Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: cBiqG0jFyw6qTOG/erxYBrqjNrzSUPE1P9VPq+X2bdg=
Subject key identifier: 54:B9:05:61:98:48:82:9E:7D:85:12:0A:22:3B:87:21:9F:68:0C:3C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 38D7D0457F297D99CA93E49B860120343B02DE62
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60781.roa
Signing time: Mon 18 Nov 2024 15:55:07 +0000
ROA not before: Mon 18 Nov 2024 15:50:07 +0000
ROA not after: Mon 17 Nov 2025 15:55:07 +0000
asID: 60781
IP address blocks: 46.202.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d7:d0:45:7f:29:7d:99:ca:93:e4:9b:86:01:20:34:3b:02:de:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 18 15:50:07 2024 GMT
Not After : Nov 17 15:55:07 2025 GMT
Subject: CN=54B905619848829E7D85120A223B87219F680C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:ce:16:25:db:70:40:9d:e7:ce:d3:dc:00:
d1:77:f5:2c:ac:2c:cc:87:b8:71:82:4a:51:60:ed:
0b:1f:43:1f:c8:3f:a8:c4:4a:c1:5b:f3:7c:b7:7b:
05:a9:92:a7:1c:b3:e9:0b:b3:c2:4c:fe:e5:80:bb:
e0:35:16:aa:6c:7b:1b:c7:0d:c8:59:51:9f:ac:ac:
24:ad:4d:55:91:ec:8d:a7:a4:2f:3e:79:63:8b:12:
eb:28:79:df:73:9e:08:98:52:54:c1:ab:62:53:72:
f8:40:b5:e6:b8:8b:14:4a:c4:3c:37:4f:34:9d:e9:
1b:83:10:b5:20:4c:04:0e:6a:e3:d7:d0:3f:bf:8d:
e7:bd:bf:58:17:6e:fc:90:39:d1:a9:2b:31:df:e9:
39:44:ac:fd:f3:ff:c7:27:4d:d8:51:ae:44:63:4e:
ea:2f:fb:76:b5:05:a2:65:70:23:ec:de:6d:c9:fb:
27:8a:51:da:e8:36:2b:91:bb:e4:fb:3a:7b:b5:e1:
05:12:ff:aa:9e:02:99:df:fc:0e:60:84:80:ea:6c:
1b:26:eb:62:ad:5a:78:9e:ac:7d:2d:65:9b:0e:7c:
0d:86:bd:e6:1e:37:c3:ef:2e:e4:ce:e0:d6:c6:9c:
ea:8c:0b:d4:63:b5:ee:cb:93:7d:f5:0b:5a:d6:a1:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B9:05:61:98:48:82:9E:7D:85:12:0A:22:3B:87:21:9F:68:0C:3C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.254.0/24
Signature Algorithm: sha256WithRSAEncryption
96:08:59:06:ef:82:ac:73:72:4f:a0:75:04:73:68:34:db:69:
28:23:1a:2e:30:18:db:ed:5f:32:8b:c1:d3:1c:98:9a:09:85:
ad:94:19:33:02:30:86:79:95:ec:37:b9:f9:79:fc:86:2b:08:
45:af:a9:5d:4c:f1:ac:56:a5:e5:6a:1e:b9:86:45:5b:28:c7:
84:53:5f:2b:75:4e:8f:6a:76:7a:5d:72:77:1d:a2:58:4d:7b:
40:2e:81:05:d3:44:58:3f:ae:2c:04:73:13:28:78:e1:c1:d2:
23:ab:89:69:a1:33:88:77:28:0c:14:33:c5:1d:fc:51:bf:73:
53:0c:6f:56:b1:7f:ca:ca:7b:3d:c3:01:7e:06:5b:2c:41:e3:
2f:89:3c:37:49:45:f1:8c:3e:e4:e3:e3:a4:9a:63:27:3f:a8:
a2:89:5b:46:dd:38:25:22:b4:e7:9a:c9:9a:33:67:38:3e:98:
19:37:91:08:ab:12:63:10:27:5b:d5:fd:4a:83:5b:6e:9d:38:
ab:a1:45:f0:23:36:05:dd:4d:3a:75:f6:4e:2f:b3:aa:91:0f:
82:d7:d1:13:74:3c:23:45:a7:4e:fc:2c:e3:c0:2e:21:d2:a7:
a9:ce:7a:f3:00:f6:24:c4:c9:e2:a3:1a:be:30:7a:1c:7f:42:
30:47:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:01 2024 by rpki-client on console-ams.rpki-client.org