Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/n35rgtMJSLTvy0_x6zm60m0eeW0.roa
File: n35rgtMJSLTvy0_x6zm60m0eeW0.roa (raw, json)
Hash identifier: lYkmfD2zjlIGyFWxLRGAJcsbSY3tllDj9JCJIPVG1TY=
Subject key identifier: 9F:7E:6B:82:D3:09:48:B4:EF:CB:4F:F1:EB:39:BA:D2:6D:1E:79:6D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794D3E14C3F1DE6DC4DEF898D344911
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/n35rgtMJSLTvy0_x6zm60m0eeW0.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 64.137.16.0/24 maxlen: 24
104.249.25.0/24 maxlen: 24
104.249.63.0/24 maxlen: 24
104.249.62.0/24 maxlen: 24
216.173.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d3:e1:4c:3f:1d:e6:dc:4d:ef:89:8d:34:49:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f7e6b82d30948b4efcb4ff1eb39bad26d1e796d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:a7:61:13:d7:70:11:fa:e7:fb:a3:a5:e3:
e5:37:5b:34:fd:32:23:30:42:2b:d0:0a:7f:b5:ef:
f4:be:4e:1f:5d:9a:8f:9b:d8:35:86:d4:04:30:cb:
08:cf:7a:fa:31:ee:36:cf:90:eb:f7:ba:6c:8c:28:
e0:d9:ef:c6:79:24:5f:ff:60:4b:df:59:0f:9e:f3:
6d:e3:01:39:6e:d9:09:cd:d4:98:22:2b:ff:16:4f:
79:5e:42:3c:a2:4a:b1:bd:c2:22:dd:54:c4:b4:15:
22:f3:f0:3e:f3:e1:eb:9f:49:cd:95:e3:ee:21:65:
89:46:06:c7:a3:82:3e:6f:56:9c:20:a9:15:12:02:
67:96:0e:1e:01:f6:f8:ac:08:d9:dd:6b:59:42:c5:
62:78:ae:cc:9a:e6:ef:45:5e:4d:ed:e7:61:97:9a:
18:5e:a0:12:b4:b7:35:9e:cc:40:22:63:b4:65:18:
c9:fd:1b:35:0c:04:6e:4e:7c:20:21:11:0c:96:f0:
9a:90:43:c2:21:f4:30:a5:a0:57:16:2b:20:c0:2e:
67:2b:c1:49:a9:13:33:a0:e6:64:cf:49:0f:3a:e8:
37:a6:b3:0d:bc:3e:dd:a4:e9:c5:54:48:e8:47:ed:
ad:4c:bd:e7:eb:da:3c:4c:d9:8a:76:1b:0b:6b:12:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:6B:82:D3:09:48:B4:EF:CB:4F:F1:EB:39:BA:D2:6D:1E:79:6D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/n35rgtMJSLTvy0_x6zm60m0eeW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.16.0/24
104.249.25.0/24
104.249.62.0/23
216.173.112.0/21
Signature Algorithm: sha256WithRSAEncryption
00:73:13:b5:4e:c2:ea:b2:90:d6:49:1d:25:33:8b:ad:af:6d:
b1:91:f3:3f:3b:30:fc:21:f9:44:e4:2c:dd:96:dc:35:b7:3d:
b4:c6:b7:7b:d4:af:b7:9a:d9:2b:7a:23:3f:e0:77:bb:55:3c:
44:3a:bd:bf:28:91:74:6c:ad:db:c2:c2:d8:d0:96:b6:63:25:
d9:f7:2f:9e:9c:be:61:33:5c:dd:ac:d1:f9:e1:25:d2:97:a0:
ea:25:e7:a5:15:eb:7f:97:b4:4c:e1:ed:d9:7f:fc:9a:1f:a6:
b6:d9:97:f8:d2:f0:f7:93:65:ad:51:6e:90:7c:af:27:f3:3d:
10:bf:94:b7:ce:22:16:7c:bc:fc:cb:72:9b:89:88:aa:38:18:
e8:f0:74:d5:f0:a5:9b:1a:01:03:c4:1c:77:6f:50:09:66:f5:
ae:d1:cc:da:59:fa:92:cc:b9:57:89:c1:63:b0:f6:43:09:61:
42:63:fa:01:c9:5e:69:23:3e:c1:bc:d9:5e:bc:2f:6f:6c:70:
f6:d6:d9:2e:91:4b:85:a5:64:5d:5d:0d:b9:7b:a6:50:bc:bc:
8e:28:c1:5e:30:ab:1a:cb:2f:19:56:b7:0e:40:de:62:a3:3d:
67:93:0b:05:6f:5a:45:df:2f:32:13:7a:c9:46:59:27:03:a6:
8c:af:28:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:45:14 2024 by rpki-client on console-ams.rpki-client.org