Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3DcQ4PN6pJvWwXV6FYrTrw-9DAA.roa
File: 3DcQ4PN6pJvWwXV6FYrTrw-9DAA.roa (raw, json)
Hash identifier: DNfgcdnMt5n41xNNtlSw8iQ9ExpvSUHmAFNqAP7Gipw=
Subject key identifier: DC:37:10:E0:F3:7A:A4:9B:D6:C1:75:7A:15:8A:D3:AF:0F:BD:0C:00
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01930FFBD0F1F85FA0BF15652E4B622724D3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3DcQ4PN6pJvWwXV6FYrTrw-9DAA.roa
Signing time: Sat 09 Nov 2024 08:13:01 +0000
ROA not before: Sat 09 Nov 2024 08:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213995
IP address blocks: 62.60.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0f:fb:d0:f1:f8:5f:a0:bf:15:65:2e:4b:62:27:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 9 08:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc3710e0f37aa49bd6c1757a158ad3af0fbd0c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:e2:44:0a:10:40:1f:f6:33:eb:d5:ad:ce:
61:d2:3c:d9:26:da:75:c6:c3:13:68:56:d0:cb:d8:
6b:9f:9f:ce:58:8c:7e:f5:a7:2b:17:64:ec:0a:55:
7d:4d:81:61:91:dd:de:27:9e:e7:27:90:27:2b:1f:
d1:be:95:e0:03:b0:32:b3:26:e6:b9:d1:d1:03:fb:
4f:34:3d:e7:18:d3:44:8d:d1:6b:6e:dc:5e:1b:6f:
17:26:48:d2:52:27:d1:aa:03:75:80:8f:d0:cf:01:
cf:50:51:88:2d:7f:08:9d:1e:fa:1d:e5:00:a5:18:
d9:d3:ba:eb:df:a2:81:5b:bd:2c:a5:fa:dc:56:59:
b5:0c:e1:8e:52:3b:f5:dc:4f:89:59:c3:a0:f4:46:
72:c8:6c:09:af:15:ee:09:ef:71:72:30:10:f0:b1:
92:96:b1:de:21:f3:c3:f1:37:61:91:75:f6:17:7c:
1b:ab:4e:3a:a8:2e:0c:24:27:bb:4b:b0:db:9c:a0:
b7:c8:f2:3a:79:83:01:3e:d0:cb:36:fd:cd:26:16:
6a:f4:0f:1b:8e:dd:71:b7:32:7e:5d:e1:31:0a:d5:
85:46:aa:27:e4:53:db:f0:b1:dd:56:04:df:2b:78:
76:55:1b:29:6f:d2:77:10:ed:47:96:35:81:95:a0:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:37:10:E0:F3:7A:A4:9B:D6:C1:75:7A:15:8A:D3:AF:0F:BD:0C:00
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3DcQ4PN6pJvWwXV6FYrTrw-9DAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.228.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:25:8a:b6:ee:a4:bb:66:d1:7e:f2:aa:af:e0:98:f5:18:f8:
fd:6c:12:10:6e:f2:4a:f4:77:6a:4b:19:65:ad:59:84:c6:0a:
e2:9c:ae:70:76:fe:04:f2:f2:32:ac:ce:cb:ce:fe:8c:99:ed:
c9:e9:75:c9:c1:aa:69:95:6f:7a:be:f7:e1:b4:2c:ef:eb:28:
3b:eb:9e:57:3c:24:e0:e1:52:84:fc:ee:01:c3:41:bd:5f:2d:
17:62:e6:52:46:f6:9d:50:cf:67:40:b8:d5:95:73:6a:34:38:
ff:1a:a6:98:76:d8:e5:6c:48:5f:be:71:61:cd:68:98:0e:90:
0e:70:ee:96:54:35:5b:09:e7:a1:53:09:e8:d7:75:f9:74:1a:
c7:3e:fd:11:10:37:70:51:4c:a8:5c:f8:db:ac:e5:8b:a8:e3:
1f:99:d6:65:05:a3:b9:46:e7:72:9c:35:c3:4a:bd:83:22:d9:
fd:fa:81:90:13:2d:14:a4:9a:bd:f9:8a:5f:f4:eb:8c:02:1e:
1e:06:9d:c4:05:b0:7c:f1:ab:ec:61:cc:53:17:97:f4:5b:08:
b2:b3:56:0a:8f:61:d0:c1:d4:39:76:76:6b:01:7a:9a:67:d1:
6f:87:6c:36:82:90:38:f5:e0:fa:f9:f8:b0:9f:5a:5c:8e:8f:
5b:3a:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:53:30 2024 by rpki-client on console-ams.rpki-client.org