Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/EdpeQP6ti6miNiHji0RnaxyjH0A.roa
File: EdpeQP6ti6miNiHji0RnaxyjH0A.roa (raw, json)
Hash identifier: Th4VCzQPArXG2Go9PkJy+sHZ1/j8q5r/n56eeBNW9s4=
Subject key identifier: 11:DA:5E:40:FE:AD:8B:A9:A2:36:21:E3:8B:44:67:6B:1C:A3:1F:40
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 018CC5DC6778656AE58C90C3012C7A7B5AA2
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/EdpeQP6ti6miNiHji0RnaxyjH0A.roa
Signing time: Mon 01 Jan 2024 16:30:05 +0000
ROA not before: Mon 01 Jan 2024 16:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25091
IP address blocks: 62.106.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:67:78:65:6a:e5:8c:90:c3:01:2c:7a:7b:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Jan 1 16:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11da5e40fead8ba9a23621e38b44676b1ca31f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:e5:25:33:54:6b:32:e4:6d:ad:54:41:95:
fe:2d:f1:ca:5e:85:9b:e5:1c:c7:b7:84:15:ef:33:
fc:6b:4c:a1:e3:fa:cb:d3:0f:29:6c:47:2c:0a:bd:
a5:48:50:3c:ba:6d:75:56:9e:75:0f:7d:92:87:61:
0b:65:f0:35:ec:b0:38:9c:6c:5a:43:6b:cf:d1:06:
69:5c:b0:77:c9:64:42:8f:2e:d2:f0:56:da:45:8b:
ac:0d:fb:39:11:10:e7:eb:d1:9c:d7:e5:53:16:46:
d8:5e:20:f7:35:b3:98:c6:35:4d:2c:ed:d0:e9:d0:
be:66:43:6b:01:ec:f8:52:51:2d:c4:15:a3:f4:42:
47:a8:eb:29:b4:a4:b7:66:09:96:4c:62:e1:e7:c0:
40:01:10:71:0d:4d:86:3f:38:88:f9:68:c0:74:99:
6f:8e:28:cb:54:49:f0:95:cd:e5:ac:78:72:94:94:
ca:42:ca:d2:2a:ce:c9:88:68:74:e6:4a:4e:71:8a:
f5:c5:43:c4:37:64:62:0f:72:e9:84:80:96:05:ef:
da:d3:dc:0e:ca:6f:da:ff:f6:ca:56:33:82:13:c8:
35:8d:09:d6:7e:fc:ff:8c:24:07:c1:09:36:fa:41:
97:2e:4a:7f:f3:b8:21:8f:87:2e:f2:d3:67:7d:22:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:5E:40:FE:AD:8B:A9:A2:36:21:E3:8B:44:67:6B:1C:A3:1F:40
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/EdpeQP6ti6miNiHji0RnaxyjH0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5e:48:eb:34:77:e7:95:38:76:0c:09:7b:04:84:01:04:cf:
0f:2a:5f:9b:74:69:26:86:06:1a:89:49:9b:78:78:70:02:6d:
b7:98:89:29:03:36:fd:b6:45:8d:76:46:a9:4e:76:28:62:c0:
80:6e:2e:dc:83:ed:03:1d:7d:e3:39:2d:fd:18:3b:89:c7:4a:
e0:02:61:21:fa:58:a4:5b:74:c2:ba:c2:c2:4c:bc:e7:07:bd:
ba:87:ba:80:d1:4f:ce:24:75:35:02:2f:6a:76:77:99:4d:ee:
a8:74:7d:e3:28:d0:b2:d9:58:97:13:b2:03:7b:ce:b2:57:83:
f7:70:cc:a6:6d:31:6d:cb:47:aa:2d:f0:4e:46:eb:c3:e8:b7:
7b:b7:39:60:2d:7c:e1:a3:f3:88:92:6f:8a:5f:1e:04:24:db:
36:05:32:4f:95:27:e3:3c:87:73:0b:87:81:db:74:8b:62:1f:
a9:57:79:59:01:8a:39:94:9c:07:47:70:16:dd:4e:31:c9:21:
8e:05:69:ed:65:e6:f1:30:66:18:89:cd:54:7e:24:6a:66:94:
74:ac:ec:f1:c6:c2:cb:39:a3:44:80:d6:a3:5c:d9:12:e3:f0:
f0:43:71:83:b4:ae:a8:64:7c:d8:06:c7:2b:e6:de:5a:1f:a4:
e7:13:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:45 2024 by rpki-client on console-fra.rpki-client.org