Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/f1wnXB5KERqN1r03ElFYqIoFH18.roa
File: f1wnXB5KERqN1r03ElFYqIoFH18.roa (raw, json)
Hash identifier: CyIQIxlYTDKKlbgbCZo5m7ef73NWff7BgC1TtzjJff0=
Subject key identifier: 7F:5C:27:5C:1E:4A:11:1A:8D:D6:BD:37:12:51:58:A8:8A:05:1F:5F
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 018F28C04E4987ADF4AFB41E674C4463229E
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/f1wnXB5KERqN1r03ElFYqIoFH18.roa
Signing time: Mon 29 Apr 2024 07:27:22 +0000
ROA not before: Mon 29 Apr 2024 07:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21050
IP address blocks: 185.62.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:c0:4e:49:87:ad:f4:af:b4:1e:67:4c:44:63:22:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Apr 29 07:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f5c275c1e4a111a8dd6bd37125158a88a051f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:a8:43:0d:bb:8c:a6:f8:91:4f:79:0f:04:
44:2e:00:b1:67:76:50:76:66:c7:4f:09:33:eb:c5:
74:fe:7f:10:72:31:02:dd:41:41:73:e5:52:8a:55:
6a:03:4a:e1:65:40:8c:4a:f6:9d:fb:37:8b:59:2c:
e0:96:27:b9:90:0e:ac:6f:80:57:a2:2d:e1:66:8a:
fb:f2:b4:e3:8b:e7:ce:14:11:2d:bf:88:1f:97:61:
94:ff:c9:dd:fa:87:89:33:47:ff:b0:0f:ba:39:fe:
31:2e:19:bc:12:ed:3c:5c:42:2b:62:0e:4c:60:39:
bb:39:01:84:05:81:9a:ab:29:5d:0b:74:52:b0:69:
d1:b4:d1:17:86:57:7a:e5:bd:0d:86:7c:1d:f1:ac:
e1:de:3e:11:5f:58:98:82:1c:ae:1f:d8:0b:6f:af:
8a:09:c8:0c:2e:21:f2:10:85:27:94:68:17:03:0c:
69:69:77:46:01:49:f1:a0:92:03:59:6f:85:cf:89:
85:53:c7:1e:f2:42:4f:c0:a5:50:5a:13:8f:08:c8:
d9:01:8f:32:f7:0e:84:c3:c9:05:44:13:b1:6d:d0:
70:12:aa:8d:bb:9f:69:8d:9f:d4:0d:10:31:86:09:
b4:e0:76:9d:86:fb:31:f2:8d:fd:35:80:11:67:20:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:27:5C:1E:4A:11:1A:8D:D6:BD:37:12:51:58:A8:8A:05:1F:5F
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/f1wnXB5KERqN1r03ElFYqIoFH18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.230.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7f:ed:9c:55:ba:ab:12:71:69:cd:44:61:bb:1f:5f:70:25:
b2:ae:d3:1e:61:5f:6e:2a:46:56:b2:7b:b8:3f:16:93:f9:77:
a9:4c:4f:be:6a:7b:c8:7a:2b:2c:99:dc:fa:ac:7c:ad:b6:c0:
c3:db:86:f8:2b:70:61:0c:a8:96:23:e9:39:2b:fa:b7:09:57:
b5:5b:8a:e8:f1:61:01:c6:9b:48:0d:9d:01:67:56:54:b9:5a:
d3:bd:8b:a1:5e:4f:45:6b:71:07:c1:19:b4:56:59:56:83:1e:
7b:82:23:72:0d:5e:81:e8:05:39:54:d6:d0:60:e6:7f:3d:66:
90:4f:66:5a:96:46:fc:14:5c:2b:09:23:31:38:f4:b1:34:98:
20:56:80:db:33:f5:5e:78:c4:42:3c:28:0c:9a:4d:35:b3:fb:
ce:5e:8b:c8:6e:92:b0:e7:13:fc:2f:e1:3b:86:25:c1:fe:3a:
92:c4:c9:a8:bd:9e:27:44:b4:8b:3a:ea:fc:4b:c8:b3:3c:0f:
a1:f2:1b:9d:0a:ae:57:e9:97:0c:fa:d2:99:6c:0b:d7:35:45:
28:40:67:65:a5:a8:92:7f:fe:44:8a:7b:b9:fd:bb:b7:a7:ce:
ab:bd:99:db:70:b8:ea:cd:cf:28:d2:2b:28:fd:3d:fd:a7:6c:
6a:ef:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:44 2024 by rpki-client on console-fra.rpki-client.org