Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-mAHYrBhROMJl0YF4LZFqODH2tE.roa
File: 1-mAHYrBhROMJl0YF4LZFqODH2tE.roa (raw, json)
Hash identifier: exeiBLS1JSUB3ESGMew/BQ6LAbKN8I+g4M059vk/r44=
Subject key identifier: FA:60:07:62:B0:61:44:E3:09:97:46:05:E0:B6:45:A8:E0:C7:DA:D1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01934E126B7876DEF08439A65A1AB9A37FB6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-mAHYrBhROMJl0YF4LZFqODH2tE.roa
Signing time: Thu 21 Nov 2024 09:34:10 +0000
ROA not before: Thu 21 Nov 2024 09:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215127
IP address blocks: 62.60.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:12:6b:78:76:de:f0:84:39:a6:5a:1a:b9:a3:7f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 21 09:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa600762b06144e309974605e0b645a8e0c7dad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:92:34:0a:f5:ef:2a:d0:cd:c8:2c:9b:14:
73:52:0b:81:73:9a:d1:db:10:22:f5:f2:a2:6c:f9:
96:c5:c4:8e:ff:84:e7:0d:37:74:34:78:59:18:e1:
9b:84:fc:57:0e:e1:63:d3:0b:b6:26:c5:31:c0:ec:
d6:36:c5:4b:96:02:35:32:7e:cc:dc:01:e0:bd:d8:
ac:5e:9d:d5:27:c8:79:be:7b:fb:f5:71:9d:85:6c:
6f:52:92:63:7f:4a:ae:0f:63:0e:ff:95:ae:2e:df:
2a:1f:5b:49:5d:92:45:a9:8e:fa:1b:6f:14:5b:b6:
5b:84:5e:e7:22:8f:e5:51:ac:03:d1:79:ed:1a:53:
65:5e:07:d0:c7:fb:25:af:26:0f:f9:03:2f:98:fc:
57:09:f2:ce:c7:d4:96:83:1f:2e:d9:c8:4e:18:86:
ea:19:03:42:33:46:2d:7a:cf:15:3a:de:1b:55:fc:
14:7b:d3:3b:97:06:a4:ef:b5:6e:7f:66:36:f2:4b:
5f:64:34:6b:26:1c:4f:84:a2:6c:df:63:1e:59:c8:
2e:0b:c4:0a:1c:f3:95:1d:9c:67:d5:a5:c4:c9:ec:
ec:d7:8a:05:04:5a:32:b5:f1:45:31:a2:cf:29:7f:
a6:54:6f:e2:4b:0c:cb:e9:1f:fb:01:37:fa:51:28:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:07:62:B0:61:44:E3:09:97:46:05:E0:B6:45:A8:E0:C7:DA:D1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1-mAHYrBhROMJl0YF4LZFqODH2tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.186.0/24
Signature Algorithm: sha256WithRSAEncryption
50:19:32:36:f8:05:70:71:93:e4:e5:6b:87:f8:38:8e:ef:e8:
1f:d4:a3:1d:30:23:cd:e1:e6:7e:21:63:8a:ae:64:b4:9f:b8:
63:6e:49:8d:b4:28:ff:de:82:e5:81:3d:d0:a5:78:12:95:60:
45:d7:ad:df:0e:8e:e4:66:ee:df:99:61:c3:91:d3:4c:9f:74:
47:d3:0c:16:c2:0c:23:04:f9:fe:12:8a:6d:63:1b:97:e8:7c:
f9:00:13:73:05:75:1f:54:80:af:a1:fb:63:69:fe:46:00:18:
78:28:f9:9b:b3:c8:2d:26:27:88:38:c3:00:63:75:59:d3:3c:
6f:b9:4a:4c:29:48:d4:7f:15:37:fd:90:53:ff:b8:ec:8f:c9:
ea:2f:13:9d:5b:4e:49:ec:67:43:93:d0:43:f1:99:d0:77:ad:
e3:41:7c:8d:0c:28:f2:6b:d5:62:a2:ff:48:fa:40:e5:86:3c:
13:01:43:25:18:b8:04:45:74:73:63:bc:5c:bc:cb:8e:47:5a:
0e:dd:72:bc:dd:d1:3c:3c:c3:a9:90:83:e7:74:b6:f1:5c:02:
1e:08:91:9a:d6:cb:54:25:89:11:23:7d:05:23:34:44:05:a6:
d5:85:1d:d5:e2:7e:2e:5d:05:25:5d:4b:24:ae:dd:8a:08:08:
d7:b8:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:53:30 2024 by rpki-client on console-ams.rpki-client.org