Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/60KvSLj6HQZwAOmNiwR9WMDOI3s.roa
File: 60KvSLj6HQZwAOmNiwR9WMDOI3s.roa (raw, json)
Hash identifier: 395ndy2zANz3I/NIR4PPsfiuryqclQ+pjeGLUUa6Y30=
Subject key identifier: EB:42:AF:48:B8:FA:1D:06:70:00:E9:8D:8B:04:7D:58:C0:CE:23:7B
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 018CC4938A164B922BA31D098F7084B1A1E7
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/60KvSLj6HQZwAOmNiwR9WMDOI3s.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16117
IP address blocks: 62.116.224.0/19 maxlen: 19
84.23.128.0/19 maxlen: 19
185.98.244.0/22 maxlen: 22
79.142.208.0/20 maxlen: 20
213.141.64.0/19 maxlen: 19
2001:b48::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8a:16:4b:92:2b:a3:1d:09:8f:70:84:b1:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb42af48b8fa1d067000e98d8b047d58c0ce237b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:56:be:eb:05:48:e4:7d:0b:e3:6b:0f:f1:
4b:dc:a3:66:26:9d:e5:67:a8:c5:51:08:cb:31:03:
49:03:25:c2:89:9d:64:71:7e:b7:ba:99:8a:5c:75:
d7:1c:1e:fc:2c:ef:b6:ec:47:2d:da:2f:64:61:7f:
6d:e2:3c:9b:ed:3f:78:70:18:54:27:6b:c8:3d:41:
4b:47:09:dc:9d:d4:41:d8:1b:4a:62:14:21:81:fa:
4e:20:b5:9f:96:71:94:f4:b1:23:3e:79:a6:94:0b:
09:48:12:66:b7:ba:ad:17:cb:89:e1:fb:03:3c:58:
51:95:41:3c:f4:a1:e6:ce:8f:db:a0:08:ab:b3:ef:
a6:22:fc:87:ce:8c:7c:cf:40:54:e0:02:82:59:c9:
06:4e:2d:09:8d:53:5b:73:31:21:e9:de:41:68:0f:
03:7d:af:74:c6:7b:4d:51:29:be:ca:91:e1:65:be:
c6:18:62:e5:d0:61:6b:c9:a6:3e:2f:6c:d7:62:d8:
65:70:15:b5:f0:86:e8:7a:da:3c:e8:61:7c:e1:5b:
b1:8d:61:d0:e6:e1:da:e3:a1:bb:08:14:77:c9:5d:
0a:fe:2a:68:26:5f:41:68:35:61:db:05:f4:2a:ee:
10:41:f4:a7:02:1c:02:20:70:9d:4e:bb:ad:fd:8c:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:AF:48:B8:FA:1D:06:70:00:E9:8D:8B:04:7D:58:C0:CE:23:7B
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/60KvSLj6HQZwAOmNiwR9WMDOI3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.116.224.0/19
79.142.208.0/20
84.23.128.0/19
185.98.244.0/22
213.141.64.0/19
IPv6:
2001:b48::/29
Signature Algorithm: sha256WithRSAEncryption
79:1f:e5:5b:fe:6b:be:33:03:ac:57:0c:b2:88:a9:42:94:dc:
58:8b:65:34:4a:3c:44:c6:40:9b:e3:24:c7:ae:8f:d9:cc:fa:
ad:8b:96:1d:67:eb:30:d9:fa:62:03:f7:48:df:9b:36:d5:1f:
eb:a8:8b:c8:cc:d2:01:d5:94:41:3d:da:e0:55:67:df:e8:87:
60:8c:e2:f8:f1:2e:b1:ce:91:9d:55:b6:56:0c:27:3f:9e:57:
b7:82:d2:87:46:1a:22:b2:3f:7f:f5:1a:ce:bf:7d:29:dc:8e:
a2:c1:e1:ef:9a:7a:70:98:90:bb:82:42:7f:5e:da:0a:e7:f8:
96:08:f1:b1:46:38:e6:e6:09:de:7c:93:2b:4c:8f:87:30:6d:
f8:ff:b0:a2:0b:be:f7:e0:fe:4c:0f:79:dd:24:17:a6:64:57:
cf:28:6e:11:7c:76:fb:9c:e6:f5:e7:c4:45:7b:be:91:85:b4:
bd:f6:6c:cd:31:4f:3e:8e:d1:e2:0f:a2:93:3d:16:69:75:1a:
8b:8d:d9:d4:5e:21:cd:32:70:0a:b0:b0:12:c0:ca:89:84:dd:
4b:d3:ed:d5:f8:0c:a1:e4:4d:ff:1f:20:eb:f2:85:31:8a:a3:
bc:27:8b:90:97:d2:e6:bf:01:d3:0e:36:b8:e5:e6:a5:75:66:
14:6f:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:45:59 2024 by rpki-client on console-fra.rpki-client.org