Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Dy2XHgoLwrXSjcRN2sPvRWvXJCM.roa
File: Dy2XHgoLwrXSjcRN2sPvRWvXJCM.roa (raw, json)
Hash identifier: axCqiyP6vi71vJurX94tzCRztO4iN22vOzzyBGi7tUo=
Subject key identifier: 0F:2D:97:1E:0A:0B:C2:B5:D2:8D:C4:4D:DA:C3:EF:45:6B:D7:24:23
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018D5F1D1C7CD13FC1EAA10DFAF968A87E47
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Dy2XHgoLwrXSjcRN2sPvRWvXJCM.roa
Signing time: Wed 31 Jan 2024 10:42:39 +0000
ROA not before: Wed 31 Jan 2024 10:42:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60064
IP address blocks: 91.132.225.0/24 maxlen: 24
176.116.13.0/24 maxlen: 24
185.155.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:1d:1c:7c:d1:3f:c1:ea:a1:0d:fa:f9:68:a8:7e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jan 31 10:42:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f2d971e0a0bc2b5d28dc44ddac3ef456bd72423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:98:b8:f3:17:dc:80:54:72:98:5e:98:21:
2f:cb:65:07:f4:a2:1d:9b:fb:4e:5a:6d:0d:52:a8:
f5:e8:c3:30:26:f1:fa:f7:25:e4:24:5d:ed:e6:6f:
8e:24:64:1f:4b:8e:b1:cf:95:18:57:dd:cb:31:23:
e5:86:d6:75:2c:98:87:3e:f2:94:25:df:0b:99:c7:
77:02:53:3d:91:c8:0f:dd:96:67:9e:2a:5d:ec:4c:
d8:c9:1e:c9:df:36:7d:35:8c:14:ef:25:27:82:08:
0c:a0:b4:84:d3:52:20:ba:7f:12:ed:aa:0e:5b:b8:
dd:63:5b:f0:c0:ee:c4:33:83:58:fc:00:41:2f:8b:
2f:d7:0d:b2:ea:12:f0:cf:58:e6:5f:f6:0d:d2:bd:
ed:6f:78:1a:59:62:1f:a6:a6:d6:fa:3d:75:cd:2f:
5c:1b:71:4c:3f:14:c5:db:c4:01:f0:e6:43:a1:b3:
ed:4b:ff:21:42:31:e2:d6:ac:16:38:a2:9e:58:a7:
84:57:1c:5c:5e:f6:11:7f:7b:3b:27:f2:f2:3c:6b:
84:05:65:0a:fa:67:04:32:d4:af:00:0b:d4:4c:b9:
35:e3:d8:a6:ef:d1:ae:0d:b3:3e:c4:48:13:17:85:
aa:8e:b6:75:b5:a1:a8:93:c5:e8:d4:54:5c:de:fb:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2D:97:1E:0A:0B:C2:B5:D2:8D:C4:4D:DA:C3:EF:45:6B:D7:24:23
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Dy2XHgoLwrXSjcRN2sPvRWvXJCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.225.0/24
176.116.13.0/24
185.155.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2d:b5:1a:de:0f:49:d2:9e:80:94:e8:46:e5:00:de:39:bd:
98:d5:60:36:d4:1b:53:89:3e:2d:79:a3:c2:23:b3:9c:0c:95:
7d:d2:64:57:ef:d6:92:c9:aa:88:18:28:2a:d6:97:f3:6f:a4:
ec:d7:b2:f6:49:92:7d:31:9a:ed:44:85:79:48:24:19:c8:8f:
d8:31:57:49:f7:c9:c8:90:a7:0f:e5:32:55:35:55:6a:c2:d6:
61:52:fe:00:61:e2:cb:fa:25:ab:dd:70:5a:6d:c9:6c:e3:7c:
b8:fc:0c:d5:4c:07:8f:ef:05:13:cc:20:c3:b2:e2:17:7b:59:
61:35:87:eb:d5:61:07:12:e5:fc:24:e7:01:43:f0:b7:5d:29:
bc:2f:51:1d:0f:a5:d6:79:10:0c:09:61:60:df:aa:6f:58:23:
3b:e3:74:a1:20:0a:40:f5:cf:e2:c4:4d:cc:68:06:06:d1:da:
9c:d7:e9:d7:91:b6:9c:b0:28:d7:d7:d4:4c:d5:e4:c7:e6:ad:
46:1d:a5:2d:62:a1:9d:0b:5b:64:32:ab:d0:30:56:b0:e4:07:
91:ba:30:fa:7c:af:d1:39:e4:2b:66:1f:5a:49:b6:4e:ce:f7:
01:b1:c3:e9:77:86:d7:04:05:22:ed:a3:46:77:6c:69:76:f8:
38:4b:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:56:26 2024 by rpki-client on console-ams.rpki-client.org