Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F8-k7bJwzTUmcZQc3uh_HHwa7o8.roa
File: F8-k7bJwzTUmcZQc3uh_HHwa7o8.roa (raw, json)
Hash identifier: aACaHjLpAXMrS4T1m1Us7gE4iBIrdOdYyFH1APufEjY=
Subject key identifier: 17:CF:A4:ED:B2:70:CD:35:26:71:94:1C:DE:E8:7F:1C:7C:1A:EE:8F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5011E3732AA4640BFD7B8DC7DCD0135
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F8-k7bJwzTUmcZQc3uh_HHwa7o8.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197715
IP address blocks: 62.106.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1e:37:32:aa:46:40:bf:d7:b8:dc:7d:cd:01:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17cfa4edb270cd352671941cdee87f1c7c1aee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:11:77:90:9e:af:4e:31:5b:e4:ef:e2:70:
8c:2e:ec:0c:97:58:71:34:39:ca:f5:01:4b:9e:ca:
b9:41:c0:61:51:72:c3:da:36:56:da:7d:0e:8e:cc:
c1:0c:2e:d7:6b:dd:47:7b:2b:b2:30:9c:49:b5:e3:
26:dd:1a:1d:18:69:80:8b:a4:4f:97:2a:dd:67:bb:
b4:af:ca:f8:54:4d:37:87:f3:dd:e5:21:2a:35:43:
d0:4e:88:85:a2:01:07:e1:2f:a1:8c:ce:19:64:17:
ab:27:79:cb:e1:a1:16:1e:a7:07:ad:27:53:38:02:
42:38:84:8e:f0:03:2e:9a:55:ed:58:21:8d:27:05:
d0:6e:b4:6d:eb:1e:45:64:ea:2d:46:f1:49:e4:93:
25:90:af:78:9d:c4:ba:a9:13:a1:f2:62:ea:c4:fc:
b5:a6:66:5e:a5:71:57:bf:85:18:cd:9f:4c:ea:f5:
4c:4d:21:89:48:11:72:73:b3:df:b7:39:9e:01:f6:
48:43:e2:ad:31:e2:f9:ac:91:f9:0e:ab:8f:01:61:
b6:37:73:50:c3:8a:cb:89:93:fa:30:2e:a8:c1:71:
90:ce:7e:59:bf:08:1b:7b:d2:e4:0f:96:45:eb:53:
d3:45:f2:43:86:1c:eb:37:28:52:73:3f:d2:53:02:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:A4:ED:B2:70:CD:35:26:71:94:1C:DE:E8:7F:1C:7C:1A:EE:8F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F8-k7bJwzTUmcZQc3uh_HHwa7o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.89.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b6:1d:6a:26:d9:a6:11:91:f6:d8:71:e3:77:7e:04:5b:b3:
e0:68:8c:b8:a0:fd:32:29:f6:90:f2:c0:63:a3:e8:2e:c9:fa:
97:d2:c2:31:ea:21:09:c9:d3:5f:88:44:cd:34:b0:3a:c6:bf:
f0:4b:2e:69:8f:8a:02:65:e5:a4:f3:49:c7:c5:cc:59:33:a2:
b9:ea:80:04:b9:19:65:11:0e:3d:c8:96:2e:a6:1b:dc:01:7e:
75:5f:36:b2:11:d4:aa:c9:a7:8a:0a:a4:b8:42:09:58:32:9d:
5a:9a:b5:25:9a:8a:2e:74:7f:ec:bd:d4:d1:8b:94:d5:79:fe:
d4:bb:7e:00:a0:1c:70:7b:ea:70:e4:71:97:b3:2a:36:2e:ec:
c2:9f:a6:89:2f:16:3b:0d:bf:99:c0:9c:05:f4:62:51:ec:b0:
3d:8e:0c:7f:c1:22:59:eb:2a:84:53:26:76:b0:ef:4d:54:b5:
8c:03:9a:cf:86:47:6e:4d:34:87:65:97:f6:f5:df:56:53:b1:
1b:10:4c:f0:4e:35:87:ac:be:aa:a2:a2:62:4b:3b:8f:9f:ec:
fa:cb:c5:86:b8:a4:16:29:57:4e:7c:17:c2:e7:3e:a7:ab:55:
a8:e6:9e:91:ee:26:81:19:60:7d:10:e8:e6:be:e7:b7:02:02:
13:78:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:49:05 2024 by rpki-client on console-fra.rpki-client.org