Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/meaUpZSoMJhHPxVhWujN8rkLcqY.roa
File: meaUpZSoMJhHPxVhWujN8rkLcqY.roa (raw, json)
Hash identifier: hME7Ry7ifDyMOAcnNtGO/lk/rkO/hB5htJB3Lw7+dGU=
Subject key identifier: 99:E6:94:A5:94:A8:30:98:47:3F:15:61:5A:E8:CD:F2:B9:0B:72:A6
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018E4CE95A1F80BD6DA861142F3B217A55C3
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/meaUpZSoMJhHPxVhWujN8rkLcqY.roa
Signing time: Sun 17 Mar 2024 14:55:45 +0000
ROA not before: Sun 17 Mar 2024 14:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212835
IP address blocks: 217.60.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4c:e9:5a:1f:80:bd:6d:a8:61:14:2f:3b:21:7a:55:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Mar 17 14:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99e694a594a83098473f15615ae8cdf2b90b72a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:92:bf:48:ab:84:d0:5d:86:ea:f0:14:bf:
9d:6e:73:49:c1:d1:30:ab:62:e8:0b:ac:c1:f2:4e:
aa:96:28:3a:50:38:51:1a:ce:0d:22:68:c9:fa:bc:
c9:54:b3:f3:1b:9e:3f:04:4c:c6:a2:1c:93:d7:e5:
26:43:0d:24:e1:1f:56:12:da:37:d4:60:01:42:17:
88:92:5a:4d:e5:19:0f:3b:75:18:98:97:b9:ea:28:
e4:e5:74:f7:79:09:15:e5:bd:bc:24:18:fe:bd:17:
c4:29:03:e4:cf:54:40:6a:40:a2:e1:d4:99:03:b4:
fb:dc:ce:82:6d:a1:63:fe:98:4b:c0:a4:10:0b:5f:
a6:ad:4e:46:ce:1b:2e:c5:ca:cd:e6:23:16:29:3b:
0c:91:89:83:df:21:a5:35:be:63:41:5b:61:3a:3d:
7d:04:4d:cb:3f:c6:57:05:10:fb:0f:2f:54:e5:7e:
1c:c8:29:5a:bc:54:b8:05:1c:fa:a5:81:13:82:61:
d2:65:4e:30:bb:a9:40:20:fe:18:bb:67:d0:e7:0e:
f2:d1:d7:ae:9a:9a:21:8c:bb:95:2e:76:06:93:5c:
d8:49:df:5c:81:8b:74:75:73:91:e7:48:04:dc:fb:
b7:0a:67:b8:5f:2c:3b:d6:a1:c5:8a:98:bb:69:db:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:94:A5:94:A8:30:98:47:3F:15:61:5A:E8:CD:F2:B9:0B:72:A6
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/meaUpZSoMJhHPxVhWujN8rkLcqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.246.0/24
Signature Algorithm: sha256WithRSAEncryption
51:35:58:1d:41:b0:3c:78:19:b3:7f:63:5e:ff:0f:7b:6f:d4:
51:9a:75:08:c7:30:0a:2d:6f:99:d6:66:7b:35:07:49:b8:81:
e4:fc:ab:6c:67:49:68:aa:e3:21:12:f1:37:7f:c6:27:ab:51:
34:9b:98:c1:6c:04:10:8f:bf:f2:8e:b2:c3:4c:aa:ac:bd:0a:
10:7c:06:ee:62:24:98:2b:0c:f9:5c:4e:fc:b8:40:d2:15:b6:
d8:e6:19:1c:fd:f3:a4:28:26:3e:e0:2f:a6:50:75:af:00:5d:
89:90:65:24:2a:ee:22:77:47:0f:95:a0:59:90:dc:00:28:a9:
01:94:3e:d2:0e:37:48:6a:29:d7:a4:7d:be:ca:4c:45:41:46:
bd:65:2e:59:d1:b1:0b:3f:ae:01:1f:e4:1b:f7:11:77:18:77:
61:38:51:58:aa:91:57:9a:26:fb:7d:5d:de:6e:c1:be:6a:27:
78:a9:77:6a:eb:e5:f5:0d:42:30:d6:e8:8b:9b:d4:c4:70:44:
1c:f7:3d:ab:87:f0:b8:1d:04:2a:fb:fb:54:a3:cd:d5:15:8c:
33:e1:e2:74:23:89:ff:70:e1:23:4c:23:5f:56:40:c5:38:08:
ee:3d:85:f1:8a:4d:d6:9c:42:ee:75:5b:d7:ce:cf:a7:fd:7f:
81:55:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:54:57 2024 by rpki-client on console-ams.rpki-client.org