Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/qm4XMXsErGpremVmdibloxuExA4.roa
File: qm4XMXsErGpremVmdibloxuExA4.roa (raw, json)
Hash identifier: DlyR1M4FJXXfC5CLlGBHR50SLmMIUCTEJCrnSj8nslM=
Subject key identifier: AA:6E:17:31:7B:04:AC:6A:6B:7A:65:66:76:26:E5:A3:1B:84:C4:0E
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 018DF486BF904EA2710470D0DF9993651295
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/qm4XMXsErGpremVmdibloxuExA4.roa
Signing time: Thu 29 Feb 2024 11:01:27 +0000
ROA not before: Thu 29 Feb 2024 11:01:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3225
IP address blocks: 185.62.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:86:bf:90:4e:a2:71:04:70:d0:df:99:93:65:12:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Feb 29 11:01:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa6e17317b04ac6a6b7a65667626e5a31b84c40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:71:7c:1c:32:4d:98:6a:0e:55:68:b9:40:
0c:5e:e3:a7:4d:ef:e1:7b:9c:35:12:37:91:14:be:
44:70:20:40:70:19:44:14:62:29:2b:d8:49:ee:51:
bf:81:46:81:76:b2:4b:15:d3:6f:8a:bb:6b:98:11:
4d:91:6c:e9:a7:a8:63:73:e9:5a:c9:3d:e4:0b:bb:
de:6d:42:17:7a:ae:f2:77:07:2d:4f:2d:95:06:8d:
22:9f:ad:d0:71:98:d5:78:cd:60:fa:df:5d:e9:1c:
c1:b7:0d:4c:96:1c:43:d9:4a:ed:5a:93:fd:13:9a:
db:95:9b:0d:5c:e4:41:ec:5b:4a:ef:af:07:59:de:
18:a2:5a:3c:ff:79:35:9b:9f:ee:49:40:ef:e3:72:
34:95:42:a5:9e:d7:1a:04:a2:ca:ed:ac:4b:60:da:
a9:08:c9:e8:4f:a5:0c:30:f1:e3:ef:a9:a7:db:10:
7c:a1:ce:65:f6:b1:a2:63:06:56:64:60:40:c2:d8:
e9:57:de:9d:37:b1:d3:60:ba:59:ce:c7:db:9f:a8:
a5:11:59:0c:fb:3c:3f:b4:47:8b:9d:cc:68:bd:96:
a6:6e:b9:56:5f:90:dc:35:c5:ed:f1:6c:c2:30:08:
b3:45:0f:7e:13:59:83:36:20:1d:59:14:d6:c4:3d:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:17:31:7B:04:AC:6A:6B:7A:65:66:76:26:E5:A3:1B:84:C4:0E
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/qm4XMXsErGpremVmdibloxuExA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.230.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0c:64:ee:4b:e7:6e:92:5b:f8:2e:21:de:af:8a:3d:68:0e:
3e:f9:9c:84:d4:fa:70:ff:08:4c:7a:4f:ef:26:84:8d:60:72:
e2:81:65:76:a5:91:03:c1:59:46:97:ec:b8:f5:40:32:91:02:
21:0d:af:25:d2:db:6f:26:af:08:3e:a0:d6:d4:8f:49:5b:78:
90:8b:1f:f1:82:d7:1d:37:75:5a:5f:d4:0c:c1:5d:ae:d0:4f:
15:0c:dd:38:0f:8b:3b:c3:07:89:cd:c3:2a:b6:89:bb:55:eb:
eb:ae:4a:08:aa:bb:81:c0:fc:51:25:b2:ee:de:7c:0e:c8:f9:
6b:c8:af:8f:1a:bd:ae:ee:6a:6d:e4:23:fc:63:05:7b:85:61:
f7:20:9e:db:9a:f4:1d:a6:8b:1c:6c:90:02:8f:6a:d9:51:34:
1b:42:b8:73:00:38:f5:96:99:e5:16:f7:2d:ef:fb:13:3b:a7:
8d:09:2f:2d:a2:7e:9e:59:47:2f:47:ad:ab:6e:77:f3:d9:42:
b3:89:47:37:94:f7:29:6c:4a:58:a1:2d:45:b3:23:a8:28:1d:
f2:7c:6c:84:e8:a9:24:21:c7:ee:fe:49:b6:08:73:d3:ab:95:
c2:99:93:a7:02:4a:23:29:7a:44:b9:cb:54:15:21:3d:c2:66:
c2:7a:81:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:23:47 2024 by rpki-client on console-ams.rpki-client.org