Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R7WfHwy5XWkb1xtXOfm4MnfWWNM.roa
File: R7WfHwy5XWkb1xtXOfm4MnfWWNM.roa (raw, json)
Hash identifier: OnjvRjqyW7n941e5/g5sG33Zm1V+3Ld438c8mcYQDJU=
Subject key identifier: 47:B5:9F:1F:0C:B9:5D:69:1B:D7:1B:57:39:F9:B8:32:77:D6:58:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF3EAB5D3EB0436FB46B2F11B69FE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R7WfHwy5XWkb1xtXOfm4MnfWWNM.roa
Signing time: Tue 02 Jan 2024 06:29:32 +0000
ROA not before: Tue 02 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60590
IP address blocks: 37.60.143.0/24 maxlen: 24
87.121.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f3:ea:b5:d3:eb:04:36:fb:46:b2:f1:1b:69:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47b59f1f0cb95d691bd71b5739f9b83277d658d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:a8:e2:b3:4d:ee:3e:a8:df:7f:12:e7:f5:
65:b0:59:06:af:86:14:24:57:da:f8:75:19:22:87:
67:cd:c0:ce:e4:17:8c:2d:0a:d1:38:28:36:44:e7:
83:1e:48:8a:2d:19:f0:34:85:1d:05:e5:21:77:93:
cc:ee:e2:02:07:5f:03:c2:57:32:9f:49:14:26:86:
0b:38:47:66:d6:f2:2d:60:2f:e7:60:be:41:15:ac:
2c:f1:ee:c3:9e:66:9b:70:b8:52:14:86:56:d9:59:
9a:68:a5:d8:7f:49:a5:2b:e3:af:03:40:6a:a8:d5:
cb:9b:40:31:9f:43:9b:12:64:b3:9f:83:f0:01:e3:
c4:60:7f:25:ec:19:91:e9:cc:6d:5c:08:e6:25:4f:
61:ae:59:39:77:31:07:ee:5d:9c:a5:b8:ac:59:1b:
05:59:64:0b:91:51:3b:2b:74:61:93:51:b2:70:e9:
61:9f:92:9b:ad:9c:cc:73:69:c4:8c:d0:0e:27:06:
91:08:50:40:81:c8:29:13:22:cf:81:98:78:ee:0e:
65:aa:19:20:e9:e3:bd:63:af:99:3a:60:d3:9d:b7:
13:3a:1a:6e:a7:67:14:f3:d9:ee:3f:d5:92:1e:0c:
f2:f8:79:a1:30:f5:57:9e:3d:79:13:f6:a4:92:2d:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:9F:1F:0C:B9:5D:69:1B:D7:1B:57:39:F9:B8:32:77:D6:58:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/R7WfHwy5XWkb1xtXOfm4MnfWWNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.143.0/24
87.121.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:df:6a:1b:a0:67:84:82:b1:37:ac:70:8f:b1:a4:6e:df:a2:
c5:9f:af:86:42:7b:1f:ac:8f:11:6c:5e:fc:d4:99:cf:d2:2a:
9f:ae:10:74:2b:a0:42:fe:f5:32:6e:11:2b:bf:d3:8c:85:a8:
74:07:d5:da:f9:ce:fa:cd:be:39:f9:ea:27:66:4b:f9:2d:db:
57:d4:ad:c8:14:c8:43:a5:c1:a5:3b:fb:1e:56:9e:68:22:73:
60:87:5d:cc:11:0c:92:7a:63:35:af:52:2c:b3:b3:3f:b5:60:
f6:8b:c9:fe:be:0a:b0:e2:6d:60:e3:99:ab:ce:a3:ad:89:6c:
84:9c:e5:0a:f5:c8:6f:a0:6d:05:d3:aa:1b:0a:ef:5a:d8:9e:
1e:1d:6f:ab:5e:e7:10:ca:0b:dd:95:31:96:83:85:4d:14:da:
48:f4:b8:b4:61:0d:db:b7:c4:58:50:48:2e:a2:8a:14:84:6a:
d3:81:52:9e:f8:5c:a4:ad:84:a1:1c:92:fb:89:a6:53:36:96:
fe:48:4c:1b:55:31:a8:ee:a8:90:85:5c:71:42:f7:0f:63:08:
73:01:9e:1d:cd:38:8d:d9:1e:ba:a1:11:74:9f:58:b8:39:1e:
eb:b5:7d:04:92:09:f0:71:dc:8c:5b:c6:42:56:44:20:ed:f7:
4d:13:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:45 2024 by rpki-client on console-ams.rpki-client.org