Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/RC7Wuvz2IGB_0fIRWRYfFF5_KYo.roa
File: RC7Wuvz2IGB_0fIRWRYfFF5_KYo.roa (raw, json)
Hash identifier: u9YRzqFr5sm6A9mJ58PVG9HhJPTbyx57rfjGAdzBi+Q=
Subject key identifier: 44:2E:D6:BA:FC:F6:20:60:7F:D1:F2:11:59:16:1F:14:5E:7F:29:8A
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 019301E58DA63B939F1496C9C85391D4776D
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/RC7Wuvz2IGB_0fIRWRYfFF5_KYo.roa
Signing time: Wed 06 Nov 2024 14:34:01 +0000
ROA not before: Wed 06 Nov 2024 14:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28760
IP address blocks: 62.249.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:e5:8d:a6:3b:93:9f:14:96:c9:c8:53:91:d4:77:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Nov 6 14:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=442ed6bafcf620607fd1f21159161f145e7f298a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:d6:c9:bd:e2:50:93:ac:7f:fe:8d:98:6e:
03:ff:c0:94:f8:f2:da:26:58:06:1e:29:67:5a:bd:
30:d3:7d:76:0f:52:01:b2:ff:db:95:19:7b:9c:b1:
68:cd:38:06:0a:94:07:e1:48:b6:b6:1f:0a:b5:b0:
c1:4a:64:49:26:10:62:24:1b:b7:d7:1d:63:b5:ac:
b4:b7:61:16:7a:4b:31:b8:e5:c1:fb:5a:13:18:1a:
e5:69:1f:5d:8c:8f:8a:ee:18:12:32:b6:de:d7:ef:
6b:f6:af:cd:17:19:5d:04:e0:fd:44:ad:67:15:1f:
79:5b:ce:25:16:1b:da:c3:4c:44:c8:54:03:96:bd:
da:e8:8e:95:64:b3:ed:8b:5a:88:c7:ff:76:6e:53:
f1:68:3a:97:c1:ee:1b:88:12:bf:75:46:a5:5e:8d:
df:a4:ac:ab:c5:e2:fc:cf:d5:f7:30:d7:26:e6:5b:
71:ed:c3:36:3e:a1:c7:00:35:47:cb:b6:c2:06:fb:
6f:49:3f:2c:83:e0:16:f4:0c:20:b7:22:ed:97:2c:
36:96:41:6a:2e:b1:71:0c:95:05:a7:88:30:f2:3e:
4a:8b:4a:ef:3a:0c:17:90:70:ea:3b:70:1e:21:ac:
4c:e8:14:c7:fe:47:a1:21:0c:42:b6:d8:d2:67:da:
fc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2E:D6:BA:FC:F6:20:60:7F:D1:F2:11:59:16:1F:14:5E:7F:29:8A
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/RC7Wuvz2IGB_0fIRWRYfFF5_KYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.249.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:e8:b3:ce:5f:7a:26:a7:fd:0b:47:0b:8e:c8:16:31:40:fb:
48:66:e9:b1:cc:61:07:b5:1d:9c:6e:48:53:16:f8:f7:91:7d:
56:b8:19:3e:40:bb:66:ad:c8:40:ed:f9:9f:f3:ee:3b:4e:17:
af:07:0f:36:ff:53:85:85:4e:ab:de:9a:15:f2:7f:95:57:fe:
a7:5c:ba:51:3e:ca:1d:ad:62:cf:6e:56:cc:95:89:a1:12:37:
14:e3:a2:45:92:f6:44:a8:8e:72:fd:37:1d:55:55:c7:a9:88:
45:58:70:10:c2:39:b0:b8:f9:39:5c:e5:7c:26:57:ec:1c:8e:
d5:1d:2d:29:b4:fd:f1:33:a9:eb:b3:e6:39:f8:72:04:61:52:
2d:04:fa:99:4f:35:34:8b:4e:ec:5b:ed:66:3f:94:51:73:29:
3b:ed:2b:44:af:d7:cd:c9:3e:0c:6c:0a:84:d9:68:95:9b:39:
a6:cc:02:74:17:1f:b4:fc:2d:ab:23:df:49:65:64:95:b9:a3:
8e:c1:ac:0d:bd:2a:5b:1d:1c:13:b4:2f:02:34:56:e3:3d:64:
94:ee:f8:1d:15:5e:4d:d7:0b:1a:92:de:9e:fc:aa:b6:95:6e:
d5:e4:49:62:e6:7f:85:b2:5d:ae:0b:bc:3f:f1:51:71:c4:ee:
c3:34:ac:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:26 2024 by rpki-client on console-ams.rpki-client.org