Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: Mw0Yz7VZkWEk8R/IXYhEXtzgFUBi9qA+JItx0sNc/6w=
Subject key identifier: 90:0F:3D:7F:40:48:86:80:46:1F:0D:A3:B6:7E:AB:F1:6B:DD:3B:E2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0D6379A58F4DC60DDD16A5EF183A2D22FD7A5986
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa
Signing time: Mon 01 Jul 2024 19:05:18 +0000
ROA not before: Mon 01 Jul 2024 19:00:18 +0000
ROA not after: Mon 30 Jun 2025 19:05:18 +0000
asID: 60781
IP address blocks: 141.11.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:63:79:a5:8f:4d:c6:0d:dd:16:a5:ef:18:3a:2d:22:fd:7a:59:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 1 19:00:18 2024 GMT
Not After : Jun 30 19:05:18 2025 GMT
Subject: CN=900F3D7F40488680461F0DA3B67EABF16BDD3BE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:f8:79:5a:44:55:21:3d:7e:38:30:a0:32:
cb:34:4e:df:8a:19:d1:4e:38:35:33:ec:12:7c:b9:
81:a5:05:91:14:65:29:2c:22:e6:c1:2d:f5:0b:67:
96:38:40:6b:92:b3:2a:95:bc:4c:54:35:1c:a5:d6:
1b:e3:7c:11:57:1d:08:78:96:2c:17:5a:17:06:cd:
18:a1:00:34:9b:65:c8:46:ad:00:2c:1a:10:6a:60:
45:99:ba:8b:ac:e1:82:06:13:ee:6c:9b:ad:d4:26:
11:21:0d:c9:37:f4:f9:97:a7:91:fc:79:35:d7:9d:
76:8e:fd:01:07:2b:81:0a:6e:7c:2a:9e:37:f2:ff:
13:9b:6a:0f:a1:60:94:44:34:bd:58:91:9b:40:cd:
1d:6c:e6:47:d8:c4:b4:96:73:88:a7:6a:fe:e6:a6:
77:f8:5b:ee:ab:1f:f0:fc:f2:2a:8a:87:b4:22:63:
9b:cb:07:64:de:dd:4f:83:72:6e:33:37:6b:10:37:
eb:bc:bd:cb:55:4a:6e:4e:60:f5:a0:a0:58:94:e6:
57:fa:d3:f3:e8:92:c1:1b:f7:8f:4c:f8:e7:e2:7f:
b9:09:e3:50:1c:94:57:69:0a:95:0f:68:f3:46:1a:
9e:a6:91:cd:ee:df:db:a6:2b:fd:84:5d:89:fc:f5:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0F:3D:7F:40:48:86:80:46:1F:0D:A3:B6:7E:AB:F1:6B:DD:3B:E2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.232.0/23
Signature Algorithm: sha256WithRSAEncryption
89:19:dd:95:8a:43:7b:cc:53:15:96:9d:dc:e2:a6:b4:1c:f8:
d2:ee:20:87:83:8e:27:da:3e:0d:88:11:8c:27:89:16:82:1a:
a3:d9:24:0d:d3:75:fa:8a:07:79:30:7c:69:5e:73:be:e5:ad:
aa:f6:61:b4:d4:af:e1:37:3c:34:80:1e:8e:44:c6:7d:1f:84:
27:d4:a8:f0:3c:75:c9:15:b1:fc:45:e4:0b:57:85:2b:40:f2:
d9:a8:48:9e:83:f3:64:e8:de:c7:f0:19:eb:7b:fd:fc:a4:e6:
f9:d2:9f:71:8c:f9:46:1a:75:a6:d0:4d:dc:92:d7:98:dc:d3:
a1:ae:82:70:53:ee:c2:03:df:b1:23:4d:e0:1e:5b:19:e3:34:
76:44:d6:bd:c8:32:6f:22:6f:4c:1c:e2:02:55:a8:44:82:49:
30:df:7d:5a:10:24:d7:a9:48:45:20:4e:09:cb:a7:7e:dd:78:
7f:fe:aa:71:a3:bb:87:fc:f7:fc:b5:7c:37:86:a2:42:f7:33:
f2:96:71:62:39:1b:e9:c1:07:3c:ab:a1:a3:42:59:8e:79:81:
7a:2a:73:bb:6d:6f:e1:89:a1:e0:1b:b9:4a:ab:34:04:bc:2f:
77:8d:d8:6a:64:c6:fe:de:6b:43:98:88:6f:e7:b1:be:4f:86:
2c:b3:dc:89
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUDWN5pY9Nxg3dFqXvGDotIv16WYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNDA3MDExOTAwMThaFw0yNTA2MzAxOTA1MThaMDMxMTAvBgNV
BAMTKDkwMEYzRDdGNDA0ODg2ODA0NjFGMERBM0I2N0VBQkYxNkJERDNCRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdvh5WkRVIT1+ODCgMss0Tt+K
GdFOODUz7BJ8uYGlBZEUZSksIubBLfULZ5Y4QGuSsyqVvExUNRyl1hvjfBFXHQh4
liwXWhcGzRihADSbZchGrQAsGhBqYEWZuous4YIGE+5sm63UJhEhDck39PmXp5H8
eTXXnXaO/QEHK4EKbnwqnjfy/xObag+hYJRENL1YkZtAzR1s5kfYxLSWc4inav7m
pnf4W+6rH/D88iqKh7QiY5vLB2Te3U+Dcm4zN2sQN+u8vctVSm5OYPWgoFiU5lf6
0/PoksEb949M+Ofif7kJ41AclFdpCpUPaPNGGp6mkc3u39umK/2EXYn89ajzAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUkA89f0BIhoBGHw2jtn6r8WvdO+IwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNjA3ODEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGNC+gw
DQYJKoZIhvcNAQELBQADggEBAIkZ3ZWKQ3vMUxWWndziprQc+NLuIIeDjifaPg2I
EYwniRaCGqPZJA3TdfqKB3kwfGlec77lrar2YbTUr+E3PDSAHo5Exn0fhCfUqPA8
dckVsfxF5AtXhStA8tmoSJ6D82To3sfwGet7/fyk5vnSn3GM+UYadabQTdyS15jc
06GugnBT7sID37EjTeAeWxnjNHZE1r3IMm8ib0wc4gJVqESCSTDffVoQJNepSEUg
TgnLp37deH/+qnGju4f89/y1fDeGokL3M/KWcWI5G+nBBzyroaNCWY55gXoqc7tt
b+GJoeAbuUqrNAS8L3eN2Gpkxv7ea0OYiG/nsb5Phiyz3Ik=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-fra.rpki-client.org