Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DaEL3BmVz1IQEbRM5QGWhg9FKi4.roa
File: DaEL3BmVz1IQEbRM5QGWhg9FKi4.roa (raw, json)
Hash identifier: EDzxUKyy6utShm/dI2uFQUviI1pyPqx/OsUk4bVHkgs=
Subject key identifier: 0D:A1:0B:DC:19:95:CF:52:10:11:B4:4C:E5:01:96:86:0F:45:2A:2E
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DEBC69A36ED0B59BE79596E09518F
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DaEL3BmVz1IQEbRM5QGWhg9FKi4.roa
Signing time: Tue 02 Jan 2024 08:32:56 +0000
ROA not before: Tue 02 Jan 2024 08:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200422
IP address blocks: 94.155.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:eb:c6:9a:36:ed:0b:59:be:79:59:6e:09:51:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0da10bdc1995cf521011b44ce50196860f452a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:b1:7d:de:ec:e2:0f:13:b9:6c:f1:50:30:
c1:50:53:62:dd:93:05:1e:59:ac:64:b0:5a:b7:71:
fc:28:b5:56:f4:ac:3e:25:c8:c4:59:c8:39:25:fe:
89:f2:45:b5:44:bf:7f:06:d9:48:29:b4:46:eb:53:
b7:6a:9e:4e:c3:83:56:77:f3:d1:86:1a:aa:b7:64:
ea:fe:87:cd:d0:9b:54:93:dd:d6:41:1a:82:0d:17:
a3:d1:cc:26:f6:e2:f8:8d:34:b1:34:27:dd:84:d4:
d5:a7:78:e0:f0:11:7f:d0:f1:97:51:d5:e6:5a:cb:
f1:09:c8:41:42:93:d7:6a:3c:89:1e:c1:d8:5b:b7:
81:5f:d5:09:d8:d9:7c:bf:fe:b2:29:8f:37:31:81:
a0:bd:8c:7b:64:80:c6:a8:43:87:a4:bb:46:f6:00:
f7:5e:de:b4:43:2c:69:25:1a:1b:1e:13:e6:71:27:
e7:04:31:cd:52:e2:86:8e:26:52:5b:d9:9a:6e:16:
99:a4:30:9d:b0:52:34:d0:d7:0e:d3:cd:f7:b5:2c:
00:66:0e:4f:4d:9a:cc:cc:9d:7e:de:56:08:0b:3e:
8c:90:1a:5d:ae:3e:b3:30:8c:47:90:6e:3c:49:5c:
94:41:eb:ac:fb:46:31:6a:e1:8e:be:ff:0f:fe:5b:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:0B:DC:19:95:CF:52:10:11:B4:4C:E5:01:96:86:0F:45:2A:2E
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DaEL3BmVz1IQEbRM5QGWhg9FKi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:70:7e:8a:3c:64:9e:17:6f:52:b3:f1:68:82:4f:4a:b2:c2:
c0:66:0d:29:19:1f:f9:54:50:d2:55:2b:44:ff:cc:7f:8a:e2:
31:2c:41:e9:f4:54:7a:15:cb:9e:71:88:f3:da:aa:17:59:49:
dc:84:34:72:96:e0:24:f9:a1:9f:bc:1e:c8:98:69:08:6b:cc:
d0:7e:20:0e:4d:2e:2f:14:01:58:f0:39:f7:bb:53:12:fc:55:
e7:71:de:bb:56:c3:3a:7f:c8:a7:83:fb:e2:cd:62:4f:5c:be:
72:15:e7:7c:3e:d1:ff:d1:cc:35:26:34:80:31:06:ad:b6:cc:
8a:1d:d8:2d:8e:e4:e3:37:54:2b:2b:b1:dc:eb:c9:71:be:61:
1c:b2:81:57:58:9b:ff:27:30:ed:99:0f:3f:dc:9b:fb:22:d5:
e3:ba:17:a0:80:32:72:8d:a4:1d:ea:21:0d:fb:a8:b2:97:de:
ee:99:8c:83:b6:ec:3b:91:da:de:57:bd:b7:d6:35:39:14:d8:
96:9a:58:39:12:b5:d0:ce:08:9c:45:8b:3a:87:17:41:b1:d2:
ca:e1:99:1b:e3:b3:4c:6a:22:86:07:c5:8c:cc:fe:4f:61:10:
31:b7:e6:b2:c7:01:f0:c7:0e:85:1b:6b:4c:50:a5:17:9a:69:
3f:68:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:44:38 2024 by rpki-client on console-ams.rpki-client.org