Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ne5uN0Mm6UC0_i4zUw-jPAzONLQ.roa
File: ne5uN0Mm6UC0_i4zUw-jPAzONLQ.roa (raw, json)
Hash identifier: NoxYWRsAVIVfemPf42n5QsDn3PAPlo7koj95ee2n0X8=
Subject key identifier: 9D:EE:6E:37:43:26:E9:40:B4:FE:2E:33:53:0F:A3:3C:0C:CE:34:B4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DF20A9C2F7D36208C6F65FCB92F26
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ne5uN0Mm6UC0_i4zUw-jPAzONLQ.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204230
IP address blocks: 62.89.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f2:0a:9c:2f:7d:36:20:8c:6f:65:fc:b9:2f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dee6e374326e940b4fe2e33530fa33c0cce34b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:40:64:b0:26:8e:b8:aa:75:02:4c:37:c7:4e:
7b:fe:ef:75:d9:8d:8f:53:dd:1a:d0:f9:a0:77:4a:
28:23:5e:64:99:a6:26:ca:8c:3b:f0:59:5e:d8:0d:
66:a8:06:7d:e3:c5:05:ae:3f:c6:91:92:d2:cc:31:
e7:08:44:cd:2d:78:81:a5:84:d5:ca:68:67:34:82:
9e:0c:83:85:41:ce:e9:16:d9:e9:4d:2e:db:7c:f9:
c0:85:41:b5:b8:c8:37:02:7f:f2:19:d5:9e:5f:b5:
4c:83:04:16:73:6a:a8:d1:fc:2c:c2:8b:cf:e5:2e:
7c:7e:c7:82:8f:c8:32:04:17:23:40:e7:e2:91:33:
7d:35:9a:b6:32:9d:8c:f9:d6:2a:7b:2f:e1:f4:95:
26:63:9c:a2:bf:bf:79:7c:13:0b:6e:9e:4f:9a:01:
2c:fb:5b:9b:3b:ab:4b:36:25:34:14:c0:99:46:60:
10:aa:ad:65:e7:21:20:34:97:77:73:28:f8:57:d7:
77:d9:54:8f:f4:a4:04:4a:de:6b:b8:fc:99:5e:75:
6b:94:4b:d7:d0:f1:ba:66:bd:3b:48:32:7e:62:f9:
0f:57:e2:54:a2:e4:44:a9:05:ac:a3:08:f7:f0:7a:
40:e8:7a:fd:5f:92:22:57:98:f4:28:46:42:93:55:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EE:6E:37:43:26:E9:40:B4:FE:2E:33:53:0F:A3:3C:0C:CE:34:B4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ne5uN0Mm6UC0_i4zUw-jPAzONLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ff:a7:33:d1:11:d6:ae:a0:02:f0:eb:8f:1e:08:69:b8:99:
80:2c:c1:7b:e8:87:53:b9:4b:19:31:90:78:a7:58:86:f3:34:
5c:90:85:ed:28:03:a0:5e:aa:ad:fe:a9:10:6f:ca:90:1b:eb:
de:ad:3e:80:f1:cf:eb:f5:2f:7c:4c:16:34:61:02:6a:74:1c:
95:7e:c7:41:26:1b:c7:dd:c7:68:ca:bc:58:89:dc:97:32:95:
e1:49:bb:d8:1f:b6:95:8f:0d:d1:82:d7:49:b5:01:42:a7:a9:
5a:5f:44:54:2e:25:46:38:16:ec:0f:dd:a9:58:25:8d:b4:83:
ad:a7:df:b2:b8:ab:82:8d:4f:0e:ef:d0:50:12:5b:10:4b:66:
42:cc:5b:e7:a2:00:33:bc:ad:ce:40:4b:ac:4e:f5:b8:ab:f1:
63:94:66:37:28:93:d3:ea:15:a4:3f:c8:b1:2f:14:f9:56:f7:
b4:22:2c:6b:ad:be:1e:24:d6:09:41:1b:98:f8:7f:d0:15:db:
c1:f2:cf:3e:c9:21:74:76:63:7b:ba:0a:d3:5b:cf:fe:db:b3:
87:5d:c0:8d:05:bd:37:b0:a7:ac:02:9f:14:81:8a:66:59:90:
4d:19:e9:19:80:39:ce:1d:22:0b:60:40:7e:d9:aa:c5:12:c8:
6a:67:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:57 2024 by rpki-client on console-ams.rpki-client.org