Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/1-U2H3s0T9sHETNkKUrLvGBp5aOI.roa
File: 1-U2H3s0T9sHETNkKUrLvGBp5aOI.roa (raw, json)
Hash identifier: fpaySC9/fbYR5AKJYHZUTpCj9BD1XHQl0MjLaQ3FfQ0=
Subject key identifier: F9:4D:87:DE:CD:13:F6:C1:C4:4C:D9:0A:52:B2:EF:18:1A:79:68:E2
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 01934E202740FE61C149400CAAD49870A8BB
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/1-U2H3s0T9sHETNkKUrLvGBp5aOI.roa
Signing time: Thu 21 Nov 2024 09:49:10 +0000
ROA not before: Thu 21 Nov 2024 09:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25530
IP address blocks: 62.113.32.0/23 maxlen: 24
62.113.33.0/24 maxlen: 24
62.113.34.0/23 maxlen: 23
62.113.36.0/23 maxlen: 23
62.113.38.0/24 maxlen: 24
62.113.40.0/21 maxlen: 24
62.113.45.0/24 maxlen: 24
62.113.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:20:27:40:fe:61:c1:49:40:0c:aa:d4:98:70:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Nov 21 09:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f94d87decd13f6c1c44cd90a52b2ef181a7968e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:06:7f:43:8d:3b:4c:11:36:2a:6a:d1:0e:
40:91:ca:7b:d1:b4:60:5e:43:96:59:3e:11:b5:c3:
a1:cd:e0:46:d7:4e:41:ba:2b:d1:74:d1:b5:92:fd:
14:6c:8f:42:8d:3a:d7:c8:4a:ef:db:08:8a:7e:08:
78:03:66:fc:15:b3:01:c9:40:09:f8:75:2e:e6:20:
9b:6e:d4:44:e7:1f:e1:3f:dc:1e:f5:97:56:b6:97:
a2:04:47:0b:70:24:71:3e:e5:a1:9b:55:20:a1:a3:
50:90:b1:b9:14:77:97:51:da:96:1b:85:67:bb:0e:
8d:8c:ee:00:d5:bb:e2:d5:ab:56:1a:55:e3:4a:00:
aa:d9:a7:6f:00:7c:9a:cf:0a:a7:c2:60:a8:0f:d8:
33:15:08:07:23:7f:4c:88:b4:b8:08:ee:80:8f:e8:
96:0b:bb:65:23:fe:73:be:1f:a0:5f:35:91:f8:70:
dd:11:72:6f:9f:da:5d:88:a4:72:68:70:e4:a8:36:
87:95:29:7c:37:57:01:9a:fe:f7:3d:c9:0d:5d:fb:
1f:0d:18:de:e5:5b:1c:0f:1a:1a:d3:46:93:f6:3f:
b9:19:c2:ee:55:9b:69:22:de:49:20:af:34:b9:21:
85:0f:8d:1c:7b:2d:ee:8d:35:51:48:84:85:45:87:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4D:87:DE:CD:13:F6:C1:C4:4C:D9:0A:52:B2:EF:18:1A:79:68:E2
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/1-U2H3s0T9sHETNkKUrLvGBp5aOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0-62.113.38.255
62.113.40.0-62.113.55.255
Signature Algorithm: sha256WithRSAEncryption
b6:7f:9c:64:52:58:22:ee:7e:eb:ba:8f:3a:44:1e:33:96:35:
c5:07:45:5f:24:57:22:81:f4:67:f5:3b:88:0e:76:5a:95:8d:
28:90:c5:83:d5:c3:4b:80:68:54:69:8a:f6:69:72:18:3a:59:
c1:a7:cb:7e:35:51:6d:f7:36:33:93:e0:fc:16:ca:0f:f3:a8:
fa:13:39:4a:3a:c5:a7:e4:13:65:c9:e1:d4:72:0c:5a:dc:64:
d0:b2:1b:a8:e7:16:3a:18:a3:9f:ca:50:9c:8f:59:20:ea:71:
a7:e3:2f:de:26:3d:0c:67:78:fb:f3:59:c1:24:6e:80:d8:a6:
94:bf:95:32:89:12:b9:3f:56:c8:24:32:40:ee:21:f7:77:7c:
0a:02:91:b3:3d:74:ab:fa:ee:dc:b1:4c:6b:ee:b3:4f:7b:74:
6e:e0:d9:85:0a:f0:52:0c:05:07:0e:2e:e9:90:a5:65:de:fd:
85:74:90:59:74:eb:04:18:68:1b:bf:95:07:62:b2:45:d6:eb:
57:0a:65:03:4f:bf:db:5d:40:d9:46:2e:76:87:15:90:e1:02:
20:e2:53:35:8e:8a:42:44:09:3c:77:3f:9b:ad:a8:92:6a:ba:
2d:07:22:f6:a0:ec:08:12:4f:31:2d:31:5a:a8:da:db:3a:2b:
bb:6f:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:53 2024 by rpki-client on console-fra.rpki-client.org