Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/ceVIHhL5UBOLgah1tsgdH-gNPl4.roa
File: ceVIHhL5UBOLgah1tsgdH-gNPl4.roa (raw, json)
Hash identifier: tcDvF9spvUXU1sJ7P1b3iuPLxk5H2BIY+WNCcng6w2c=
Subject key identifier: 71:E5:48:1E:12:F9:50:13:8B:81:A8:75:B6:C8:1D:1F:E8:0D:3E:5E
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 018CC6B7953C7BD176677DDC2115DA06C235
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/ceVIHhL5UBOLgah1tsgdH-gNPl4.roa
Signing time: Mon 01 Jan 2024 20:29:29 +0000
ROA not before: Mon 01 Jan 2024 20:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8829
IP address blocks: 62.106.0.0/19 maxlen: 19
45.11.84.0/22 maxlen: 22
185.158.72.0/22 maxlen: 22
62.106.32.0/20 maxlen: 20
2a03:c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:95:3c:7b:d1:76:67:7d:dc:21:15:da:06:c2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71e5481e12f950138b81a875b6c81d1fe80d3e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:c4:22:50:14:e7:4c:50:79:1c:0a:46:82:
82:bc:09:8f:89:96:76:a1:90:89:20:0f:dc:21:d9:
f1:61:6f:ad:71:b2:fc:e3:88:43:e1:1f:79:3e:5e:
89:34:19:52:5c:08:3c:22:d2:2e:d5:2b:ae:eb:48:
05:b0:98:ba:76:59:0d:6f:97:ac:69:ba:d3:61:d5:
fd:f2:fc:51:01:12:9b:d6:3e:27:a3:7d:59:83:28:
da:b7:67:cf:eb:dc:ea:3f:05:49:dc:cc:56:0f:f1:
18:8e:60:ee:31:b0:2f:0e:15:f5:e9:e8:c6:fb:e5:
c2:7b:05:60:c5:bc:b2:d4:ef:98:45:6f:9f:9c:4e:
d3:01:14:f6:51:69:57:26:88:b2:96:c1:97:68:23:
31:d5:3c:3f:d0:ed:89:20:a5:c1:80:05:2c:c9:fa:
9a:e9:a7:95:cd:ca:6d:10:41:55:38:77:06:f3:2f:
36:1b:59:24:5a:8e:a8:08:12:ec:79:cd:0a:15:e0:
8a:58:12:b5:97:1a:9a:c2:db:9f:f3:a6:d4:8a:a7:
79:33:22:cf:02:1c:07:6e:d2:9b:1e:d2:a0:2f:2c:
a5:ec:d0:78:af:78:17:b6:ce:bb:9c:cd:72:b7:68:
0c:19:f0:7b:2b:07:fe:c0:0e:6a:dc:57:6c:29:18:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:48:1E:12:F9:50:13:8B:81:A8:75:B6:C8:1D:1F:E8:0D:3E:5E
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/ceVIHhL5UBOLgah1tsgdH-gNPl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.84.0/22
62.106.0.0-62.106.47.255
185.158.72.0/22
IPv6:
2a03:c80::/32
Signature Algorithm: sha256WithRSAEncryption
7a:1b:7a:96:0a:a6:9b:47:07:29:fd:42:30:e1:53:f5:33:15:
bf:8e:9b:ae:8f:a5:3e:99:74:e3:ba:69:67:80:c6:c6:14:df:
1a:8e:82:b7:27:44:66:2c:8d:4f:3d:e5:1d:49:2f:50:63:2a:
0b:23:aa:dd:13:ee:48:8c:7f:ed:72:96:9f:cd:ef:d0:9e:cb:
e6:92:41:72:fa:e6:19:19:04:64:6d:43:b7:f4:9c:7c:a9:12:
0b:59:04:0d:d6:ad:d8:99:62:41:e5:0e:92:b2:d6:73:f0:cb:
9a:2d:2d:12:43:0c:78:1e:be:45:3f:d4:3e:54:05:32:e6:d9:
d7:84:ae:f4:09:d5:3c:43:14:6a:d4:fc:a4:73:ad:bb:1a:f5:
6a:89:13:8e:10:08:cf:e4:dc:4a:e3:63:8e:e6:82:bb:54:3c:
56:cc:54:90:0b:43:7d:01:9c:9a:ac:0d:b5:77:54:dc:78:d4:
3a:3f:f5:f8:16:c3:f0:d5:ed:62:39:28:87:9e:0c:7b:1a:63:
38:3b:85:f4:a3:f3:c1:50:f1:60:94:95:97:d2:99:a0:89:8e:
6a:83:e3:81:48:ba:12:4b:89:b3:f2:44:2f:88:c5:35:d7:69:
ce:10:4b:40:2d:2e:8b:a3:52:36:52:6d:91:94:30:e6:15:f0:
5f:e5:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:36:14 2024 by rpki-client on console-ams.rpki-client.org