Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/Veed7dXpGrwofh0EisgTMSFLiJA.roa
File: Veed7dXpGrwofh0EisgTMSFLiJA.roa (raw, json)
Hash identifier: NRWS36ZC81+Ibj9b5rXheOabzS9qCiKttzBn9fhTFI8=
Subject key identifier: 55:E7:9D:ED:D5:E9:1A:BC:28:7E:1D:04:8A:C8:13:31:21:4B:88:90
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 018CC56EC5B12E764E61526B9EC073662CEF
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/Veed7dXpGrwofh0EisgTMSFLiJA.roa
Signing time: Mon 01 Jan 2024 14:30:20 +0000
ROA not before: Mon 01 Jan 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206492
IP address blocks: 62.65.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c5:b1:2e:76:4e:61:52:6b:9e:c0:73:66:2c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55e79dedd5e91abc287e1d048ac81331214b8890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:f7:48:2d:9c:26:39:8a:4c:6c:1a:1b:19:
43:04:d4:5d:e4:35:47:ff:eb:c3:b4:f6:52:ef:67:
04:52:1d:92:ac:89:d9:a2:a3:2f:26:98:2e:73:44:
c9:b6:b3:a0:f0:f3:72:8c:f2:16:13:74:63:ef:bf:
2c:c6:63:2d:df:ec:fa:52:6a:f0:6a:db:90:e9:2b:
5b:46:18:0b:c7:f0:84:4d:3c:41:31:98:83:6f:d8:
d2:6b:c4:76:74:d8:0d:6b:a4:bb:ce:18:6e:21:25:
e9:fe:90:84:b7:e5:c3:11:5d:7d:30:f7:7e:5a:35:
b4:ce:19:86:b8:3c:6e:0d:fa:75:de:bd:9e:13:01:
2f:12:3b:eb:b6:c7:17:6b:98:89:35:ce:7d:bd:73:
65:c4:9f:49:b4:8f:f7:f3:3b:ca:82:90:51:78:9b:
8a:60:36:44:7c:86:12:dc:3a:d3:72:fe:7c:9d:4b:
9f:e7:17:01:0a:c5:91:37:aa:32:7f:7a:3a:26:38:
d4:ea:91:9d:da:23:12:7a:07:d0:1d:ac:15:2a:2a:
ed:3c:c7:59:5d:28:89:db:d2:1e:63:cc:0e:8b:82:
a0:1f:49:93:23:2d:50:f0:96:56:e6:32:02:54:08:
02:00:ae:08:bc:86:2d:f6:f2:66:6b:9b:21:3a:cc:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E7:9D:ED:D5:E9:1A:BC:28:7E:1D:04:8A:C8:13:31:21:4B:88:90
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/Veed7dXpGrwofh0EisgTMSFLiJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6d:86:cb:fb:f4:d6:ae:a4:9c:0a:c8:b8:f0:a9:c7:89:76:
56:1b:e1:b8:4c:fe:f6:29:df:fd:56:c8:9e:5d:24:99:71:7f:
90:da:1c:1a:91:88:99:20:41:13:32:fe:c6:7c:0e:b5:00:39:
5b:be:62:88:1d:0c:2a:bf:42:e8:82:cb:10:d7:f9:b1:8d:3f:
77:4b:cb:ba:76:f5:5a:0e:00:ca:1f:61:9a:aa:fd:8c:80:6d:
56:1b:25:ea:2f:78:af:7c:fe:93:2b:dc:97:ff:02:1f:b3:fe:
e0:56:4d:bf:d4:9e:83:9e:c8:7c:15:9b:af:4d:3a:3b:b4:b3:
31:d7:23:e5:5d:74:1e:f1:76:85:96:70:b7:55:84:3d:97:2f:
84:4d:af:14:11:6f:dc:aa:7e:d6:b6:da:a3:30:fd:5e:48:6a:
a7:90:cb:29:6c:07:c3:ea:e6:cd:df:e2:a8:01:1b:74:e9:1b:
be:aa:d1:da:f1:bb:39:59:43:d0:52:37:20:ee:43:2e:2f:b8:
41:1a:ef:d8:83:48:b8:c5:07:c8:49:df:90:61:74:db:21:36:
4a:d8:57:45:82:16:8c:a5:7f:f2:a5:70:64:ac:15:32:10:61:
31:db:ad:68:fb:0a:47:78:80:15:60:b5:02:f8:22:e5:39:af:
de:65:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:56:58 2024 by rpki-client on console-ams.rpki-client.org