Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/UT0zxfOIXMFl4xFYKrXrKcArTDc.roa
File: UT0zxfOIXMFl4xFYKrXrKcArTDc.roa (raw, json)
Hash identifier: DKusyTZAfmKmw+4X+0NpzMcMZ4LAIiYhzwcn5/aTRMA=
Subject key identifier: 51:3D:33:C5:F3:88:5C:C1:65:E3:11:58:2A:B5:EB:29:C0:2B:4C:37
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01934828C3EB70395A2B3C94BD830B8925E0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/UT0zxfOIXMFl4xFYKrXrKcArTDc.roa
Signing time: Wed 20 Nov 2024 06:00:51 +0000
ROA not before: Wed 20 Nov 2024 06:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 62.60.230.0/23 maxlen: 24
62.60.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:28:c3:eb:70:39:5a:2b:3c:94:bd:83:0b:89:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 20 06:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=513d33c5f3885cc165e311582ab5eb29c02b4c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:f3:10:c4:53:f8:9c:89:a2:92:de:c8:63:
38:47:fb:6a:ee:11:d8:18:b4:98:bd:5c:ee:c8:8b:
c1:75:19:2e:96:f6:b1:be:bc:9b:1f:31:73:fe:52:
97:7f:9f:93:cd:b5:c9:4f:a3:80:0a:bc:3d:78:8d:
48:b6:06:fa:c6:10:5c:e1:a6:aa:57:3f:29:d8:c1:
31:9f:2c:a1:3d:3e:ad:1e:5d:18:23:49:d0:b0:04:
a0:11:09:62:4e:2b:da:42:d4:d1:f2:f0:8a:60:aa:
0a:43:12:8f:a1:ef:d9:de:cb:e5:b7:e8:92:ea:30:
35:f7:c0:e8:6b:ca:56:2d:2a:e9:96:33:66:d3:c6:
67:e1:a7:eb:6c:d8:e1:5d:6f:af:03:92:c9:a8:88:
7e:a4:d4:af:a2:40:da:46:f7:74:8d:7f:a4:fc:0b:
4d:b9:d1:eb:27:35:45:46:e9:f8:15:f3:52:83:34:
a0:66:e8:6f:6b:8b:18:21:c5:2b:29:c1:3d:39:27:
33:c2:06:d8:3b:50:72:df:c0:9b:8d:9e:98:ac:ed:
55:86:a1:1f:ec:d0:75:97:16:ed:69:cd:e2:bc:0d:
1b:d7:31:c9:e1:79:44:eb:47:82:2f:83:99:07:6e:
93:02:c6:47:80:13:68:20:6d:25:f8:cc:85:36:4b:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:33:C5:F3:88:5C:C1:65:E3:11:58:2A:B5:EB:29:C0:2B:4C:37
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/UT0zxfOIXMFl4xFYKrXrKcArTDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.230.0/23
62.60.235.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cc:5b:64:40:cb:5a:75:29:01:eb:78:3d:4f:6e:65:41:7b:
c8:82:61:0c:12:88:5d:7d:21:e3:e1:d9:43:86:ca:0d:02:5e:
b6:6b:cd:ce:00:5d:93:89:ec:fd:30:38:40:b3:3d:84:5a:89:
2f:5f:e9:f6:0d:1c:9c:75:41:43:a8:03:6f:25:d5:2e:03:2c:
c3:ae:7f:2a:51:53:1c:5c:0c:56:dc:c2:47:ff:12:e1:61:10:
71:87:d3:1b:18:cc:bc:36:82:5e:f4:6d:e4:cd:03:4c:84:46:
75:64:cb:d9:ad:ad:7f:fe:d2:30:db:4f:bb:9e:27:af:fb:05:
71:d7:33:83:78:07:31:9c:61:99:b8:f0:e6:1f:c4:d1:5c:86:
89:f3:de:77:31:5e:cd:d9:3c:8b:f4:c4:1c:84:3a:3a:13:40:
38:92:ca:21:0f:1f:5a:1f:f1:81:c8:e7:61:a5:a5:02:2d:6d:
12:ca:97:58:1f:85:cb:41:ad:db:8e:0f:50:89:18:55:9b:c5:
84:ad:c2:12:aa:69:22:ef:3e:dc:fe:9a:58:35:a0:a2:a0:fc:
66:d2:1a:86:5c:f8:ff:39:8c:59:de:ce:51:ab:2a:2f:0f:77:
83:85:7d:f2:44:24:69:f7:e4:8d:d5:48:20:4b:e4:9a:70:00:
72:eb:6f:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZNIKMPrcDlaKzyUvYMLiSXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjQxMTIwMDYwMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTNkMzNjNWYzODg1Y2MxNjVlMzExNTgyYWI1ZWIyOWMwMmI0YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofHzEMRT+JyJopLeyGM4R/tq7hHY
GLSYvVzuyIvBdRkulvaxvrybHzFz/lKXf5+TzbXJT6OACrw9eI1Itgb6xhBc4aaq
Vz8p2MExnyyhPT6tHl0YI0nQsASgEQliTivaQtTR8vCKYKoKQxKPoe/Z3svlt+iS
6jA198Doa8pWLSrpljNm08Zn4afrbNjhXW+vA5LJqIh+pNSvokDaRvd0jX+k/AtN
udHrJzVFRun4FfNSgzSgZuhva4sYIcUrKcE9OSczwgbYO1By38CbjZ6YrO1VhqEf
7NB1lxbtac3ivA0b1zHJ4XlE60eCL4OZB26TAsZHgBNoIG0l+MyFNkuW6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFE9M8XziFzBZeMRWCq16ynAK0w3MB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvVVQwenhmT0lYTUZsNHhGWUtyWHJLY0FyVERjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPjzmAwQA
PjzrMA0GCSqGSIb3DQEBCwUAA4IBAQBFzFtkQMtadSkB63g9T25lQXvIgmEMEohd
fSHj4dlDhsoNAl62a83OAF2Tiez9MDhAsz2EWokvX+n2DRycdUFDqANvJdUuAyzD
rn8qUVMcXAxW3MJH/xLhYRBxh9MbGMy8NoJe9G3kzQNMhEZ1ZMvZra1//tIw20+7
niev+wVx1zODeAcxnGGZuPDmH8TRXIaJ8953MV7N2TyL9MQchDo6E0A4ksohDx9a
H/GByOdhpaUCLW0SypdYH4XLQa3bjg9QiRhVm8WErcISqmki7z7c/ppYNaCioPxm
0hqGXPj/OYxZ3s5RqyovD3eDhX3yRCRp9+SN1UggS+SacABy629T
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:44:14 2024 by rpki-client on console-ams.rpki-client.org