Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/Y7p_JdSQmNRBp37Laoca1XzO5os.roa
File: Y7p_JdSQmNRBp37Laoca1XzO5os.roa (raw, json)
Hash identifier: r8fHMAKU7MNDpzo22tmgXJ5Bqb5ghqnm3GVNvloenaA=
Subject key identifier: 63:BA:7F:25:D4:90:98:D4:41:A7:7E:CB:6A:87:1A:D5:7C:CE:E6:8B
Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Certificate serial: 018CC3B7253CED84F4C3927F1C26FB5A9ECE
Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/Y7p_JdSQmNRBp37Laoca1XzO5os.roa
Signing time: Mon 01 Jan 2024 06:30:08 +0000
ROA not before: Mon 01 Jan 2024 06:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59500
IP address blocks: 91.200.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:25:3c:ed:84:f4:c3:92:7f:1c:26:fb:5a:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63ba7f25d49098d441a77ecb6a871ad57ccee68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:96:66:8f:97:8f:04:43:36:a4:b4:73:9b:
6e:3d:e9:de:1f:10:e3:3d:d5:76:c6:99:6d:79:f1:
1c:c4:45:46:49:ef:5a:b9:26:e7:37:32:d3:66:b1:
c9:1d:1d:a7:dc:b4:2f:ad:92:28:1a:fc:35:8c:6e:
ca:bd:c5:7a:84:7d:29:22:2f:e5:94:a9:01:4a:7d:
1f:e0:a3:31:b6:fb:b2:2a:9c:9e:51:69:6d:91:50:
2c:da:39:91:3d:b2:c6:ff:f3:e6:02:69:b1:87:7f:
af:88:e3:6f:9f:24:74:e6:38:06:a2:17:cb:64:be:
dc:cf:b5:31:a3:9e:bd:c1:7b:89:05:f6:10:a2:2b:
b1:02:77:32:04:a8:dc:da:60:8d:27:a5:6f:5f:c4:
49:39:05:6f:b9:eb:db:9c:6e:d9:6c:1e:bd:cb:fc:
e9:2f:14:10:85:d1:00:ad:0a:3d:c5:69:5a:4c:51:
1b:75:5c:fe:17:03:ef:7e:60:a6:fa:14:8b:4a:83:
b9:5c:5c:d5:fb:55:30:59:3a:76:41:3c:ae:d8:c4:
d4:a4:c9:24:47:f1:c6:09:d3:eb:7f:f7:01:61:a8:
26:ac:bb:f6:16:f5:f8:4f:f6:3f:6e:83:0f:2c:64:
8d:18:85:83:60:f9:6b:e2:b7:2f:9f:30:2b:69:50:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BA:7F:25:D4:90:98:D4:41:A7:7E:CB:6A:87:1A:D5:7C:CE:E6:8B
X509v3 Authority Key Identifier:
keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/Y7p_JdSQmNRBp37Laoca1XzO5os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.60.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6a:9a:3d:a2:62:1f:28:b8:dc:e5:71:3b:29:44:d7:0c:e9:
03:30:fa:bb:6f:82:0f:d0:1b:ee:07:c4:1a:a2:c2:9b:7e:23:
85:51:ad:cc:19:10:79:47:7f:ab:31:12:85:ec:e3:6f:4f:02:
c0:a3:8d:d7:e7:be:5c:12:30:65:83:7e:3f:c4:8e:52:1f:fc:
f5:81:2a:a8:fb:52:af:55:f8:e5:a0:2e:8d:a8:17:dc:c3:e8:
79:10:5c:63:d2:06:a7:8e:3e:e8:d5:10:c8:79:56:58:93:65:
81:4c:2a:75:c0:ba:34:95:0e:b7:e1:c0:33:5a:89:bc:1d:a8:
00:3a:2e:65:12:4f:e4:18:b0:96:9d:56:6a:50:1b:ec:3c:56:
50:19:7c:0d:02:07:02:25:b9:eb:49:62:c4:0f:05:e2:6a:62:
ed:c8:ae:57:16:80:31:13:9d:8b:c7:65:50:fd:82:89:ac:80:
46:5a:dd:41:15:cc:86:93:d6:1f:34:17:e2:77:5f:dd:53:ac:
d5:ec:8b:94:9d:96:15:07:a1:2d:e9:a3:47:44:c9:1d:99:51:
3f:13:25:24:5f:ed:af:f1:9f:ed:0d:d2:5e:2c:e7:df:74:1b:
14:cf:03:82:bd:27:8a:49:b1:6f:bc:1b:5e:2b:01:98:bb:50:
08:b1:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:18 2024 by rpki-client on console-ams.rpki-client.org