Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/XSJN2Yajywvo_k7-2Jt0Q6e2kFw.roa
File: XSJN2Yajywvo_k7-2Jt0Q6e2kFw.roa (raw, json)
Hash identifier: IuoeKDFO/7/MAhRZbssmSrQQhsyhkyG56kgjGdM2qrg=
Subject key identifier: 5D:22:4D:D9:86:A3:CB:0B:E8:FE:4E:FE:D8:9B:74:43:A7:B6:90:5C
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 018EA28E66B0AAD8CD53AC441E7B05BE77E5
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/XSJN2Yajywvo_k7-2Jt0Q6e2kFw.roa
Signing time: Wed 03 Apr 2024 06:03:45 +0000
ROA not before: Wed 03 Apr 2024 06:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206718
IP address blocks: 62.4.108.0/24 maxlen: 24
62.4.116.0/24 maxlen: 24
62.4.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:8e:66:b0:aa:d8:cd:53:ac:44:1e:7b:05:be:77:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Apr 3 06:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d224dd986a3cb0be8fe4efed89b7443a7b6905c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:f3:5b:c8:a7:05:1e:82:af:82:5a:1c:e4:
c7:4f:12:a4:de:31:e3:3c:8b:e8:8a:96:da:63:45:
69:2c:8c:8f:0c:00:15:6d:6f:fe:44:0d:a8:cb:c3:
6c:a7:f5:1c:d9:1e:be:fd:c6:c7:a9:59:88:55:59:
f4:60:5b:ae:64:b7:a1:de:47:9f:cc:66:79:7a:32:
4d:a9:17:2d:ea:51:67:c1:37:45:2c:63:0e:91:e2:
37:48:d5:b8:9c:1e:c0:2a:fb:88:71:1e:96:b9:40:
45:7a:12:ca:8e:77:ba:5c:17:43:de:bb:1d:aa:91:
d9:9d:11:97:00:04:f6:b7:1f:e0:1a:c3:ee:3d:01:
0a:9a:da:92:2a:7f:31:75:af:c4:8f:2b:0c:3c:f2:
10:21:ce:fb:9a:62:83:ce:db:54:28:08:97:4c:69:
07:d1:b0:5a:5a:0f:b2:13:2f:70:fd:72:f4:a2:45:
07:b6:ae:d0:1c:8b:bf:dd:98:b2:38:14:25:3c:f6:
c2:10:1a:15:0c:f9:b9:1a:d7:2e:31:99:7c:1c:26:
48:f5:e3:18:86:49:ff:ce:ec:1f:56:f3:90:79:fd:
97:33:c2:72:7f:9a:1e:89:d9:53:91:9c:5c:8f:3c:
aa:61:a9:b7:d1:61:28:a4:ef:0d:85:37:e5:1d:05:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:4D:D9:86:A3:CB:0B:E8:FE:4E:FE:D8:9B:74:43:A7:B6:90:5C
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/XSJN2Yajywvo_k7-2Jt0Q6e2kFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.108.0/24
62.4.116.0/24
62.4.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:20:84:0b:cb:a8:01:96:16:37:1f:be:1c:3b:05:3a:5b:5d:
fc:1d:ba:cd:b1:44:9e:38:80:7b:1d:ed:f6:27:5d:86:ba:2a:
37:4a:81:9b:ac:bc:7a:e0:5e:3f:06:9a:15:2a:50:33:72:2c:
dc:a6:e1:8f:50:e5:6e:a4:41:c5:fe:54:e2:d7:b2:b7:c0:36:
f3:22:5c:8d:45:e0:72:1c:68:7e:e5:b8:23:77:19:b8:bb:ae:
93:8b:aa:31:74:e3:0a:f9:83:d3:b8:11:af:75:2c:cb:f8:59:
fd:08:79:f2:3c:ce:06:23:1b:cb:0c:ef:4f:82:9f:e1:5f:fe:
6c:1d:3e:9c:00:21:36:00:e4:b7:1e:76:ee:f2:21:4d:89:81:
f3:bc:ff:a9:12:b9:c1:6e:35:06:7a:bb:e8:b1:6c:1e:f3:aa:
e5:b6:83:47:f5:29:4d:18:73:6a:f4:3e:41:e1:a1:b3:4a:ce:
3a:1e:aa:75:cb:9b:91:13:48:83:b6:1a:ae:b1:af:e4:2d:4c:
cc:e7:a4:10:35:1b:e7:8c:ef:af:4e:98:aa:28:20:be:08:03:
00:e5:54:bc:4b:2c:3a:0d:ef:f2:eb:75:8b:93:be:5d:58:24:
e7:9c:c3:04:58:11:39:08:53:bd:bf:05:27:e9:08:b2:51:6e:
10:cf:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:08:27 2024 by rpki-client on console-ams.rpki-client.org