:d7:92:
05:d3:3a:d9:f7:ac:78:72:9d:61:97:69:36:da:bd:a7:f5:2c:
59:ed:c0:ba:22:c3:69:2a:98:2a:1e:cd:af:6b:2d:50:7d:d5:
97:75:c1:8f:85:01:13:1e:17:a5:e1:c8:e4:7e:28:d8:54:15:
c0:14:90:c2:0c:e3:cf:f4:41:61:7a:c5:4f:f7:32:60:64:fe:
bb:b7:a0:7c:88:0a:12:3f:1d:87:93:24:ac:7e:f5:17:02:e5:
df:82:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:55:33 2024 by rpki-client on console-ams.rpki-client.org