Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/9c-D3WhQDn-klI6LxNmw7txS48c.roa
File: 9c-D3WhQDn-klI6LxNmw7txS48c.roa (raw, json)
Hash identifier: 3VAdmlKRnmVOpQFA6sd4nAvkmFuc9Lu01I12AARmIV4=
Subject key identifier: F5:CF:83:DD:68:50:0E:7F:A4:94:8E:8B:C4:D9:B0:EE:DC:52:E3:C7
Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial: 018CC9B88BB711DEABF751F78591125EF852
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/9c-D3WhQDn-klI6LxNmw7txS48c.roa
Signing time: Tue 02 Jan 2024 10:29:23 +0000
ROA not before: Tue 02 Jan 2024 10:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196956
IP address blocks: 109.71.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:8b:b7:11:de:ab:f7:51:f7:85:91:12:5e:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
Validity
Not Before: Jan 2 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5cf83dd68500e7fa4948e8bc4d9b0eedc52e3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:e6:9a:e0:4a:dc:a2:00:9d:8e:c0:1f:9d:
39:6d:69:e2:51:d9:b2:ae:27:e6:81:d9:25:f9:af:
9c:80:d8:e5:16:00:24:97:65:d3:e9:ad:71:40:15:
f3:67:3f:ad:e4:84:3a:0c:42:fb:73:f0:eb:8f:20:
e6:c1:b1:e3:ce:46:1e:a0:2f:0d:79:22:43:5a:aa:
b1:2b:c1:c8:be:20:2d:bb:88:55:cc:8a:06:67:cb:
b1:60:91:61:32:8a:d2:65:78:38:8d:62:17:8c:00:
97:be:31:4d:e1:60:70:0a:6c:4e:8d:6d:ab:ed:e3:
c3:8e:77:8d:84:91:f3:75:e7:01:10:6f:99:5a:28:
ea:ad:62:dc:00:55:9b:ab:3a:79:fb:ad:0d:4f:c0:
89:1c:61:59:96:91:63:c1:a8:64:94:4f:b2:d3:ac:
7e:0c:7c:0a:43:48:4a:7b:7f:b6:cd:b0:f7:07:cc:
92:bf:33:55:a5:a7:76:f0:69:56:b2:1b:34:8b:9a:
a5:1f:5c:9c:84:7f:75:c7:4b:02:2f:9e:80:bc:7f:
9a:bd:20:5f:03:74:44:00:94:0d:ee:fb:9e:ee:05:
c0:aa:11:f6:f0:c0:83:e5:bb:00:69:97:fb:8d:e1:
c7:37:8f:49:65:b6:cd:46:80:c1:7f:66:80:7e:1f:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:83:DD:68:50:0E:7F:A4:94:8E:8B:C4:D9:B0:EE:DC:52:E3:C7
X509v3 Authority Key Identifier:
keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/9c-D3WhQDn-klI6LxNmw7txS48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.232.0/21
Signature Algorithm: sha256WithRSAEncryption
25:55:a1:34:36:7e:44:ae:3d:ba:16:14:e6:a5:61:85:86:1c:
c9:5f:be:1c:82:b0:48:20:89:99:e5:55:7f:dc:e3:d7:9e:06:
a0:d3:1a:9a:f6:3c:2b:02:04:46:da:65:16:5c:c4:e2:00:22:
a9:33:f7:5c:57:9e:1b:c1:82:f1:6e:51:44:d3:1e:89:a5:6a:
c9:c8:e8:9a:e2:e7:83:f5:2f:72:e5:e0:d9:b0:81:31:6f:01:
b1:03:8e:62:df:8f:51:f2:1c:d4:98:70:07:48:33:1d:1a:5b:
83:30:e9:be:13:80:e0:1f:a8:43:e1:d5:2f:ed:f5:79:91:2d:
c2:fb:b3:da:2e:79:9a:f7:c8:8f:a8:26:0a:c2:f5:9d:23:57:
d2:3d:d8:5f:09:58:21:94:18:51:68:cc:fc:a5:7e:17:fa:c0:
6f:28:8e:b4:fb:de:bf:12:6d:6d:39:ff:13:7c:92:4a:a2:81:
5b:50:b6:86:d1:90:2e:94:dc:f6:dd:7c:c0:96:f7:e3:37:6d:
c1:50:ca:5c:68:ab:32:5e:1d:bb:c6:5a:d3:88:c3:0a:ad:51:
83:1c:7b:94:1e:cb:f9:43:d5:0b:d0:8c:22:0b:75:ac:4d:a9:
73:f8:92:4f:89:72:34:69:a6:ac:3d:50:89:db:ad:ba:55:cc:
f3:ad:86:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:53:03 2024 by rpki-client on console-fra.rpki-client.org