Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D5d-ydBGPMSIht_00tAOQaytCwQ.roa
File: D5d-ydBGPMSIht_00tAOQaytCwQ.roa (raw, json)
Hash identifier: Y9XuwwYNv8awmonq3iJ/K+R2YmMzviyKE+PIsnNkvWo=
Subject key identifier: 0F:97:7E:C9:D0:46:3C:C4:88:86:DF:F4:D2:D0:0E:41:AC:AD:0B:04
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01913DE1A9CEB27ED10E71A17344523BDF1C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D5d-ydBGPMSIht_00tAOQaytCwQ.roa
Signing time: Sat 10 Aug 2024 20:01:24 +0000
ROA not before: Sat 10 Aug 2024 20:01:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215930
IP address blocks: 62.60.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3d:e1:a9:ce:b2:7e:d1:0e:71:a1:73:44:52:3b:df:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 10 20:01:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f977ec9d0463cc48886dff4d2d00e41acad0b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:70:77:23:12:17:34:38:c3:c5:90:63:eb:
9c:71:6d:ac:82:bf:d3:ea:73:f5:d2:6d:f0:37:62:
ea:66:f7:ce:72:19:48:8e:85:c9:14:73:de:de:3b:
3f:84:1b:7e:43:23:ee:61:80:c0:c8:59:a3:99:1d:
8a:c5:43:59:a4:97:d0:ac:2a:75:77:9a:93:26:73:
fb:08:62:9d:34:06:3a:f6:ef:e4:c8:f7:8e:ab:4d:
f8:86:93:63:94:38:f7:a6:8a:0d:ff:27:ef:d7:91:
34:c4:83:27:ab:80:8c:73:81:bd:61:66:42:f8:a8:
03:d2:42:c5:84:a3:76:93:2d:44:a6:9d:ed:d7:6c:
7c:35:c3:36:e5:61:a6:04:33:da:14:61:31:27:90:
dc:05:45:32:ac:b2:1f:e5:8a:74:aa:3f:07:f7:b5:
04:68:ba:b5:f6:52:52:ec:84:8c:95:3e:f5:82:8c:
b3:a2:7d:41:c2:90:0a:94:2e:24:57:83:a3:34:9d:
27:74:ed:c8:e2:3a:e8:a7:24:98:aa:c0:e8:18:58:
f8:09:b6:79:9d:7a:1e:c1:be:43:be:76:6c:4d:d0:
11:8d:9d:33:f9:8d:f3:0f:ac:df:c4:6b:c9:d6:d6:
ad:c3:7e:ee:17:98:91:2f:f7:14:5e:75:ae:bb:53:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:7E:C9:D0:46:3C:C4:88:86:DF:F4:D2:D0:0E:41:AC:AD:0B:04
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/D5d-ydBGPMSIht_00tAOQaytCwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:ea:7a:35:84:14:e4:d7:f2:bb:79:be:f5:1f:41:46:58:4c:
33:c9:08:4b:7e:6d:58:65:ef:36:45:5c:d8:74:81:e0:04:b2:
a0:4c:4a:23:5f:05:c4:58:cc:9e:79:8a:b5:f0:f0:53:88:5f:
7f:77:34:bd:3c:6f:ae:30:32:ab:bd:2f:47:6f:af:8d:b7:1f:
2f:42:a4:af:97:51:14:e5:05:f0:a8:16:3e:c1:5d:ab:8c:30:
bb:5b:27:c1:f6:94:1c:97:69:fb:dc:2f:e9:10:a6:a1:c3:d7:
96:86:d3:ee:74:51:16:15:db:bf:b2:9b:70:2e:b5:02:2b:ae:
36:32:76:54:e2:27:37:f6:9c:3d:1d:fd:bd:5c:7c:47:6e:c1:
62:7f:47:5a:92:9a:e2:14:47:1f:2a:35:4b:a8:6d:e4:0b:27:
45:38:8d:9e:02:35:01:2b:6e:b9:46:5d:e7:ad:f2:4b:95:9e:
9c:7c:8d:39:0a:4e:b1:b0:ea:6c:51:9c:62:18:66:86:34:b0:
30:1d:03:39:d6:dc:28:73:5e:d4:6a:e5:48:aa:0d:25:0e:e9:
a0:d5:9b:8e:01:f0:e5:36:89:94:68:3d:c5:0c:dc:eb:69:0b:
a0:99:9c:54:cb:34:0b:11:82:cf:4a:ee:61:56:da:47:1c:dc:
c3:7d:7e:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZE94anOsn7RDnGhc0RSO98cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQwODEwMjAwMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjk3N2VjOWQwNDYzY2M0ODg4NmRmZjRkMmQwMGU0MWFjYWQwYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiudwdyMSFzQ4w8WQY+uccW2sgr/T
6nP10m3wN2LqZvfOchlIjoXJFHPe3js/hBt+QyPuYYDAyFmjmR2KxUNZpJfQrCp1
d5qTJnP7CGKdNAY69u/kyPeOq034hpNjlDj3pooN/yfv15E0xIMnq4CMc4G9YWZC
+KgD0kLFhKN2ky1Epp3t12x8NcM25WGmBDPaFGExJ5DcBUUyrLIf5Yp0qj8H97UE
aLq19lJS7ISMlT71goyzon1BwpAKlC4kV4OjNJ0ndO3I4jropySYqsDoGFj4CbZ5
nXoewb5DvnZsTdARjZ0z+Y3zD6zfxGvJ1tatw37uF5iRL/cUXnWuu1O/XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA+XfsnQRjzEiIbf9NLQDkGsrQsEMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRDVkLXlkQkdQTVNJaHRfMDB0QU9RYXl0Q3dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPjy8MA0G
CSqGSIb3DQEBCwUAA4IBAQCL6no1hBTk1/K7eb71H0FGWEwzyQhLfm1YZe82RVzY
dIHgBLKgTEojXwXEWMyeeYq18PBTiF9/dzS9PG+uMDKrvS9Hb6+Ntx8vQqSvl1EU
5QXwqBY+wV2rjDC7WyfB9pQcl2n73C/pEKahw9eWhtPudFEWFdu/sptwLrUCK642
MnZU4ic39pw9Hf29XHxHbsFif0dakpriFEcfKjVLqG3kCydFOI2eAjUBK265Rl3n
rfJLlZ6cfI05Ck6xsOpsUZxiGGaGNLAwHQM51twoc17UauVIqg0lDumg1ZuOAfDl
NomUaD3FDNzraQugmZxUyzQLEYLPSu5hVtpHHNzDfX6O
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:53:30 2024 by rpki-client on console-ams.rpki-client.org