Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: my8M5PSor8ob3xPtEOSHku9u/R2GWTpCGEaDYR/gkaI=
Subject key identifier: CF:D8:8E:01:54:CB:91:81:FF:BC:79:E8:09:B5:7A:8F:10:5D:FE:D2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 29A121D33F7B072D9D7A2786EF8F596B0BAC21F9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa
Signing time: Mon 31 Jul 2023 18:45:50 +0000
ROA not before: Mon 31 Jul 2023 18:40:50 +0000
ROA not after: Mon 29 Jul 2024 18:45:50 +0000
asID: 60781
IP address blocks: 141.11.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a1:21:d3:3f:7b:07:2d:9d:7a:27:86:ef:8f:59:6b:0b:ac:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 31 18:40:50 2023 GMT
Not After : Jul 29 18:45:50 2024 GMT
Subject: CN=CFD88E0154CB9181FFBC79E809B57A8F105DFED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:77:8c:07:f7:9d:39:c2:be:06:88:76:f5:94:
95:43:f4:02:d1:ee:be:ec:7c:20:79:5a:e8:9f:cb:
3a:e6:10:2a:e0:f3:f1:16:89:e8:dc:3d:87:c0:b5:
61:04:0b:10:cd:2c:b3:23:28:36:c8:d9:90:6a:33:
cf:43:8d:fe:84:8e:c1:4c:05:da:a4:26:9d:a3:56:
0a:6d:c9:91:f2:db:fe:1d:66:b7:6e:aa:8b:88:cc:
b4:cd:08:90:4a:cf:bf:2a:8b:dd:54:35:cc:85:5c:
48:f2:68:04:a3:03:14:65:9e:49:66:ea:0a:81:b2:
2d:91:67:fe:88:f5:df:f6:6f:4d:1d:31:1a:74:e5:
f1:1b:4d:6a:9b:7d:6d:0a:2f:93:cd:91:c6:11:38:
ea:91:d7:f3:45:5d:68:5c:81:14:5e:36:45:49:ca:
72:07:96:2b:8a:7a:d0:e9:c2:13:7d:b7:38:0d:33:
f3:1d:24:11:44:e2:0e:ba:cb:ca:db:30:26:35:f9:
28:a6:7e:d8:7f:13:4b:09:9b:34:f3:23:e6:5b:cc:
aa:2c:48:c6:7d:11:8b:76:33:16:42:e5:c7:19:3b:
e8:e7:ac:b3:98:9e:bd:0c:79:22:9d:cc:97:fb:be:
48:f3:62:a2:84:23:82:1c:a9:a4:56:29:a1:79:8f:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D8:8E:01:54:CB:91:81:FF:BC:79:E8:09:B5:7A:8F:10:5D:FE:D2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.232.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:fd:12:34:d9:d3:31:6f:41:af:9b:71:2f:06:72:ae:d6:a3:
a9:2c:da:3a:5e:62:76:31:07:4a:22:fc:32:34:ba:ea:a1:7c:
0c:cf:07:85:7b:24:3d:c9:6b:f5:2a:b0:af:c0:27:34:29:7f:
8a:cb:84:71:fa:05:ef:b4:c3:b0:6f:fb:9f:db:e7:04:0a:15:
a9:04:61:a9:71:12:dc:76:d4:3f:08:5d:d2:ef:4a:82:71:64:
3f:d0:72:c8:ef:1a:0d:a2:6a:a5:b1:97:d0:38:77:0f:90:de:
42:88:50:21:53:d2:40:9d:e7:6f:fd:b1:84:57:82:a9:06:9e:
7c:06:df:41:9b:76:81:2c:60:3c:5a:5f:3f:91:57:e4:f7:0a:
07:4b:fa:45:ff:fc:79:3b:4d:08:8c:18:22:07:25:d1:f1:fc:
a4:47:20:08:c6:9a:50:70:1d:f2:26:00:59:4c:db:e6:e0:39:
67:61:b0:58:80:01:9e:21:ee:ac:48:a4:a6:03:3a:f7:10:62:
12:fb:8e:9b:9a:31:56:b5:a9:90:fd:75:75:bc:75:0d:03:d5:
98:ed:2c:51:df:9f:59:45:92:f8:9b:9e:af:20:db:85:6e:6a:
23:c0:2d:13:80:4c:5e:46:5e:0c:d3:4e:46:f9:f8:a9:c9:dc:
fd:d3:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:35 2024 by rpki-client on console-fra.rpki-client.org