Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/IdHwqWcnQnrjxhy6PBRIpPdgTrE.roa
File: IdHwqWcnQnrjxhy6PBRIpPdgTrE.roa (raw, json)
Hash identifier: l5H+ue/koHz9OnudwT56ONXwdZVxLqrdmDjmTrLDCbU=
Subject key identifier: 21:D1:F0:A9:67:27:42:7A:E3:C6:1C:BA:3C:14:48:A4:F7:60:4E:B1
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 018CC7933A85D78E3FDCDF721BED20091872
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/IdHwqWcnQnrjxhy6PBRIpPdgTrE.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 62.255.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3a:85:d7:8e:3f:dc:df:72:1b:ed:20:09:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21d1f0a96727427ae3c61cba3c1448a4f7604eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:13:01:83:7c:91:bc:6f:da:9d:67:f9:9b:
7f:8e:16:58:7f:dc:a2:b5:8d:1a:67:53:09:76:99:
a8:c0:e9:21:b1:92:45:fc:5d:85:c5:32:08:0b:de:
e6:90:dc:16:86:94:7b:a3:06:53:ed:b3:f6:09:ba:
42:30:00:04:20:94:d6:7d:58:0f:ac:65:dc:34:5e:
fb:3e:3b:90:7f:9a:74:40:16:78:3a:81:5e:93:c1:
37:6c:db:d7:06:fd:90:95:9e:cd:2f:31:ee:cf:1f:
80:cb:43:57:2f:4e:e7:98:88:ab:f6:93:7a:01:84:
11:df:11:57:f9:71:b5:13:9e:9a:96:d5:1f:a1:6f:
54:a3:78:83:38:9d:18:de:2e:bd:06:13:f9:22:2d:
87:a2:f9:98:bf:a1:1e:ce:a5:29:0f:78:80:89:2b:
d7:06:7f:6a:83:f6:73:58:d4:3d:c4:55:a4:9f:e1:
fe:b8:64:68:15:95:f1:9a:63:ec:49:ee:d6:14:c1:
18:c5:c8:c2:55:e9:b3:bf:28:c2:84:13:46:e8:6f:
a9:58:8d:4f:7c:6b:4d:49:9e:07:b7:cb:94:7c:f1:
73:04:e5:29:81:cd:30:c9:42:87:08:70:3e:85:6f:
f1:cc:b9:98:be:31:3a:f1:9a:77:24:9c:f1:de:ab:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D1:F0:A9:67:27:42:7A:E3:C6:1C:BA:3C:14:48:A4:F7:60:4E:B1
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/IdHwqWcnQnrjxhy6PBRIpPdgTrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.255.142.0/24
Signature Algorithm: sha256WithRSAEncryption
46:1c:55:55:18:44:0a:08:6a:08:8d:49:68:5e:6d:b6:9a:31:
79:ed:0f:9f:f6:0c:e7:44:30:d0:dd:81:80:2a:8c:21:30:6a:
54:25:86:1a:39:d4:f2:72:c2:81:1b:e1:f6:18:d9:9a:1a:7e:
86:ba:eb:cd:ed:2d:e5:1a:54:8a:e7:ff:48:3b:3d:c1:9e:ec:
e2:d5:30:9f:53:42:89:9b:d9:d8:45:50:d9:fd:8e:5a:7c:82:
c2:6f:3a:e6:8b:f5:2c:d1:64:2f:e1:5d:79:4a:3d:6c:b4:4a:
31:e1:77:6d:fb:b7:5b:2f:f6:61:06:d1:b9:13:90:86:74:ea:
5f:16:cb:7a:fc:df:6d:bc:13:5a:0b:ee:5a:dc:a0:b9:55:61:
d5:68:7c:f8:39:bc:b3:76:76:71:ac:94:fb:aa:15:51:b5:e2:
97:e0:1f:5e:0a:4f:ba:03:b6:67:9c:84:77:d8:4b:ad:6f:50:
71:77:0e:14:8d:07:dd:03:12:1f:29:2e:10:88:f9:f3:a5:00:
93:9e:ad:f3:4f:1e:6b:d5:7d:77:01:d0:b0:83:e8:a6:01:fa:
9d:6a:af:95:e2:51:2d:8f:53:8b:be:27:38:6c:26:3c:8b:d4:
f0:9c:04:d4:3f:49:9d:98:1a:f4:b4:0c:e4:47:37:1e:e1:de:
8a:cb:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 16:56:37 2024 by rpki-client on console-fra.rpki-client.org