Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62000.roa
File: AS62000.roa (raw, json)
Hash identifier: oK+MYGBgLboG/EOybUcJZwNH+7ZPz/m3MJvMxO/AWAU=
Subject key identifier: F6:E4:A4:A7:17:4A:2C:F1:8A:29:70:AC:81:55:EE:2A:59:08:97:6E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 33D1D4809504B08972E753007F55742698494EC3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62000.roa
Signing time: Fri 29 Nov 2024 19:39:48 +0000
ROA not before: Fri 29 Nov 2024 19:34:48 +0000
ROA not after: Fri 28 Nov 2025 19:39:48 +0000
asID: 62000
IP address blocks: 46.203.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d1:d4:80:95:04:b0:89:72:e7:53:00:7f:55:74:26:98:49:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 29 19:34:48 2024 GMT
Not After : Nov 28 19:39:48 2025 GMT
Subject: CN=F6E4A4A7174A2CF18A2970AC8155EE2A5908976E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:e8:62:92:73:29:bc:39:23:25:35:8b:e7:
2b:43:7c:d9:3b:29:4a:62:10:d0:e3:3a:e8:16:c7:
59:98:a6:e8:1d:a7:9f:04:bd:a0:66:b9:ea:ea:dd:
08:0a:13:cb:fb:2d:68:11:0c:9c:08:c2:43:48:ae:
82:cb:51:3c:a8:5f:be:62:24:37:66:26:31:c7:b0:
1d:f4:83:42:01:bd:11:37:9e:1a:26:70:b1:b8:b4:
26:34:39:c7:bb:a0:ed:f9:9f:40:3f:1e:28:e5:0b:
3b:bd:ac:ee:02:c2:b7:5b:8d:c6:62:18:18:79:a9:
ff:9b:ad:64:2d:6d:18:f8:91:12:42:0d:fd:5c:05:
bd:f0:cc:f8:1d:ec:41:f5:cf:d4:4c:c3:08:c7:57:
8d:d9:d6:ed:48:de:81:41:4e:7b:ef:3b:ae:cc:0e:
9c:e7:03:e6:ab:78:36:6a:63:73:ce:99:3f:8c:84:
53:b9:26:03:a8:2d:89:7c:f4:aa:32:d2:2f:37:53:
80:bc:95:b4:1b:11:0f:2f:6a:ef:e5:e8:83:6a:d1:
64:5b:a3:88:d5:f8:2a:d9:0d:e4:10:96:51:12:fa:
de:8d:5d:24:4b:d0:d6:95:ab:49:9e:d2:2b:9f:f9:
dc:a5:6a:e7:3f:5a:54:8e:2d:97:89:8f:31:35:ea:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:A4:A7:17:4A:2C:F1:8A:29:70:AC:81:55:EE:2A:59:08:97:6E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62000.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.90.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5e:4a:38:f4:fb:33:0a:3c:e6:10:9f:0a:3e:ad:8a:49:d4:
65:97:09:32:ac:a7:84:c7:0f:f0:f8:82:6f:a0:90:34:e8:e4:
ca:44:4e:8e:0d:c3:7c:c7:b2:2d:74:ca:fc:a8:80:16:aa:c6:
ed:6b:10:dc:9e:45:dc:2e:53:33:f7:a2:93:64:b8:5c:d4:7f:
b5:d0:22:c5:c8:65:62:2d:7b:0c:d3:86:b4:93:5c:18:f6:29:
70:2b:e4:d6:15:f6:a1:ce:c1:9d:c6:b4:08:f4:ce:29:d3:0f:
5b:86:62:6a:fa:db:15:ee:f6:2c:5d:71:29:58:45:78:fc:64:
42:cc:ce:90:11:4f:20:d7:a5:53:b5:6c:20:8f:c6:90:41:c5:
6f:c9:a6:0f:0d:8c:4f:bc:6e:e8:f2:37:91:14:21:d8:af:17:
82:62:de:2f:c1:13:a7:5d:79:ed:25:55:0e:8f:88:b9:57:28:
6e:d8:24:c1:41:e2:41:45:ad:ec:93:4f:0c:b3:e4:ef:92:cb:
f9:0a:b5:4b:27:41:40:23:e3:aa:c7:dc:af:43:18:20:71:c0:
2f:7b:27:03:57:f7:eb:41:37:f1:e8:79:89:2a:e6:07:70:95:
3b:1a:fa:cc:25:e4:5c:ce:8f:46:40:24:23:25:b2:0f:60:80:
52:a3:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:00:30 2025 by rpki-client