Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p-60P_G7ABPDamfEWrb8g6zlOGE.roa
File: p-60P_G7ABPDamfEWrb8g6zlOGE.roa (raw, json)
Hash identifier: RTFFvbYQtKdTF/32/HtcsbueYcc0what0QFnkDU3fXk=
Subject key identifier: A7:EE:B4:3F:F1:BB:00:13:C3:6A:67:C4:5A:B6:FC:83:AC:E5:38:61
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019364C37109DF875F78FA4329550D162327
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p-60P_G7ABPDamfEWrb8g6zlOGE.roa
Signing time: Mon 25 Nov 2024 19:19:10 +0000
ROA not before: Mon 25 Nov 2024 19:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.134.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:c3:71:09:df:87:5f:78:fa:43:29:55:0d:16:23:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 25 19:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7eeb43ff1bb0013c36a67c45ab6fc83ace53861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:71:c3:18:ad:59:cf:2d:5e:38:ef:09:b8:
b9:55:ac:b6:ff:a3:9c:db:0b:59:4c:bb:ad:b0:79:
bd:25:08:a1:fb:5f:6d:5d:e7:bd:42:b6:18:30:ae:
db:a2:41:c3:f7:49:26:98:4d:0c:a9:85:d5:cc:61:
51:93:50:29:05:4e:48:ee:10:02:ab:1e:b3:b5:59:
47:af:ac:85:8b:3d:3c:67:7c:9b:32:9f:39:ba:05:
84:5d:95:ca:d8:70:6d:64:52:a0:74:3e:7a:a5:07:
bf:24:ca:5f:20:70:98:51:9e:b2:48:e9:d4:0f:6d:
a0:fa:39:2b:b5:fa:6f:f0:8b:25:16:7b:1e:00:7b:
30:bc:36:76:60:94:92:18:4f:fe:d8:a4:04:61:6c:
0a:8e:b1:fa:ce:17:f0:e6:e0:44:34:93:f7:b0:8b:
c4:13:3f:e1:c9:58:94:f0:42:6a:22:f0:28:fe:7f:
c4:a3:db:9a:36:6f:a5:42:4d:a5:90:64:55:67:2e:
0b:1c:19:12:69:51:21:af:07:56:bf:f3:70:1a:54:
05:31:cf:21:4f:d1:d4:7e:25:2d:c9:cf:07:0d:2d:
ef:f3:fe:3a:65:cb:82:a3:73:31:e3:9a:a9:38:e5:
e7:98:cc:f4:32:ba:89:f7:7a:98:63:25:1e:b4:08:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:B4:3F:F1:BB:00:13:C3:6A:67:C4:5A:B6:FC:83:AC:E5:38:61
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p-60P_G7ABPDamfEWrb8g6zlOGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.231.25.0/24
5.231.70.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2b:e2:f1:9b:5f:e0:a6:95:d6:0d:9a:40:26:bd:90:c9:33:
41:7a:c4:2b:6b:84:e4:d5:2e:e9:dd:54:5b:44:b8:b6:e4:27:
66:11:72:85:34:52:e3:d0:f3:10:46:a4:de:64:0d:e1:ed:f5:
bd:4b:34:0f:14:c3:58:bb:c5:9a:07:7e:7e:98:72:32:e5:7e:
89:83:f0:ae:3c:f2:4b:30:c0:a7:d8:98:e0:41:c0:57:b7:59:
bf:a5:69:85:9f:77:5c:53:47:33:29:b1:66:7e:b5:82:b6:c0:
04:6a:7a:cc:8f:e2:c2:c6:da:ef:ac:84:78:09:7e:d0:74:e0:
fe:ba:b3:f7:89:4b:d3:8f:82:7b:8c:e5:01:5c:34:45:a2:6a:
34:3a:21:7e:b1:26:73:77:fb:cb:dc:c4:07:73:aa:0d:39:21:
e6:fb:7e:e0:95:bb:b7:20:30:7b:bc:f1:fb:0d:21:60:a8:47:
ee:58:8c:00:2a:1c:5f:f1:c8:9b:46:53:57:2c:58:f2:b0:d0:
42:01:41:d2:d9:a5:40:86:97:84:33:e0:9c:26:48:5b:fa:95:
a0:a4:4f:a8:49:6b:8e:b2:78:1d:2f:59:e6:7b:85:85:06:b6:
f5:b9:b2:7b:e4:71:6c:5c:5d:2c:fa:03:3a:47:5f:ee:8d:8d:
11:7b:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:32 2024 by rpki-client on console-ams.rpki-client.org