Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dXvmc-teTc7YeVDb0PvGdCsv_SE.roa
File: dXvmc-teTc7YeVDb0PvGdCsv_SE.roa (raw, json)
Hash identifier: g/GVQMiBz43mjbKTfgg58lVzeDj37tFO8ysXygayUNE=
Subject key identifier: 75:7B:E6:73:EB:5E:4D:CE:D8:79:50:DB:D0:FB:C6:74:2B:2F:FD:21
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C09D5939885AEE7867FBA183ACB3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dXvmc-teTc7YeVDb0PvGdCsv_SE.roa
Signing time: Tue 02 Jan 2024 12:33:03 +0000
ROA not before: Tue 02 Jan 2024 12:33:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16200
IP address blocks: 62.60.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c0:9d:59:39:88:5a:ee:78:67:fb:a1:83:ac:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=757be673eb5e4dced87950dbd0fbc6742b2ffd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:66:b3:ad:6a:a1:55:41:c2:01:be:fb:c1:
7a:91:7f:b2:02:e4:42:b9:10:5c:8c:1b:42:a4:a4:
44:cc:f5:03:9b:4c:ab:1d:10:f9:93:41:90:0a:8c:
2d:ce:48:b1:5b:db:1d:13:8d:36:59:11:6c:2a:94:
1c:f4:1c:36:72:44:fd:a3:ae:0e:58:60:e1:a6:36:
5f:03:30:65:35:9d:5d:87:54:2f:3a:8e:2c:1c:5e:
1a:5a:17:c4:f2:73:3e:a6:08:21:c5:52:92:aa:f4:
ee:41:1b:0c:35:7d:40:71:26:8d:5a:51:f5:f8:74:
76:8b:df:8b:dc:56:e3:34:1d:d6:09:2f:f3:a3:4b:
63:d7:ec:ad:52:5c:fe:fd:c1:17:b5:39:a0:df:97:
55:1e:ea:61:14:c4:72:f5:b1:2d:16:5b:19:8a:72:
94:6f:59:04:e4:bc:d9:23:12:99:78:25:7a:2b:99:
13:e4:b1:bf:0e:92:d6:f5:50:21:1e:d9:99:9d:1a:
6a:c5:59:99:ba:27:22:42:54:4f:fd:83:f2:3a:da:
10:a4:b7:8a:8d:3b:28:34:fd:dc:bc:75:92:48:2e:
80:49:21:e8:81:ce:e6:1f:6b:4a:a7:57:0c:ce:91:
b8:ec:49:8b:df:2b:fc:e2:c4:72:ce:72:9c:8b:24:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:E6:73:EB:5E:4D:CE:D8:79:50:DB:D0:FB:C6:74:2B:2F:FD:21
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/dXvmc-teTc7YeVDb0PvGdCsv_SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.163.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:96:29:26:1a:33:1f:48:25:19:e3:2f:04:dc:b3:b8:67:30:
af:24:f0:36:53:ac:72:7d:1f:44:20:20:1f:0c:e9:99:fa:67:
6c:02:ae:96:b2:41:94:56:e2:ae:86:ac:32:ca:3e:b3:4e:7f:
80:70:9e:5d:d8:5b:a0:ef:8e:cf:36:89:54:dd:03:0c:1e:8b:
4c:49:42:47:aa:c5:87:5c:26:35:b5:c7:37:12:bf:45:a2:be:
84:c4:f9:dc:17:46:33:56:00:ec:37:2e:ec:b6:dc:89:40:1e:
b0:00:a9:25:0c:6c:03:03:03:df:fe:00:39:ff:70:d2:46:52:
25:87:01:f2:68:7c:b0:6b:be:64:c5:8f:c3:ee:f4:14:31:06:
1e:dc:a1:83:37:a3:a4:f6:f2:1b:01:a3:dc:2c:c1:17:fc:ce:
9d:f5:56:7c:ad:9b:c4:51:5e:6d:ff:2b:43:fa:e6:5f:b6:0c:
ce:4e:e7:b5:3d:e9:58:c9:bf:94:7f:04:72:1c:0b:9e:98:3b:
a7:c8:88:f1:34:21:f5:91:fd:c2:3d:ef:57:0d:e6:5e:bc:79:
fb:e0:18:cc:34:d7:9e:e4:4c:85:0d:d6:ab:10:8a:c9:8b:82:
9a:a3:76:5b:77:bd:7c:ac:0e:b8:cb:09:bb:77:7c:d4:9a:7c:
31:73:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:08:18 2024 by rpki-client on console-ams.rpki-client.org