Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KAG_tWCdAwZcNjy_ASYGorvYEuI.roa
File: KAG_tWCdAwZcNjy_ASYGorvYEuI.roa (raw, json)
Hash identifier: VPFUGYqTXFRnPRh7ZNznEiOT9x72LqYQUO1MKleBjrY=
Subject key identifier: 28:01:BF:B5:60:9D:03:06:5C:36:3C:BF:01:26:06:A2:BB:D8:12:E2
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019212F26666C56971B825F5752B96CA054A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KAG_tWCdAwZcNjy_ASYGorvYEuI.roa
Signing time: Sat 21 Sep 2024 04:58:48 +0000
ROA not before: Sat 21 Sep 2024 04:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40124
IP address blocks: 62.60.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:12:f2:66:66:c5:69:71:b8:25:f5:75:2b:96:ca:05:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 21 04:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2801bfb5609d03065c363cbf012606a2bbd812e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:44:3f:f1:b7:f4:29:8c:1c:47:67:16:f8:
82:ae:c7:d5:eb:18:a1:c2:aa:eb:63:1f:1a:55:85:
8d:07:65:50:97:1e:67:fe:09:fd:99:9e:a0:6f:65:
e7:d7:85:85:84:0f:43:93:df:68:96:dd:56:5e:28:
c8:71:95:80:eb:a6:18:af:e9:4c:e3:c4:34:a2:1f:
70:0e:43:38:0b:34:99:d3:14:7f:d5:bd:a2:e8:d2:
cd:63:fa:c9:76:e0:51:6b:a1:6e:00:a3:ed:9b:00:
21:b3:7f:cb:9b:71:e3:8e:4c:f3:52:d3:a8:41:6c:
f7:35:d2:b0:aa:95:ec:0b:01:cd:4f:8e:59:dc:41:
49:6d:bb:98:32:d8:38:a5:f3:8d:1e:a1:ca:d5:b0:
01:61:29:9a:dd:1b:bb:3c:8f:21:68:b1:ec:c9:1e:
e4:7b:7b:c1:f4:fc:0d:55:89:e2:a1:6d:6b:9e:8c:
76:da:d5:72:16:34:c2:cb:be:c7:31:b0:71:3d:58:
88:a8:a2:14:40:79:b4:ca:65:92:ed:3e:49:86:f6:
80:90:3a:f9:58:86:ec:c7:9d:41:8b:c8:0b:d6:cb:
93:14:a4:6b:f1:0d:85:03:fe:b9:27:a5:2d:79:16:
a1:83:18:fd:c0:99:61:21:34:a5:58:60:18:48:5d:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:BF:B5:60:9D:03:06:5C:36:3C:BF:01:26:06:A2:BB:D8:12:E2
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KAG_tWCdAwZcNjy_ASYGorvYEuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.229.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6d:30:e1:27:1d:80:3e:69:d6:14:fd:43:01:0a:56:0d:b1:
0b:f0:fc:ee:81:ed:51:06:d2:dd:b7:b7:0c:cc:2c:c5:11:fe:
a4:8a:61:95:fc:90:7a:01:3f:66:4d:c5:10:3a:a0:03:b0:e5:
ba:75:ea:6f:b6:6e:3f:2a:85:5a:e8:c1:76:c6:cf:1c:c3:2d:
a3:1c:43:f0:45:d2:81:e1:f9:82:ca:fc:32:45:af:e0:c0:1f:
ed:ea:82:c8:f6:8c:3a:a2:de:13:7b:49:09:37:fa:ad:fe:1a:
e2:3b:1e:9d:68:d4:a9:b8:8d:22:e8:ff:2b:ac:89:f7:08:09:
15:f6:17:4e:91:b6:28:38:c7:d7:66:12:10:28:7b:c5:b5:ec:
6b:f8:6e:80:f3:1e:3b:ce:30:df:5f:6e:d1:28:f6:91:16:00:
56:1c:9f:db:57:ab:53:1a:b7:b0:a4:a1:e6:cc:07:b8:eb:6b:
c7:61:2f:9a:36:f9:41:04:e1:03:b6:eb:bc:77:c4:ea:30:4f:
6a:11:a5:30:c3:4b:f3:30:96:35:44:99:c7:47:50:e5:96:5f:
bf:d3:10:f7:70:dd:6f:02:c8:d5:28:c7:9a:d2:75:19:e4:5e:
bd:4f:55:e7:f8:bc:db:07:4b:a5:f9:68:b2:92:af:1b:bc:dd:
f6:32:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:53:30 2024 by rpki-client on console-ams.rpki-client.org