Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/weWLinUOXLlmuXczR5Tn_QsrG54.roa
File: weWLinUOXLlmuXczR5Tn_QsrG54.roa (raw, json)
Hash identifier: L0iCcj5HsVVjoH1y/QRkybmzLTG3Z+atXzDNoPxYDsc=
Subject key identifier: C1:E5:8B:8A:75:0E:5C:B9:66:B9:77:33:47:94:E7:FD:0B:2B:1B:9E
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 018CC2DAB6EC84094C6F4CBEA759C4D94A86
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/weWLinUOXLlmuXczR5Tn_QsrG54.roa
Signing time: Mon 01 Jan 2024 02:29:22 +0000
ROA not before: Mon 01 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197775
IP address blocks: 62.102.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b6:ec:84:09:4c:6f:4c:be:a7:59:c4:d9:4a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1e58b8a750e5cb966b977334794e7fd0b2b1b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:a6:20:9a:25:05:b8:06:1e:92:c7:38:7a:
d9:b5:18:1a:1d:0b:e9:fd:b4:99:6d:9c:b7:6f:dd:
11:1a:e3:df:a6:3e:f4:61:9e:63:76:9d:70:3e:3e:
cb:50:76:e9:fc:f0:2d:95:a9:e3:19:df:0b:9a:2f:
4e:f1:cd:88:94:18:c5:bd:dd:a4:21:91:7d:c2:67:
f9:5c:84:cb:a5:34:54:c7:30:98:df:19:b3:02:a9:
13:a9:a1:c8:0d:6c:d3:31:03:25:01:0d:5a:1b:d7:
2b:f5:90:e4:20:91:23:4a:03:93:29:bb:7c:c2:3a:
df:30:29:5a:98:e7:49:f7:7a:50:e7:a4:91:43:fe:
e6:f6:43:89:c6:1f:c3:bd:04:c6:60:ae:5d:3b:54:
ae:e2:c1:0c:9b:d0:35:f7:75:5e:06:a0:cb:9a:a8:
d4:0e:ac:f0:6f:5f:d7:54:21:87:93:48:14:2b:c9:
3e:05:de:71:4e:c7:12:d9:56:58:5d:78:a0:f1:88:
f0:d6:90:21:a3:9e:fd:87:16:a1:0c:1f:ee:78:39:
5a:93:d4:8c:57:a2:98:7b:e7:de:14:6e:fd:13:c3:
ec:c0:56:37:b3:49:d0:47:85:85:12:ab:c0:88:0b:
48:4a:06:5d:d9:ed:67:f8:06:51:39:78:f0:fd:50:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E5:8B:8A:75:0E:5C:B9:66:B9:77:33:47:94:E7:FD:0B:2B:1B:9E
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/weWLinUOXLlmuXczR5Tn_QsrG54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.150.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c1:28:4a:99:77:74:8b:4e:c8:d5:a2:e6:30:f2:57:46:6b:
6b:0e:c8:cf:ce:03:55:22:1a:fa:87:6a:78:e3:6c:5b:3b:4a:
a5:9b:da:36:b1:e3:b3:3f:b7:01:a1:04:8b:18:35:d2:87:c0:
6d:34:4b:5d:91:31:b8:1e:61:ee:9c:58:23:f8:0d:d4:e6:de:
b0:d8:9e:68:54:4d:27:a7:40:53:7a:49:0b:bf:75:16:8b:a7:
ef:d9:1c:ef:02:c7:4b:ab:d0:d0:79:c3:81:f1:e8:d9:c9:a8:
ba:8d:c3:1c:83:6a:f3:8b:70:8a:d4:d8:c6:05:9b:1c:cf:bd:
4b:09:78:af:39:56:6c:57:e0:c4:c9:55:20:13:66:db:e8:c5:
60:b0:c3:49:ef:14:5e:cf:97:04:77:39:39:47:8e:95:e9:f5:
17:b6:14:fa:c7:72:62:ce:30:c4:d5:15:45:f2:81:0d:b9:2d:
a5:83:9e:93:49:90:86:18:20:88:18:46:95:8d:9b:af:c6:20:
df:45:da:66:b2:f4:66:6d:db:e9:25:67:f0:51:55:f3:f7:2f:
fe:7d:9b:ab:f2:eb:64:ef:be:2e:d3:ed:1c:58:dc:49:4e:68:
07:f5:6f:8b:09:74:32:4b:25:e6:24:b9:39:bf:21:d9:d5:1f:
ed:f2:fc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:14 2024 by rpki-client on console-fra.rpki-client.org