Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/J1d-JCJqTVYxS09U1ZVavndOvpc.roa
File: J1d-JCJqTVYxS09U1ZVavndOvpc.roa (raw, json)
Hash identifier: 3RJv9k5ldTB08jLisVtq9X29L7m6EJydKh9jAT9t3ig=
Subject key identifier: 27:57:7E:24:22:6A:4D:56:31:4B:4F:54:D5:95:5A:BE:77:4E:BE:97
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 018CC7953C114A1109EA253E8A2A9BF145EE
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/J1d-JCJqTVYxS09U1ZVavndOvpc.roa
Signing time: Tue 02 Jan 2024 00:31:35 +0000
ROA not before: Tue 02 Jan 2024 00:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206469
IP address blocks: 62.106.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3c:11:4a:11:09:ea:25:3e:8a:2a:9b:f1:45:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27577e24226a4d56314b4f54d5955abe774ebe97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:cb:77:55:dd:b2:f0:12:d5:da:6d:f6:06:
67:36:82:be:66:13:4f:fc:78:d5:fc:25:3e:58:bb:
06:c2:34:8c:fc:39:12:97:95:b5:a0:fa:14:5f:b9:
74:cb:f6:11:a5:5e:7b:f8:df:a0:90:ff:78:da:16:
8f:e7:da:1a:4e:46:b3:f9:2e:4d:f4:69:19:9f:30:
c9:68:29:17:4b:11:91:93:a3:9f:23:26:91:8f:7c:
48:8e:9c:67:19:0b:e0:a4:9b:69:dc:31:4f:d9:b9:
b4:82:18:98:bb:8c:ff:8b:68:f1:24:8b:2e:7b:e9:
e9:6e:d9:87:38:67:c4:4d:e4:c6:37:19:b6:8c:f4:
62:3d:72:f5:39:2b:85:28:33:03:ba:53:3d:15:5e:
68:c4:ae:72:d2:84:d9:65:58:47:bc:f5:46:44:43:
25:f4:6a:cd:32:5f:08:2d:63:3e:9d:29:5b:2d:fb:
90:56:64:24:3d:28:9b:f6:b9:12:f9:93:42:8d:9e:
2e:ab:9b:bc:56:97:b1:bb:02:5c:82:b0:40:1b:fd:
98:51:42:86:0d:b0:a1:b5:a8:cd:7f:cf:b3:87:7c:
ca:f1:c3:5d:28:36:ea:95:50:4e:ac:ad:e6:e8:ad:
c1:7f:f3:ab:2f:3a:86:4a:c2:9f:1d:a8:ba:16:7a:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:7E:24:22:6A:4D:56:31:4B:4F:54:D5:95:5A:BE:77:4E:BE:97
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/J1d-JCJqTVYxS09U1ZVavndOvpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.71.0/24
Signature Algorithm: sha256WithRSAEncryption
68:97:4b:e9:66:04:5d:cc:28:c7:03:91:fc:22:b7:e8:58:0a:
e6:d8:0b:5e:bb:65:b4:69:80:4d:af:9e:b9:d0:37:48:ba:66:
40:67:a4:29:b7:ba:02:bd:fc:d0:7f:64:e0:cf:98:c8:30:d3:
7e:c5:1e:4d:bd:d2:b2:16:9c:11:ab:89:c2:ec:76:28:3a:9c:
36:44:74:8d:ed:a4:b7:4b:b8:9b:d1:87:fd:fd:75:6e:39:39:
98:7d:44:bf:c4:33:ea:b7:bd:c0:7d:d8:2f:b6:f0:76:8d:b4:
73:bf:a7:68:0c:cf:92:94:7c:68:04:c8:66:8f:34:b1:b3:9e:
87:fb:23:d5:17:59:d3:bf:05:c8:e5:4e:c5:41:1c:aa:11:58:
90:5c:f6:3f:8a:f4:bc:b1:36:e5:a4:c4:da:9c:06:d3:88:1a:
68:e8:36:73:0d:6d:76:03:d3:07:ae:9a:cb:f6:04:48:77:80:
2f:83:cf:91:6f:a5:ee:b4:0b:be:3c:ac:e1:06:e3:b6:3c:a7:
54:83:19:d4:d4:1b:fb:2d:5a:11:da:9d:70:c8:c8:cb:6a:bd:
75:54:07:c2:43:f9:6b:b8:02:b2:78:e7:3c:7b:b5:6e:ae:6c:
70:1c:34:5a:63:bc:d6:2b:40:14:c5:e3:e4:c8:93:97:94:58:
a7:2e:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:16:26 2024 by rpki-client on console-ams.rpki-client.org