Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/McmZ3bMJK9hTreg4DpG-PC8qgkA.roa
File: McmZ3bMJK9hTreg4DpG-PC8qgkA.roa (raw, json)
Hash identifier: kY7xslqa6mJUyn4xx93lV4T15ffwwu1sbz2MvjWj3LY=
Subject key identifier: 31:C9:99:DD:B3:09:2B:D8:53:AD:E8:38:0E:91:BE:3C:2F:2A:82:40
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 018CC6B799A91E08CB8CBCF967D929857283
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/McmZ3bMJK9hTreg4DpG-PC8qgkA.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208142
IP address blocks: 62.140.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:99:a9:1e:08:cb:8c:bc:f9:67:d9:29:85:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31c999ddb3092bd853ade8380e91be3c2f2a8240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:cd:82:55:86:4d:3c:56:bd:c6:a9:ae:53:
f1:84:6b:52:db:03:e2:cc:e9:a5:24:46:38:56:1a:
d8:66:5e:de:9f:26:15:42:f8:79:96:47:83:b8:c9:
b5:58:17:f0:54:22:c9:2d:d0:79:fa:6e:54:a4:6a:
65:36:59:05:1e:40:41:38:aa:c5:4b:a5:b3:34:91:
61:b7:3a:9b:65:0b:4b:ef:c9:b6:af:b8:bd:dd:55:
e9:48:d3:8f:dc:2c:9b:81:bd:00:9d:69:c7:36:00:
73:ae:3e:2f:1b:44:9c:1c:56:1a:c9:25:f1:f7:1e:
cf:48:88:65:db:76:ec:71:c8:62:17:61:0c:dd:54:
33:3f:27:d7:61:b4:c6:89:c6:1e:bb:40:79:47:7b:
b2:04:e8:44:1d:a5:a1:af:7b:4c:21:9d:de:bd:55:
b3:95:e4:be:f0:72:95:69:dd:7e:7b:92:98:45:0f:
bc:50:2e:d6:23:6b:d6:06:fa:71:bf:41:bf:54:37:
42:77:50:f0:ef:bc:89:17:57:dc:76:5b:9e:1a:4a:
b7:4b:d2:78:4b:3e:69:8c:e9:03:4b:6f:c1:27:74:
30:3c:1a:aa:e8:c1:ea:ec:99:9d:6e:80:fc:75:cc:
a8:56:3d:4d:12:80:af:ac:3e:18:c3:84:3f:44:ef:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:99:DD:B3:09:2B:D8:53:AD:E8:38:0E:91:BE:3C:2F:2A:82:40
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/McmZ3bMJK9hTreg4DpG-PC8qgkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:78:07:8b:5d:bc:59:a1:65:0d:53:42:01:ec:9d:a4:8b:7d:
1e:40:8f:e0:2f:8b:e9:bb:52:7f:19:39:b6:10:45:cb:96:0f:
f2:7a:49:7c:ea:63:8c:18:db:5c:61:3b:da:2c:ca:ea:bb:10:
e5:f6:6c:f1:99:45:10:8c:3f:a5:df:cb:61:7d:5e:b7:1d:4b:
34:71:27:c6:80:d5:f1:83:9a:94:03:b3:3c:e5:ea:d3:d2:fe:
83:b4:dc:0f:15:84:5c:84:0d:ca:f8:28:71:f7:a0:dc:1d:a3:
f5:5c:8f:05:64:83:02:e6:b9:0e:9a:19:50:1e:c6:5e:b5:0d:
e8:b3:27:ae:32:af:65:fb:2b:6f:bb:0e:e4:48:90:14:4d:96:
75:bd:f9:f2:0a:47:a6:83:cc:51:6d:b2:9e:71:33:98:0a:86:
27:b9:e2:a9:cb:6a:f6:6a:ed:04:b0:8e:7d:53:bd:fe:7f:9e:
b8:23:78:a9:33:02:0c:aa:29:3e:9c:05:bf:f3:40:94:39:f8:
71:1f:85:32:eb:03:b9:59:92:7f:17:46:fd:04:3d:d2:80:21:
7e:1a:10:e3:fd:e0:e7:6d:ff:6e:53:30:45:e6:dd:51:74:28:
ee:49:36:52:22:49:d8:87:27:b3:3d:c6:92:4d:a2:81:0c:84:
a1:74:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:58 2024 by rpki-client on console-ams.rpki-client.org