Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/preAFPo1bve2NRyP7Y1vtky2xqU.roa
File: preAFPo1bve2NRyP7Y1vtky2xqU.roa (raw, json)
Hash identifier: btyTNIiuqN0ckKo+bDFW2CCQ8+34KoFLtyyl1l+pnM4=
Subject key identifier: A6:B7:80:14:FA:35:6E:F7:B6:35:1C:8F:ED:8D:6F:B6:4C:B6:C6:A5
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 018CC6B7A48E21C7C338003C97AA59C724C4
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/preAFPo1bve2NRyP7Y1vtky2xqU.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 147.189.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a4:8e:21:c7:c3:38:00:3c:97:aa:59:c7:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6b78014fa356ef7b6351c8fed8d6fb64cb6c6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:1a:3a:1c:77:c5:da:84:ea:ef:50:ee:02:
33:19:e8:03:4d:64:bf:60:5c:41:33:24:d8:8d:b2:
1f:00:34:8d:74:2b:48:23:12:f1:f4:82:bf:f2:8c:
7b:75:70:86:31:a7:e3:9e:f8:24:51:c3:88:54:16:
4b:a5:10:fe:c4:c7:ab:1b:d6:f0:54:a1:80:ab:30:
c3:93:25:80:1f:a2:11:e1:6b:94:e2:c0:01:0b:f3:
79:70:ea:f1:e0:48:6d:bf:65:4d:bf:b5:05:33:07:
c4:ec:b3:52:46:4b:7d:76:41:51:55:dc:e2:55:98:
34:06:91:d4:91:5f:55:a0:c3:f0:f6:8a:39:d8:fe:
44:ec:66:08:09:be:51:f2:ce:9b:6c:8f:0e:b1:64:
7b:44:d4:c6:14:4f:cc:47:db:62:74:b0:4b:d2:ac:
25:fb:62:59:dd:b2:ec:7b:d7:8f:5a:9a:f9:33:54:
be:f9:e0:82:3b:3a:1f:cd:85:5f:9d:68:b6:5e:b9:
50:19:71:21:ca:43:77:46:21:9e:94:4b:27:f1:f7:
3f:ad:02:49:7b:f5:c9:56:62:49:31:14:b5:06:cd:
e8:7e:cf:24:a0:f6:ab:ed:96:b7:5d:26:d3:0b:c2:
4a:48:32:a5:97:de:bc:f0:64:05:72:7c:72:08:10:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:80:14:FA:35:6E:F7:B6:35:1C:8F:ED:8D:6F:B6:4C:B6:C6:A5
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/preAFPo1bve2NRyP7Y1vtky2xqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.162.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ca:17:1d:52:f8:d6:05:be:7d:08:a2:57:b4:a8:e1:3f:d1:
da:20:85:16:1c:4d:d1:a6:79:8e:90:8e:2e:6f:20:40:14:ae:
9c:88:cf:56:13:1c:90:06:57:11:d9:da:aa:4c:ae:d8:34:06:
ac:72:8d:06:58:44:df:ed:f6:53:d2:e2:ac:0d:7e:e1:fe:2b:
95:d1:dc:82:a4:a6:3e:c8:ae:ef:f8:b9:50:b3:70:b5:c2:35:
1f:cc:d2:37:b4:ed:48:1a:45:01:92:22:a9:3f:57:40:bb:fa:
d4:0d:d5:03:4b:50:96:41:5f:30:db:df:c4:55:68:76:9b:cd:
07:0b:ef:82:95:bb:a4:9d:af:f8:98:c7:35:48:3e:1a:21:39:
66:e2:d0:86:40:55:1e:c9:e2:7e:87:e1:37:d0:de:95:7a:12:
9f:15:31:f2:51:1d:0e:7a:e6:27:41:00:65:fb:0d:75:80:27:
ec:c7:fc:42:7f:f0:60:7e:66:f9:50:46:f3:52:2c:75:eb:a1:
4e:41:59:14:84:d1:9c:c8:e2:7f:d1:46:2a:95:92:2c:e5:a8:
29:7a:c0:7c:90:af:89:bc:72:f0:48:1b:e5:da:9a:73:d7:dd:
92:e5:71:47:25:e2:07:40:ff:04:aa:cb:74:47:c3:c4:d4:71:
db:e7:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:39:25 2024 by rpki-client on console-fra.rpki-client.org