Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/T9GZsNWTiUG1ULcq6sYJBGikaz4.roa
File: T9GZsNWTiUG1ULcq6sYJBGikaz4.roa (raw, json)
Hash identifier: w7ShGAy2/gXZef9xBqiyA+Jyz2jj73RZ4vY/D/HtgQY=
Subject key identifier: 4F:D1:99:B0:D5:93:89:41:B5:50:B7:2A:EA:C6:09:04:68:A4:6B:3E
Certificate issuer: /CN=d0438c15bc192368b10720a66a79410ae787724b
Certificate serial: 018CC94ACC977FE98D9C4DB44F866E0EB8C1
Authority key identifier: D0:43:8C:15:BC:19:23:68:B1:07:20:A6:6A:79:41:0A:E7:87:72:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/T9GZsNWTiUG1ULcq6sYJBGikaz4.roa
Signing time: Tue 02 Jan 2024 08:29:31 +0000
ROA not before: Tue 02 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:cc:97:7f:e9:8d:9c:4d:b4:4f:86:6e:0e:b8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0438c15bc192368b10720a66a79410ae787724b
Validity
Not Before: Jan 2 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd199b0d5938941b550b72aeac6090468a46b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:58:17:88:07:9e:68:a3:a4:1a:e6:9c:23:
0d:d1:26:d3:48:3c:af:a6:4d:58:c5:a7:63:d3:75:
5c:c6:d0:85:13:81:b9:c2:b2:34:f5:49:91:ed:e3:
3b:6c:95:d8:50:41:7b:32:48:8c:9c:cd:11:86:2f:
fd:a2:9c:5b:73:de:7a:fe:f3:df:70:85:9e:be:19:
97:7c:3d:82:af:85:9f:e4:ce:8c:18:50:59:37:4d:
08:19:38:d3:db:f3:d1:1d:6b:01:41:92:ba:c9:11:
e4:4c:3e:1f:ba:d6:a7:a9:43:2f:15:40:f9:85:13:
77:62:18:e8:cd:d5:68:73:e3:72:01:53:2d:18:f9:
b4:0b:93:54:fc:a1:a4:86:b1:f0:c9:bf:8a:8b:6c:
46:a1:8c:24:92:8a:6f:ae:29:53:8e:03:8a:79:f5:
39:27:33:24:fc:92:9f:9b:c2:e2:b4:70:27:f1:14:
d1:c6:51:8f:56:84:ac:70:6b:7f:d8:98:3d:fe:6b:
c3:f7:8d:bf:d2:e4:a0:27:94:bf:e0:bc:38:7d:56:
a5:01:4d:14:78:7a:b6:7f:9d:36:2e:e2:07:92:20:
6b:0c:e4:b1:15:83:8c:ed:3b:b4:25:68:4a:ea:21:
3f:cb:1e:9e:27:83:d3:48:cd:cf:a1:53:5e:88:bd:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:99:B0:D5:93:89:41:B5:50:B7:2A:EA:C6:09:04:68:A4:6B:3E
X509v3 Authority Key Identifier:
keyid:D0:43:8C:15:BC:19:23:68:B1:07:20:A6:6A:79:41:0A:E7:87:72:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/T9GZsNWTiUG1ULcq6sYJBGikaz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.72.0/24
Signature Algorithm: sha256WithRSAEncryption
58:98:31:7b:f6:40:37:14:df:0f:b5:f7:21:4e:0f:eb:79:e2:
65:36:49:82:ce:0f:e7:d0:a0:b4:3b:4c:98:c3:76:70:41:4c:
e9:63:9c:25:f9:20:4b:b9:3e:25:c6:d9:80:b9:57:a6:09:db:
07:9c:c7:71:8a:c4:1b:2a:87:01:94:3e:7f:dd:9c:df:0b:54:
37:bd:e4:ea:64:79:00:d1:76:bb:fc:2b:22:c9:79:a0:c9:cf:
2c:38:28:4f:9d:e0:5c:99:85:0e:d2:69:bf:08:96:66:0f:3e:
12:c0:8e:ef:97:58:3b:c2:c6:18:26:75:83:45:4b:c3:f2:0a:
31:0b:30:7a:4a:7e:19:58:cc:64:35:08:c8:90:1d:3d:18:cc:
f4:27:30:c1:3d:fe:37:61:1c:62:0d:0d:14:9d:4a:a5:e7:63:
c4:01:8e:91:95:79:60:0c:04:07:26:4a:4c:82:39:52:1a:fc:
3e:81:82:57:3a:99:4c:4f:22:a1:ff:1d:a5:e4:cd:dd:17:a0:
e1:47:5b:da:8d:61:4e:5b:7f:e2:b5:26:58:fc:a2:9b:42:24:
94:07:60:d1:8b:37:ed:6a:67:ef:cc:b3:c5:59:f3:0a:56:1e:
d6:6c:27:fe:b3:1f:42:95:64:73:60:68:e5:21:dc:6e:f2:2e:
52:fe:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:51:03 2024 by rpki-client on console-ams.rpki-client.org