Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dg9dK1I2teGN9NeVFT1rbi3xUfY.roa
File: Dg9dK1I2teGN9NeVFT1rbi3xUfY.roa (raw, json)
Hash identifier: oeObaLiJaprR4g3jwWges975EtujsNIw7eoDmeSEDIw=
Subject key identifier: 0E:0F:5D:2B:52:36:B5:E1:8D:F4:D7:95:15:3D:6B:6E:2D:F1:51:F6
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018CC79358A8686E12C78FAD1B41DFC43EC7
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dg9dK1I2teGN9NeVFT1rbi3xUfY.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140947
IP address blocks: 194.163.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:58:a8:68:6e:12:c7:8f:ad:1b:41:df:c4:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0f5d2b5236b5e18df4d795153d6b6e2df151f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b8:f7:8b:2d:5d:8c:dd:81:c2:96:de:df:13:
ac:9d:55:a7:fb:56:fc:d0:3f:6c:2b:02:ec:76:5e:
a4:68:70:17:69:21:d4:4f:4d:41:da:b1:f4:24:aa:
df:86:ea:4e:40:bc:0b:3a:6e:89:9c:45:06:28:e1:
09:b9:82:1e:8b:d4:b2:d0:79:48:61:c2:c3:91:76:
cc:dc:38:3d:16:20:ef:78:0a:0e:b6:d8:a3:28:31:
20:4b:1a:5b:10:1f:39:91:ee:cb:8b:de:a7:b3:21:
30:60:ee:c2:f6:30:ef:c3:85:bc:73:98:46:be:a8:
ab:a7:f2:b3:0b:a4:37:d3:29:1c:71:86:0b:2b:05:
14:a7:b3:66:86:04:8c:c0:5e:9c:53:bf:b5:65:f7:
4e:6c:63:31:6a:2e:1d:8a:f0:d7:b3:2a:fb:2a:7c:
a6:ff:b5:31:54:25:4f:dd:00:12:e3:b8:5a:b3:2a:
dd:18:93:ae:04:71:7e:ba:1b:48:33:3f:cb:11:8a:
45:01:2a:06:20:a3:03:58:54:f4:d2:e9:07:5c:e0:
91:3b:d8:e3:98:38:a5:b6:bd:4a:b9:73:e5:57:70:
4f:c0:5d:fc:c6:dd:15:56:9d:6d:1e:62:df:8a:c4:
6d:5f:67:4b:56:54:c1:96:f4:7f:23:49:78:5c:78:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:5D:2B:52:36:B5:E1:8D:F4:D7:95:15:3D:6B:6E:2D:F1:51:F6
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Dg9dK1I2teGN9NeVFT1rbi3xUfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e5:04:02:16:8e:b0:20:44:ab:b5:72:98:1d:88:9c:9c:21:
2e:37:31:42:2c:58:2a:00:13:8b:13:4c:ac:98:82:38:2d:61:
85:43:64:27:dc:30:9b:bd:bd:e7:9b:38:20:b4:7a:08:ee:23:
f5:cb:46:c3:7d:41:46:8e:89:e1:53:a2:88:f3:2a:93:29:bd:
6c:a9:94:76:ff:b4:01:53:45:7d:81:48:18:90:e8:7f:2b:91:
53:d7:44:13:83:71:4b:a5:f4:d4:30:ff:95:52:d3:04:07:ee:
4e:86:a6:75:9c:f7:2c:3c:59:50:c0:96:4b:76:cd:b2:6c:ab:
73:23:b6:2a:18:7c:6e:a1:5e:a1:49:0b:c0:f5:b2:06:4b:15:
6f:bd:a9:8a:d0:9a:3b:1d:82:a3:95:d0:99:84:3c:f8:db:a5:
68:bd:ae:e2:8a:67:e8:e1:06:7f:2c:98:2b:5d:be:d9:69:80:
5c:3f:0d:00:3f:b2:c4:7c:38:d4:20:95:37:31:33:f8:ec:47:
22:00:91:ec:e5:59:37:c5:92:ed:98:40:44:46:2a:51:a3:33:
24:09:97:ac:ca:59:d8:09:07:9c:99:c9:71:12:bf:36:bc:cb:
73:da:c1:42:5b:0c:c2:8c:df:a0:33:e5:6d:76:d4:ac:43:ac:
e1:2f:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:24:22 2024 by rpki-client on console-ams.rpki-client.org