Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/11L5CLj0n_gpX3Pwd_-QRteFl68.roa
File: 11L5CLj0n_gpX3Pwd_-QRteFl68.roa (raw, json)
Hash identifier: 5CZH8n1VoW3+DFapCYcdVAm35rqOXWpeh37rd2LExVM=
Subject key identifier: D7:52:F9:08:B8:F4:9F:F8:29:5F:73:F0:77:FF:90:46:D7:85:97:AF
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01921130E09EAE9D780F03C11D2C2E3C9DE9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/11L5CLj0n_gpX3Pwd_-QRteFl68.roa
Signing time: Fri 20 Sep 2024 20:47:48 +0000
ROA not before: Fri 20 Sep 2024 20:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 62.60.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:11:30:e0:9e:ae:9d:78:0f:03:c1:1d:2c:2e:3c:9d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 20 20:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d752f908b8f49ff8295f73f077ff9046d78597af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:1c:cb:eb:37:1e:57:05:c0:3d:aa:ed:6b:
bb:6f:c6:f4:23:8c:75:44:e2:a9:35:f8:7e:85:98:
4c:41:f6:97:ea:ef:39:de:28:a7:88:66:20:0c:aa:
04:6e:93:f1:a8:03:36:35:19:fb:16:46:24:64:16:
8b:a4:a6:d9:bb:7a:e6:be:e8:1f:2a:47:9b:bd:01:
f9:53:3e:a3:08:57:cf:b9:f7:da:cc:07:f5:35:88:
8f:52:13:b4:b6:48:8f:a8:6b:70:d0:43:b8:3c:58:
8f:e8:b6:f4:12:4d:db:c5:0c:5a:91:e0:2a:71:d4:
2c:e8:fa:e3:5b:a7:8e:94:7f:94:39:59:5b:3d:d8:
f9:a2:03:43:7f:25:a0:8a:63:73:e3:e0:5d:22:58:
cf:eb:39:cd:50:bb:13:d8:f7:e1:e9:13:9f:3e:9c:
06:6a:2f:41:cd:0b:fb:8f:6f:97:1b:ff:1b:ee:e2:
0a:4a:e1:62:61:36:97:d8:84:36:4a:bc:59:66:1c:
13:85:2e:c2:da:2e:aa:0e:ca:10:8b:b1:51:a6:56:
5e:82:a8:63:7f:35:1f:68:23:4f:c5:43:c0:cd:a9:
5e:cb:66:11:27:ec:14:64:66:38:73:17:ef:97:64:
e3:bc:1a:bb:fc:c5:12:47:46:71:3c:03:91:af:5f:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:52:F9:08:B8:F4:9F:F8:29:5F:73:F0:77:FF:90:46:D7:85:97:AF
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/11L5CLj0n_gpX3Pwd_-QRteFl68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b7:71:0d:48:2e:3e:aa:ef:c6:37:8f:40:a6:47:7f:b8:65:
0e:f8:13:34:f2:bc:d8:f0:6c:f3:33:8a:5c:f2:e5:b2:fc:87:
00:25:b4:ef:f0:cd:bc:d5:b8:be:51:52:e9:1a:48:3b:ac:be:
d2:98:ab:5d:63:7d:35:7f:7f:b1:bb:49:67:e0:ea:4a:a4:8d:
c8:81:4e:8d:f5:7b:6b:85:e3:10:c5:58:fd:f3:9e:88:ee:32:
aa:69:0c:00:98:a8:58:30:a4:23:bd:3a:38:e1:64:09:d0:ac:
47:a9:9e:5c:1c:b9:31:84:a3:8c:6b:cb:48:5a:e2:c9:56:1c:
73:d0:a7:45:0d:7e:e3:cc:05:69:f4:a3:af:eb:e0:ef:bc:b7:
80:8f:7c:b3:43:36:48:e9:65:fb:53:83:62:e3:af:e2:da:52:
20:8b:c9:5a:3a:f1:54:4a:7e:2d:84:6b:a2:e5:bc:5a:bc:53:
7c:5b:ef:bd:cd:75:ca:37:6c:0f:89:b5:a5:62:ff:9a:0b:78:
44:4a:1d:2e:11:fc:d6:5c:f3:97:e9:3e:f2:49:8d:99:92:2a:
05:d2:1f:b8:57:50:82:3d:8b:2b:55:a1:5c:c4:d4:a0:56:df:
fd:b1:9a:57:fd:a0:65:68:c7:65:80:b1:ab:59:df:27:31:e7:
11:32:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:53:30 2024 by rpki-client on console-ams.rpki-client.org