Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wrn2RehNrkqV_6maxDvT4oitxrg.roa
File: wrn2RehNrkqV_6maxDvT4oitxrg.roa (raw, json)
Hash identifier: FcciB3hwnEV5sgk86xY1cSknroBRuhpKf1kUmtTWnBo=
Subject key identifier: C2:B9:F6:45:E8:4D:AE:4A:95:FF:A9:9A:C4:3B:D3:E2:88:AD:C6:B8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C48E0AD2038562C338B93C66DE15
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wrn2RehNrkqV_6maxDvT4oitxrg.roa
Signing time: Tue 02 Jan 2024 12:33:04 +0000
ROA not before: Tue 02 Jan 2024 12:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57391
IP address blocks: 62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c4:8e:0a:d2:03:85:62:c3:38:b9:3c:66:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2b9f645e84dae4a95ffa99ac43bd3e288adc6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:5b:e7:13:16:69:d7:fa:e3:27:79:20:d4:
1a:30:c2:1d:ab:34:d6:a7:95:98:d2:0f:d0:34:8a:
af:77:5b:ec:44:d1:c0:c3:63:48:3b:0e:f9:61:88:
dd:8c:ad:88:81:7e:68:bd:d6:3d:59:c7:3a:fb:75:
83:b1:68:78:50:b4:05:da:7f:e5:c5:80:79:de:5d:
03:77:dc:59:55:7f:08:c5:5b:b6:c0:a4:29:84:be:
85:49:3d:66:60:9b:a0:47:79:79:bd:b4:df:ee:60:
52:cf:39:8b:c1:9c:16:19:a0:d3:5c:5f:f4:8d:ff:
37:38:df:1e:65:ea:5e:94:bb:20:2e:c9:9a:98:5c:
4d:bb:2c:9c:0c:53:63:1c:f0:0a:91:cb:01:af:ff:
b8:86:54:c1:ba:e6:7b:ad:a7:68:bc:ab:b5:c5:11:
98:72:bc:a2:89:4f:a6:1f:a7:8f:57:4b:cf:79:32:
3e:6d:0b:6f:c8:f5:92:09:c8:2d:e0:1a:29:12:d2:
c2:b8:ea:4c:3f:b4:a9:cb:57:2b:5d:d6:48:c5:45:
3d:de:15:21:bb:88:da:40:5a:70:90:0b:2f:da:df:
4b:cc:9c:43:11:f0:ca:20:c8:15:ca:19:f5:bd:3c:
9f:4b:82:e5:f5:41:e7:dd:d3:94:a4:f8:c2:7c:93:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B9:F6:45:E8:4D:AE:4A:95:FF:A9:9A:C4:3B:D3:E2:88:AD:C6:B8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wrn2RehNrkqV_6maxDvT4oitxrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.172.0-62.60.179.255
Signature Algorithm: sha256WithRSAEncryption
52:8d:5f:90:8e:3f:e3:35:d3:31:f5:1b:2d:de:7e:af:7b:70:
25:66:14:fa:8c:cd:70:de:28:14:82:41:d4:fa:ea:c4:8c:ac:
32:21:c0:ba:e6:dd:aa:0f:00:41:58:cf:1f:95:c0:cf:09:45:
ab:99:da:2f:1c:f3:c0:7c:ee:fd:79:7b:bd:e1:c1:15:77:2c:
4c:f2:38:9b:0f:ca:0a:c7:74:ef:f5:80:89:a7:50:9f:6b:00:
d3:72:11:8b:8d:ca:5e:4f:c0:14:75:20:a5:d2:19:9c:d7:17:
3c:4d:00:bf:f4:76:3d:30:6f:bd:d6:84:22:a5:41:20:e0:a0:
aa:5f:7c:b2:4b:1a:3b:47:4e:09:fd:33:6d:36:f0:74:eb:0e:
e7:16:5d:60:cf:f9:7b:42:2c:ee:b8:9f:b1:8d:c9:a9:7a:b7:
4d:5c:aa:58:14:0e:75:9c:1e:43:4f:b8:1a:55:c3:a8:65:1d:
08:0a:0f:97:10:07:da:22:4e:a5:2b:20:00:b3:9e:ca:6d:d3:
69:c7:30:0e:45:e5:f0:72:07:a1:dc:99:a0:c8:65:0f:ea:94:
c5:4a:e0:37:1e:61:f5:0e:50:35:95:74:8f:cc:4e:34:bc:9e:
a4:73:a4:d0:e8:85:06:66:5d:60:ec:f0:6d:c2:46:d4:eb:a0:
38:aa:69:3e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzKKcSOCtIDhWLDOLk8Zt4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwMTAyMTIzMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmI5ZjY0NWU4NGRhZTRhOTVmZmE5OWFjNDNiZDNlMjg4YWRjNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTxb5xMWadf64yd5INQaMMIdqzTW
p5WY0g/QNIqvd1vsRNHAw2NIOw75YYjdjK2IgX5ovdY9Wcc6+3WDsWh4ULQF2n/l
xYB53l0Dd9xZVX8IxVu2wKQphL6FST1mYJugR3l5vbTf7mBSzzmLwZwWGaDTXF/0
jf83ON8eZepelLsgLsmamFxNuyycDFNjHPAKkcsBr/+4hlTBuuZ7radovKu1xRGY
cryiiU+mH6ePV0vPeTI+bQtvyPWSCcgt4BopEtLCuOpMP7Spy1crXdZIxUU93hUh
u4jaQFpwkAsv2t9LzJxDEfDKIMgVyhn1vTyfS4Ll9UHn3dOUpPjCfJPqqwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMK59kXoTa5Klf+pmsQ70+KIrca4MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvd3JuMlJlaE5ya3FWXzZtYXhEdlQ0b2l0eHJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAI+PKwD
BAI+PLAwDQYJKoZIhvcNAQELBQADggEBAFKNX5COP+M10zH1Gy3efq97cCVmFPqM
zXDeKBSCQdT66sSMrDIhwLrm3aoPAEFYzx+VwM8JRauZ2i8c88B87v15e73hwRV3
LEzyOJsPygrHdO/1gImnUJ9rANNyEYuNyl5PwBR1IKXSGZzXFzxNAL/0dj0wb73W
hCKlQSDgoKpffLJLGjtHTgn9M2028HTrDucWXWDP+XtCLO64n7GNyal6t01cqlgU
DnWcHkNPuBpVw6hlHQgKD5cQB9oiTqUrIACznspt02nHMA5F5fByB6HcmaDIZQ/q
lMVK4DceYfUOUDWVdI/MTjS8nqRzpNDohQZmXWDs8G3CRtTroDiqaT4=
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:27:14 2024 by rpki-client on console-ams.rpki-client.org