Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
File: AS60542.roa (raw, json)
Hash identifier: CUgFWsRtg55iNZ52pB1y9s8yxl755+ioUULTu3598Hg=
Subject key identifier: 5B:4D:09:B0:1C:33:3B:72:A5:71:BD:2A:4C:B8:94:D4:3A:3C:FC:BD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 41D9452499D2179AE813EC9963B867B24DD3B1CE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
Signing time: Fri 19 Apr 2024 00:55:50 +0000
ROA not before: Fri 19 Apr 2024 00:50:50 +0000
ROA not after: Fri 18 Apr 2025 00:55:50 +0000
asID: 60542
IP address blocks: 191.101.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d9:45:24:99:d2:17:9a:e8:13:ec:99:63:b8:67:b2:4d:d3:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 19 00:50:50 2024 GMT
Not After : Apr 18 00:55:50 2025 GMT
Subject: CN=5B4D09B01C333B72A571BD2A4CB894D43A3CFCBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:25:7e:0e:c7:16:53:aa:5a:3a:13:a6:59:
cc:19:24:2c:f9:1f:82:0a:5e:68:12:7f:e8:03:0d:
23:ac:b1:e4:38:62:04:b4:a4:be:1c:e6:74:24:33:
63:b7:b1:ad:44:7e:df:34:c3:3a:1d:ce:e3:c0:b7:
7c:90:04:54:98:75:e3:e2:b2:2a:68:fb:45:b4:54:
7b:32:2d:89:ed:29:2e:3e:fd:73:92:48:14:35:0b:
5d:39:9e:54:87:45:9a:9e:7b:e7:29:2e:46:59:9b:
19:bb:7f:d2:d4:2e:89:c3:dc:83:67:6a:2f:90:e8:
1b:51:d0:ac:2d:5c:df:d3:b6:4f:68:8f:9a:cb:e2:
31:2c:31:53:a9:89:4f:c3:c6:60:00:6c:9e:02:44:
19:91:89:51:46:76:ee:fb:86:46:47:a9:ca:d7:c1:
d4:7c:13:44:24:b9:23:d7:1b:68:fe:59:5a:ad:1f:
5c:8c:a3:89:08:47:f8:e6:9b:79:65:e6:4e:9b:46:
ec:c8:e6:71:60:0e:38:7f:ef:c5:83:ee:f5:c3:16:
d3:a2:d0:62:4f:bc:18:0c:03:1f:8b:44:34:63:66:
5b:52:05:31:86:56:67:f3:29:d6:c3:61:c6:e6:cc:
a9:45:0e:09:bd:6f:41:bb:9b:c9:c0:fd:8a:f4:a2:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:09:B0:1C:33:3B:72:A5:71:BD:2A:4C:B8:94:D4:3A:3C:FC:BD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d6:da:15:7b:58:99:a9:4d:e5:a1:06:5a:50:82:95:d1:b3:
97:9b:c5:64:4c:34:5a:91:20:86:5b:57:5a:a9:cd:63:1d:79:
13:30:ff:28:2a:d5:10:db:a5:6e:7e:83:a8:d4:24:2a:80:7b:
11:63:d1:98:ce:3d:9a:9a:6b:64:f5:89:09:8d:22:6a:67:10:
ba:34:dc:23:98:d8:7d:53:46:d7:91:85:ae:da:0a:fe:25:79:
52:fb:fe:5f:2f:9c:81:67:34:2a:16:f4:7c:1a:2c:83:a0:61:
0f:db:be:1a:6f:a5:db:f3:91:10:c3:17:45:75:9a:35:56:d4:
5d:34:68:db:a6:f0:ad:b7:ce:ea:b2:99:14:82:d5:98:30:f6:
ee:b1:91:f8:13:46:b8:cc:bd:4b:50:4c:fa:4d:7c:af:dd:dd:
9a:27:91:5d:10:ff:30:00:9c:c8:07:0e:e5:33:ba:8c:d3:b5:
be:f7:66:3a:b4:5e:82:88:e1:3e:07:11:e7:a5:87:40:cf:da:
9d:83:e0:86:b3:31:38:df:81:45:7a:1e:06:33:6c:d6:3a:c6:
85:2e:f7:7c:50:8d:60:e0:61:0f:53:86:10:88:bb:96:ec:4e:
19:0d:13:a0:dc:cb:d9:4a:ef:9d:a9:8d:08:87:05:59:5f:53:
a2:de:97:da
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUQdlFJJnSF5roE+yZY7hnsk3Tsc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA0MTkwMDUwNTBaFw0yNTA0MTgwMDU1NTBaMDMxMTAvBgNV
BAMTKDVCNEQwOUIwMUMzMzNCNzJBNTcxQkQyQTRDQjg5NEQ0M0EzQ0ZDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtSV+DscWU6paOhOmWcwZJCz5
H4IKXmgSf+gDDSOsseQ4YgS0pL4c5nQkM2O3sa1Eft80wzodzuPAt3yQBFSYdePi
sipo+0W0VHsyLYntKS4+/XOSSBQ1C105nlSHRZqee+cpLkZZmxm7f9LULonD3INn
ai+Q6BtR0KwtXN/Ttk9oj5rL4jEsMVOpiU/DxmAAbJ4CRBmRiVFGdu77hkZHqcrX
wdR8E0QkuSPXG2j+WVqtH1yMo4kIR/jmm3ll5k6bRuzI5nFgDjh/78WD7vXDFtOi
0GJPvBgMAx+LRDRjZltSBTGGVmfzKdbDYcbmzKlFDgm9b0G7m8nA/Yr0omSXAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUW00JsBwzO3Klcb0qTLiU1Do8/L0wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjA1NDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZfMw
DQYJKoZIhvcNAQELBQADggEBAH3W2hV7WJmpTeWhBlpQgpXRs5ebxWRMNFqRIIZb
V1qpzWMdeRMw/ygq1RDbpW5+g6jUJCqAexFj0ZjOPZqaa2T1iQmNImpnELo03COY
2H1TRteRha7aCv4leVL7/l8vnIFnNCoW9HwaLIOgYQ/bvhpvpdvzkRDDF0V1mjVW
1F00aNum8K23zuqymRSC1Zgw9u6xkfgTRrjMvUtQTPpNfK/d3ZonkV0Q/zAAnMgH
DuUzuozTtb73Zjq0XoKI4T4HEeelh0DP2p2D4IazMTjfgUV6HgYzbNY6xoUu93xQ
jWDgYQ9ThhCIu5bsThkNE6Dcy9lK752pjQiHBVlfU6Lel9o=
-----END CERTIFICATE-----
Generated at Fri May 10 10:50:04 2024 by rpki-client on console-fra.rpki-client.org