Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/PosfR2hYEPMXU7ohUvzBZODbZiQ.roa
File: PosfR2hYEPMXU7ohUvzBZODbZiQ.roa (raw, json)
Hash identifier: Hl3t4TjSPhe26sraTBUyUQo3WR2pH8zVRwTA1S7jVhM=
Subject key identifier: 3E:8B:1F:47:68:58:10:F3:17:53:BA:21:52:FC:C1:64:E0:DB:66:24
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB667D88D4B1A5708AC935F7430976
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/PosfR2hYEPMXU7ohUvzBZODbZiQ.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62091
IP address blocks: 192.162.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:66:7d:88:d4:b1:a5:70:8a:c9:35:f7:43:09:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e8b1f47685810f31753ba2152fcc164e0db6624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:fa:67:5b:5b:6d:84:35:67:3c:a4:5e:1a:
75:d0:bc:56:9d:3d:7d:e7:6d:be:9d:66:88:da:39:
f4:32:59:e5:0e:4b:80:d5:f9:1a:8e:a9:7b:51:c4:
cc:70:d3:c4:e0:64:ad:80:fd:ef:f4:aa:09:dc:2c:
5d:ec:55:20:59:01:ab:49:5e:56:d1:4a:c4:de:aa:
a9:be:e8:30:ee:8c:d5:75:52:0d:14:33:ac:7c:a0:
5f:54:44:75:b7:e0:56:36:b6:fd:28:04:47:90:e8:
f7:0d:ba:d0:55:ff:92:06:f1:22:f6:a8:cd:97:5a:
f5:44:69:e9:af:e2:dd:11:fb:2a:c4:d4:29:6e:03:
30:36:1d:00:a9:a6:01:4c:04:73:ca:af:18:d0:15:
78:e5:12:00:a1:ff:2b:23:96:64:39:3c:e7:67:04:
ea:d3:e7:69:0f:f7:ec:09:4d:e4:e4:41:fa:2f:ce:
94:43:27:bd:89:d2:64:d0:37:0c:02:ff:b0:18:2c:
d8:f8:11:c9:4b:39:8b:29:be:62:70:bd:2d:de:fe:
3b:59:4f:87:4a:8e:4f:41:da:91:12:a4:6a:d5:4b:
bc:cc:a9:4f:9e:28:b1:7b:2c:b1:bf:18:6b:d6:80:
06:12:49:d6:ec:bd:03:4f:13:74:eb:41:38:e0:37:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8B:1F:47:68:58:10:F3:17:53:BA:21:52:FC:C1:64:E0:DB:66:24
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/PosfR2hYEPMXU7ohUvzBZODbZiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.64.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f2:d1:11:df:0d:d5:93:8e:29:77:3a:c7:e1:e6:06:b7:0a:
13:5d:fc:16:8b:a3:87:c3:3b:c5:90:95:9a:74:fe:66:55:98:
13:da:cf:93:f1:3b:99:e8:bb:90:0f:85:41:2f:55:c1:97:35:
c3:c4:e7:d2:9f:15:90:8d:c9:3f:b0:d2:31:f1:77:0f:a7:8b:
e6:15:4d:ca:a0:f7:1a:f1:19:d3:61:7f:5c:91:24:28:7e:47:
8c:a3:65:94:9d:6e:23:e5:f0:66:7a:c8:6d:ab:9c:35:24:53:
9a:66:d9:dd:75:15:c5:e6:88:cf:c1:1f:af:40:3e:5a:c3:36:
4e:a5:e6:9d:85:59:8f:db:c8:f7:7a:9b:d3:42:f8:b8:c5:f6:
af:3f:60:31:db:10:21:3a:b2:e5:77:8e:54:55:e8:e3:5c:fd:
4f:a5:1f:91:3c:a9:d1:bd:92:6c:91:09:19:a1:b0:60:72:c4:
ce:de:df:d6:22:76:d5:80:67:43:a2:2f:b9:a7:af:fb:c7:f9:
a5:35:51:da:16:af:5b:f7:3e:77:c8:5c:5a:46:e7:2d:80:dc:
b8:48:f0:d8:9c:14:7a:1f:a0:5f:e0:98:e2:54:13:cf:f6:0c:
cf:22:ec:ba:a3:46:23:77:6f:15:92:bc:27:f1:b6:09:ac:8f:
6c:f5:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:29:41 2024 by rpki-client on console-ams.rpki-client.org