Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/c7GdzVmX4rT8hHfXwHRELZAlBlo.roa
File: c7GdzVmX4rT8hHfXwHRELZAlBlo.roa (raw, json)
Hash identifier: 4Kij2V/GdcuCd3eonIBTWSkBa5Tyu8MUCLlNHGZRjGM=
Subject key identifier: 73:B1:9D:CD:59:97:E2:B4:FC:84:77:D7:C0:74:44:2D:90:25:06:5A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DE7E42DC3BA881A31D89A108A7C24
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/c7GdzVmX4rT8hHfXwHRELZAlBlo.roa
Signing time: Mon 01 Jan 2024 14:29:23 +0000
ROA not before: Mon 01 Jan 2024 14:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43197
IP address blocks: 62.89.208.0/22 maxlen: 24
62.89.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e7:e4:2d:c3:ba:88:1a:31:d8:9a:10:8a:7c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73b19dcd5997e2b4fc8477d7c074442d9025065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:7a:1b:04:b8:c1:c7:08:c4:b6:47:c2:ef:
64:fb:a6:e1:b8:c4:04:c9:1f:8d:42:79:0a:32:ea:
34:e4:d9:35:a6:28:b4:47:50:71:2f:1f:3d:ac:6c:
08:89:a1:22:42:af:c9:f0:43:91:25:ff:31:30:71:
d1:25:47:db:1f:24:40:95:a1:82:02:66:c0:88:68:
87:b0:f6:9a:a9:de:8a:22:6d:c0:8c:c4:e9:fc:13:
05:2c:57:95:ed:8f:6b:2b:93:30:d3:90:fd:9d:2a:
d2:e5:d5:0e:27:e2:c3:51:4c:ca:91:a0:79:f7:8e:
31:6d:9a:f6:d5:8d:ad:56:7e:42:d5:cc:d2:13:73:
70:ff:4a:d2:f9:d3:0a:40:eb:0f:b9:cf:70:6b:e6:
14:9d:9c:aa:f5:93:dd:8d:bb:73:9c:38:07:7f:ee:
1c:9d:d0:2a:77:f5:49:df:de:f7:cb:f6:30:ca:e4:
79:73:be:ac:0b:f9:ee:61:87:a2:22:e7:58:cb:46:
43:94:8e:11:02:c4:e0:00:6b:7a:29:fa:ba:6f:2b:
16:a5:33:ca:f1:eb:8f:40:8a:12:96:77:20:17:8f:
01:f3:45:26:30:ed:aa:7f:c2:2a:11:0f:9c:bf:24:
9a:12:a2:17:9e:9f:3c:10:0c:e8:27:f4:97:f3:ea:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:9D:CD:59:97:E2:B4:FC:84:77:D7:C0:74:44:2D:90:25:06:5A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/c7GdzVmX4rT8hHfXwHRELZAlBlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.208.0/22
62.89.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:d0:05:16:60:4a:4e:fb:93:02:20:67:c2:78:cc:a5:c0:b0:
c5:57:11:c9:f6:4d:54:bf:58:45:b2:9c:8d:0e:cc:13:7b:ca:
3e:da:45:76:be:d2:11:81:1d:38:e7:4b:a2:96:96:c0:6a:ca:
85:b2:45:e7:da:65:d4:8d:da:58:f0:90:a3:8d:25:7f:ea:dd:
c8:49:44:5e:5a:13:3c:bf:64:89:c5:70:6b:a9:31:9b:f2:d1:
5f:0b:86:11:4c:27:65:8b:a0:94:17:50:98:87:8f:e3:ab:82:
ec:4a:4e:b3:ee:54:71:54:83:f9:c8:53:82:32:1d:9d:33:c1:
0a:71:31:08:57:86:4e:7d:f2:92:b2:75:e0:86:cb:51:a9:c7:
67:4b:2a:3e:df:40:02:b6:57:09:b0:b6:61:e9:05:a0:b1:5e:
57:52:ea:95:64:ba:df:0d:f9:ae:da:9e:1e:c2:eb:8e:37:3d:
5d:09:bb:b3:8c:15:1c:37:35:bc:ff:54:55:31:55:2e:2a:39:
14:15:c3:51:f6:bd:03:8a:b3:41:3e:bd:1d:39:4f:c9:1b:b8:
fa:dc:0c:3e:ab:55:fc:79:a5:da:aa:80:26:40:7f:cf:c5:3e:
3c:a1:3f:bd:20:2a:17:78:c8:d9:02:86:f6:84:2f:f2:cc:58:
7a:66:94:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbefkLcO6iBox2JoQinwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMTAxMTQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2IxOWRjZDU5OTdlMmI0ZmM4NDc3ZDdjMDc0NDQyZDkwMjUwNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1J6GwS4wccIxLZHwu9k+6bhuMQE
yR+NQnkKMuo05Nk1pii0R1BxLx89rGwIiaEiQq/J8EORJf8xMHHRJUfbHyRAlaGC
AmbAiGiHsPaaqd6KIm3AjMTp/BMFLFeV7Y9rK5Mw05D9nSrS5dUOJ+LDUUzKkaB5
944xbZr21Y2tVn5C1czSE3Nw/0rS+dMKQOsPuc9wa+YUnZyq9ZPdjbtznDgHf+4c
ndAqd/VJ3973y/YwyuR5c76sC/nuYYeiIudYy0ZDlI4RAsTgAGt6Kfq6bysWpTPK
8euPQIoSlncgF48B80UmMO2qf8IqEQ+cvySaEqIXnp88EAzoJ/SX8+puIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHOxnc1Zl+K0/IR318B0RC2QJQZaMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvYzdHZHpWbVg0clQ4aEhmWHdIUkVMWkFsQmxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPlnQAwQC
PlncMA0GCSqGSIb3DQEBCwUAA4IBAQAK0AUWYEpO+5MCIGfCeMylwLDFVxHJ9k1U
v1hFspyNDswTe8o+2kV2vtIRgR0450uilpbAasqFskXn2mXUjdpY8JCjjSV/6t3I
SUReWhM8v2SJxXBrqTGb8tFfC4YRTCdli6CUF1CYh4/jq4LsSk6z7lRxVIP5yFOC
Mh2dM8EKcTEIV4ZOffKSsnXghstRqcdnSyo+30ACtlcJsLZh6QWgsV5XUuqVZLrf
Dfmu2p4ewuuONz1dCbuzjBUcNzW8/1RVMVUuKjkUFcNR9r0DirNBPr0dOU/JG7j6
3Aw+q1X8eaXaqoAmQH/PxT48oT+9ICoXeMjZAob2hC/yzFh6ZpT4
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:24 2024 by rpki-client on console-ams.rpki-client.org