Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/0YvgdV7kQtHHdmc-4h3YiW9R20c.roa
File: 0YvgdV7kQtHHdmc-4h3YiW9R20c.roa (raw, json)
Hash identifier: wLpRw5s6ycldVhMDk04vJWgic/mgSE1gXQ/YPFFNwtE=
Subject key identifier: D1:8B:E0:75:5E:E4:42:D1:C7:76:67:3E:E2:1D:D8:89:6F:51:DB:47
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 018CC64AEF20F59FF265ED58F9D699D98812
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/0YvgdV7kQtHHdmc-4h3YiW9R20c.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8495
IP address blocks: 62.116.152.0/23 maxlen: 24
62.116.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ef:20:f5:9f:f2:65:ed:58:f9:d6:99:d9:88:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d18be0755ee442d1c776673ee21dd8896f51db47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:49:ac:c8:a2:cc:bb:14:d4:76:56:08:8d:
a6:6f:af:1b:d7:48:07:d3:fc:61:8d:a7:a8:40:72:
72:0b:89:16:16:88:83:32:20:cd:24:bd:d6:3b:d5:
d4:7a:e4:ea:9b:e0:62:ea:40:bb:26:33:62:31:4f:
63:07:95:27:2e:5a:e8:71:48:ef:ac:6a:5a:9d:88:
28:68:e5:5f:dc:ca:f0:bd:c6:2c:a8:30:92:62:8d:
a2:17:fd:c2:86:59:a3:66:07:4b:88:6a:11:a4:e0:
7e:14:49:aa:09:72:3a:0b:bc:51:e1:2e:59:65:30:
3e:e6:6b:6a:3a:05:d0:7b:b9:e5:56:c4:1d:63:d4:
aa:c1:02:21:a6:0f:7a:93:b0:97:2b:63:b6:43:f6:
57:d1:a8:9e:8c:2c:d3:3d:6f:1c:5e:53:39:c5:9a:
37:fd:7c:0f:46:a8:a9:19:f4:50:48:59:23:00:c5:
de:23:4c:ad:8f:b8:34:44:8b:d8:64:b6:f9:86:57:
ce:e2:13:ac:dc:33:1d:f9:80:2a:4f:73:83:d6:05:
6d:49:34:ab:ad:20:34:66:8d:5f:ce:cd:ee:73:44:
0b:f8:f5:a6:1b:8f:82:d6:64:73:3f:bc:6f:8e:c2:
0a:1f:2e:1e:0b:68:ee:84:36:17:ea:81:95:94:d2:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8B:E0:75:5E:E4:42:D1:C7:76:67:3E:E2:1D:D8:89:6F:51:DB:47
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/0YvgdV7kQtHHdmc-4h3YiW9R20c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.116.150.0-62.116.153.255
Signature Algorithm: sha256WithRSAEncryption
9b:cb:fd:4e:97:92:52:e0:0d:d7:27:50:69:d7:08:34:b0:fd:
75:46:13:de:4b:4d:d8:b9:cd:a6:86:ad:fb:34:e8:4b:2c:6f:
0d:20:73:c0:97:bb:4f:f2:ca:50:3c:9b:af:d7:c5:f3:37:b5:
cd:5d:a2:fd:29:e0:dd:99:d5:32:8d:f9:92:4a:8b:36:41:4d:
7a:c7:97:13:77:7a:a5:4a:05:e6:5b:e6:fa:6e:de:2b:82:03:
ac:2a:60:c9:6d:43:79:eb:95:28:d2:b2:ef:48:34:2d:b0:50:
4e:96:ac:9b:8d:da:3c:ff:48:6c:a8:1a:ad:c2:34:8d:2d:48:
72:1f:88:4d:88:2f:8f:0b:db:17:46:48:7d:4d:f4:c1:a3:75:
a8:42:d7:a9:f8:28:45:8f:fb:79:4d:34:39:13:ce:53:26:4c:
af:aa:3f:cf:b9:0f:eb:88:62:2a:c1:52:23:fa:51:31:5c:ad:
dd:70:ad:0f:44:32:4c:6b:bb:6c:51:a6:70:fa:d2:1f:a1:fe:
b3:2d:e5:c8:66:8d:7d:1d:f5:39:64:0b:73:61:47:5c:1c:27:
07:c2:17:18:96:73:4b:3d:3a:4c:f8:13:c7:ee:32:1d:a9:77:
90:0b:2a:54:59:57:ba:9e:2f:32:18:a9:4c:3b:ac:f1:3a:3a:
8f:ec:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:29:40 2024 by rpki-client on console-ams.rpki-client.org