Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/s8l-xCVqBQ55i2YlDfcji4PeYnU.roa
File: s8l-xCVqBQ55i2YlDfcji4PeYnU.roa (raw, json)
Hash identifier: TGNAsu4QO936uPgka5FNivJqKGiyAsK3lx4vCqnY99c=
Subject key identifier: B3:C9:7E:C4:25:6A:05:0E:79:8B:66:25:0D:F7:23:8B:83:DE:62:75
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C587607332DB820060C43FA0C536
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/s8l-xCVqBQ55i2YlDfcji4PeYnU.roa
Signing time: Tue 02 Jan 2024 12:33:04 +0000
ROA not before: Tue 02 Jan 2024 12:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64458
IP address blocks: 62.60.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c5:87:60:73:32:db:82:00:60:c4:3f:a0:c5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3c97ec4256a050e798b66250df7238b83de6275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:b0:bc:c4:60:44:7f:e5:68:56:3b:24:7d:
be:78:26:ae:6f:50:c3:0a:0b:0d:bd:34:50:a8:b2:
1e:1a:12:6d:9c:98:d9:c2:af:07:b4:df:4f:0e:7c:
5c:cc:b3:02:4a:55:97:fb:ba:cb:fb:05:b2:c2:44:
c6:cb:dd:39:67:5b:ce:ef:f7:b0:1e:bc:30:36:cb:
31:01:07:1a:1f:55:11:11:b9:20:b7:14:87:2b:7d:
eb:f9:eb:f9:21:ce:24:21:f0:5b:b7:21:ef:fc:ee:
fe:aa:fd:8f:ed:11:4f:db:15:0e:47:a3:90:5f:7e:
88:7a:3d:85:fa:1a:33:91:bd:fe:af:65:c8:29:75:
90:d6:62:03:a5:df:b5:65:ac:29:43:e2:6c:32:af:
26:d5:06:86:a9:9f:55:5b:77:36:26:dc:37:12:a2:
60:fe:b1:83:a3:d2:39:7c:00:4c:00:fc:55:14:0c:
47:ce:57:cf:5b:b0:a1:34:8a:61:2c:5c:71:40:17:
a5:11:7c:8b:62:29:f0:d2:cb:9d:8f:af:b7:73:09:
f5:9d:4c:03:af:fa:36:01:d7:1f:d4:89:8e:61:e6:
37:15:bd:d5:bd:7e:3b:1b:ca:fc:82:92:ac:f7:cb:
bd:bf:0b:0d:f6:9a:32:58:e8:ce:aa:2c:33:b4:5b:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:7E:C4:25:6A:05:0E:79:8B:66:25:0D:F7:23:8B:83:DE:62:75
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/s8l-xCVqBQ55i2YlDfcji4PeYnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0/22
Signature Algorithm: sha256WithRSAEncryption
61:5e:b9:e4:07:45:6b:fb:31:3f:d2:bb:47:87:1b:d4:77:ce:
ae:79:75:f3:64:d5:47:7c:a8:6a:58:a9:ef:9d:38:62:35:f8:
e5:82:8f:a2:98:4f:21:ea:8f:01:91:92:e5:ea:d7:58:d8:9d:
85:91:ec:db:19:04:96:53:9f:f8:08:f5:6c:a3:41:30:33:91:
cf:3f:a3:f2:f9:13:43:7a:a5:fe:c0:73:09:d6:99:19:e4:d1:
d7:3c:c3:e9:85:21:eb:96:c2:d3:38:d1:74:5d:b5:55:8a:61:
09:61:52:7e:14:87:91:24:fb:e4:f5:8a:14:d7:9f:5c:8c:0f:
c6:d0:fe:4e:38:71:85:f4:a2:db:31:dd:94:0e:b9:a6:26:f0:
a9:96:87:14:66:83:6a:1e:8c:a9:c7:01:15:34:44:c3:7c:da:
07:89:45:ba:19:89:50:47:b6:65:4b:2a:8b:58:68:f3:bb:5f:
01:9f:63:6e:60:89:54:b9:ad:65:58:af:33:4d:44:19:b0:fe:
c4:eb:50:63:8c:32:56:4d:30:ea:38:a4:d5:70:61:df:2f:7b:
a1:7b:98:66:eb:a1:0d:2c:de:82:af:02:63:fa:cc:d9:71:59:
7f:df:25:37:d9:8e:9d:e8:32:4c:44:68:c4:64:65:ea:66:5c:
6e:18:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:01 2024 by rpki-client on console-ams.rpki-client.org