Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7MsLgVfA8KVXLyhNVVPweJej120.roa
File: 7MsLgVfA8KVXLyhNVVPweJej120.roa (raw, json)
Hash identifier: WP2ThwcyCvRKPqDvO/ozP4Uhly1YdIPQpszDtI+pYWM=
Subject key identifier: EC:CB:0B:81:57:C0:F0:A5:57:2F:28:4D:55:53:F0:78:97:A3:D7:6D
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018EC13187B432691F830A4E2AD4DE96E72C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7MsLgVfA8KVXLyhNVVPweJej120.roa
Signing time: Tue 09 Apr 2024 04:50:32 +0000
ROA not before: Tue 09 Apr 2024 04:50:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 217.60.243.0/24 maxlen: 24
217.60.250.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:31:87:b4:32:69:1f:83:0a:4e:2a:d4:de:96:e7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 9 04:50:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eccb0b8157c0f0a5572f284d5553f07897a3d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:46:d8:6f:40:72:6d:48:ec:a9:63:f1:0c:
cd:0f:6f:15:d5:18:18:c3:bf:38:bb:45:26:34:d2:
00:8d:75:a6:28:96:de:b7:d6:da:da:51:20:85:32:
6f:91:9b:85:65:e3:c0:79:9e:cf:6d:bb:86:1f:0e:
17:ea:a1:24:0b:95:76:8e:9b:3e:49:1b:c4:cd:d4:
66:56:e5:3d:c3:cd:84:45:fc:0f:4b:e8:5f:5c:27:
07:2a:3e:8d:ec:3a:99:73:43:67:17:1b:e9:0f:18:
8b:68:c7:98:14:c1:7b:d0:90:8d:ff:81:48:8d:e3:
74:9a:17:37:f1:93:0f:a7:4e:85:28:37:2a:e9:3f:
d1:e7:73:35:82:a2:e3:99:fd:3b:9e:5d:1c:9e:ca:
47:00:1e:e2:72:da:02:c0:69:ff:f7:20:4f:77:18:
21:8d:69:98:5b:a0:bd:a4:ff:8e:44:25:2b:37:50:
a0:e0:7b:ae:eb:b9:2b:7d:b0:c0:11:89:10:7b:ed:
7d:27:61:1f:e3:a1:41:95:07:6e:24:2d:3b:6b:ff:
2f:78:ba:ce:f0:74:fd:e3:23:5a:54:25:54:61:3e:
d9:99:96:c7:8a:28:2f:be:5c:74:0e:36:45:22:ae:
75:1e:49:32:3c:15:36:42:88:ea:61:0f:0a:74:e1:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:0B:81:57:C0:F0:A5:57:2F:28:4D:55:53:F0:78:97:A3:D7:6D
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7MsLgVfA8KVXLyhNVVPweJej120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.243.0/24
217.60.250.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:04:2d:56:c6:9e:1b:87:93:21:8d:a6:b0:b2:b2:89:e5:d2:
53:00:9b:23:00:12:06:b0:9c:0c:08:71:f3:26:41:84:74:31:
d6:e3:a9:1c:ac:e2:43:ff:ba:99:2c:0a:d7:c6:c9:38:b5:6d:
d2:7e:20:fe:68:dd:fc:05:30:6b:2c:6a:ea:51:f6:bf:09:9e:
72:d7:21:fe:07:56:6d:43:e7:52:dc:a7:01:3f:2c:9a:db:a5:
4c:2b:60:1d:5c:29:9b:61:6c:05:b8:9c:5d:73:ef:91:95:b6:
75:c9:60:f4:1e:94:2b:a9:d6:62:2a:77:d0:49:39:ee:d6:ef:
74:47:75:a8:08:2b:23:65:e8:1a:58:ec:7c:1e:aa:4a:7a:15:
59:44:79:07:ac:2c:25:eb:c8:cb:a2:36:ab:66:51:5e:88:2e:
1f:9a:6a:12:93:4c:9a:65:ff:07:35:6b:e6:2e:fa:16:47:37:
d6:4c:80:e8:c0:e7:0f:f6:29:95:88:6c:a6:c3:10:04:d9:3d:
db:7c:f9:96:bb:05:54:3e:29:14:14:93:59:5b:e2:a5:7c:b2:
1a:e3:86:db:cc:3d:36:b7:c5:8b:3e:fe:f6:61:f4:59:d9:a7:
a4:01:ad:23:53:9a:e1:16:9d:09:fa:dc:b9:2e:5b:0d:2e:6a:
13:77:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 00:25:50 2024 by rpki-client on console-ams.rpki-client.org