Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa
File: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: EEFCMF1cfwyLnKxbZIbHpVQg9swFNEH7+7dkNKCN+zA=
Subject key identifier: 79:57:AF:B0:A8:1B:D1:FD:07:4F:DB:2B:7B:90:F8:63:72:00:7E:0F
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 7F2710BB08273AF3B485E1D77D072EAA3E0F679B
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa
Signing time: Tue 26 Sep 2023 02:03:13 +0000
ROA not before: Tue 26 Sep 2023 01:58:13 +0000
ROA not after: Tue 24 Sep 2024 02:03:13 +0000
asID: 61317
IP address blocks: 62.122.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:27:10:bb:08:27:3a:f3:b4:85:e1:d7:7d:07:2e:aa:3e:0f:67:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 26 01:58:13 2023 GMT
Not After : Sep 24 02:03:13 2024 GMT
Subject: CN=7957AFB0A81BD1FD074FDB2B7B90F86372007E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:af:79:e2:44:69:88:22:14:98:87:da:b0:
00:45:f3:80:81:45:68:05:03:c5:47:e7:d7:b9:d6:
04:67:22:02:f5:3b:6a:13:2c:0d:45:bb:c7:bd:0d:
7c:26:39:f1:74:0b:e8:55:b8:a5:24:b6:29:63:e1:
06:6c:f8:2d:3b:fd:fa:d6:6e:33:90:aa:24:1d:d4:
78:97:cd:50:ba:1b:45:ed:55:8a:2f:45:70:7e:ad:
a6:68:40:72:27:9c:d4:f3:b7:b8:72:1e:69:23:b0:
6f:28:3d:50:33:5c:9d:e4:31:7d:21:82:6f:5f:72:
f3:56:cf:91:bc:02:b5:e6:70:b4:53:4a:5d:6d:de:
e3:ab:59:db:ea:53:44:d6:29:16:31:65:07:7c:4d:
30:82:0f:8b:7c:fb:ce:71:4a:f9:88:b2:fa:c1:c9:
bf:ef:5c:72:c8:1e:09:5c:69:fb:d6:c0:60:22:f6:
5b:a3:b8:6d:c1:85:5a:df:38:33:85:e6:7a:8e:cc:
00:2d:01:a8:f0:ab:96:9d:f4:de:84:79:5b:02:91:
24:f9:95:e5:55:20:70:17:37:dd:78:d9:30:e8:fb:
67:06:41:52:33:90:52:71:4b:aa:59:53:1c:7f:2b:
18:fc:c9:01:cc:cf:6d:e1:66:aa:78:3c:71:53:77:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:AF:B0:A8:1B:D1:FD:07:4F:DB:2B:7B:90:F8:63:72:00:7E:0F
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:1a:e7:84:8f:91:ad:22:73:2d:ef:c2:9a:61:f4:1b:52:63:
8d:1b:37:77:9a:71:38:04:7b:79:c4:48:a3:7b:c3:dd:22:c2:
78:8c:73:27:7d:37:f1:a5:f4:fb:04:48:b9:ef:6b:0e:3a:4c:
d0:f2:cf:ca:61:27:c3:04:b8:c5:7a:2b:a2:6e:86:51:d5:4a:
b1:06:20:75:9c:43:cb:09:49:d4:7d:12:b7:a3:c5:5e:f8:e6:
76:7d:3d:e5:7f:81:56:5f:7c:f4:a0:94:7f:09:b2:9a:c8:bb:
51:b2:f0:5d:6a:eb:f4:23:41:1d:f6:3b:b8:75:c7:b1:45:45:
f6:56:5e:c4:d5:dd:0f:0b:32:d8:52:02:e8:50:a6:1b:d5:d8:
05:02:88:40:a5:01:24:0c:ae:44:e2:39:96:fe:88:53:72:10:
12:58:be:69:f7:fd:ef:d7:0e:03:d4:d0:e4:6d:6b:e7:35:b5:
b3:db:12:99:88:76:6a:28:70:c9:27:16:39:37:29:e3:34:72:
12:d1:0f:17:dd:9f:9f:7c:86:c6:4d:19:ae:50:df:57:ce:b5:
3b:0c:0e:b8:ac:9a:0f:76:3d:0d:dd:9f:65:df:f4:ee:93:98:
f3:85:16:16:dd:ed:c2:55:dc:ec:1d:3f:7a:42:a1:36:e5:1d:
a6:27:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:11:46 2024 by rpki-client on console-ams.rpki-client.org