Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9ArX02VU-OjOKzCnPi3PCxujkWA.roa
File: 9ArX02VU-OjOKzCnPi3PCxujkWA.roa (raw, json)
Hash identifier: OkXq1ooxriYnHmUI9P6M3zr6ZvzIXQfTxpyQBMpMwSI=
Subject key identifier: F4:0A:D7:D3:65:54:F8:E8:CE:2B:30:A7:3E:2D:CF:0B:1B:A3:91:60
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018CC56DFE6E653DBEE14C95FF227915EA26
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9ArX02VU-OjOKzCnPi3PCxujkWA.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35830
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fe:6e:65:3d:be:e1:4c:95:ff:22:79:15:ea:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f40ad7d36554f8e8ce2b30a73e2dcf0b1ba39160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:85:c6:32:67:4e:04:68:11:5b:35:bc:e3:
d7:f9:e7:85:76:05:8a:95:d3:78:25:d2:94:f5:8f:
48:b4:f8:38:97:66:d1:7d:5c:03:0e:e5:ee:24:79:
e4:c2:93:f1:64:df:22:90:f4:ba:e4:51:c0:70:c7:
19:4f:f8:87:9f:b2:67:1d:3d:ec:ef:8e:0f:aa:b8:
79:f5:b2:9e:42:77:19:88:52:71:24:20:a0:84:46:
a8:08:cc:52:73:1b:d9:57:5e:e5:71:4e:e7:c9:80:
4e:5e:84:a4:f7:e9:c1:49:ad:09:e0:a5:af:ed:a5:
c4:df:62:75:c5:a9:1c:74:db:05:a4:a3:dc:34:f5:
21:df:6a:17:20:e8:f2:6a:5b:d3:72:40:ed:09:c5:
f5:1a:37:02:8e:61:d9:b3:8f:07:0e:22:46:ad:af:
57:00:2e:b3:9e:24:be:c9:08:80:21:22:3d:e5:ab:
1a:60:27:b6:d0:91:59:cd:4a:ad:4b:93:b4:b3:db:
8b:5b:53:45:2f:65:19:57:22:23:b7:9e:92:5e:2f:
91:d7:84:00:c9:4e:a4:ad:26:16:75:af:02:2f:9d:
f2:6c:69:98:4d:0f:b3:c0:e0:c4:34:29:40:1e:b5:
19:46:b8:31:c2:4a:b3:78:ac:a5:61:3b:3b:84:fc:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0A:D7:D3:65:54:F8:E8:CE:2B:30:A7:3E:2D:CF:0B:1B:A3:91:60
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9ArX02VU-OjOKzCnPi3PCxujkWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8a:cf:7b:5d:00:a7:5c:00:7c:45:a3:c5:4d:f9:48:52:19:
29:34:e5:af:05:1f:a4:72:4f:7b:31:e9:cc:10:20:b1:f2:d6:
cf:f0:48:ee:0e:f8:02:27:70:26:67:7e:8b:bf:7f:43:02:f0:
5f:de:61:c0:5d:97:0b:c2:59:58:d3:95:58:42:6f:1c:32:71:
b8:44:1a:b0:2e:1e:0b:c6:88:82:30:01:31:2a:15:1f:7e:ce:
98:bb:ec:6f:c3:2f:f9:6f:6b:a8:5c:4e:b8:8a:bc:72:96:cd:
a1:1a:5d:3a:e8:c1:82:7f:74:42:b3:e6:2f:05:da:67:b1:ee:
62:86:fb:09:ee:fc:9f:1c:5c:93:66:b6:43:df:72:27:93:7e:
19:6e:8e:b9:6f:d0:cf:52:1a:85:4e:11:1f:ad:2b:90:e3:ed:
32:f9:ac:f8:9d:95:cf:ac:1e:3f:48:ea:b3:74:7b:70:07:25:
1c:08:c7:2e:32:c9:29:bc:34:f1:8c:76:3c:e5:ac:9a:e1:9e:
83:b3:43:45:a6:f5:fe:1b:dc:11:3e:2b:45:59:60:5c:ad:9e:
96:4f:ba:6b:c5:21:13:dd:ab:a0:44:14:61:1d:f3:e2:4c:5e:
9e:b4:76:ed:b8:98:63:90:e5:da:4d:06:19:c7:16:f7:85:9c:
4c:2a:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:19:15 2024 by rpki-client on console-fra.rpki-client.org