Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/DpCYQ_AdrJ3PXENmRN3irWstoBo.roa
File: DpCYQ_AdrJ3PXENmRN3irWstoBo.roa (raw, json)
Hash identifier: +CH4AcrCDAJtmJM6OBhfkjXYvp1Nx4ffXdqoJAQ1X9A=
Subject key identifier: 0E:90:98:43:F0:1D:AC:9D:CF:5C:43:66:44:DD:E2:AD:6B:2D:A0:1A
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 018CC50107D6224E830392EF41E96EC2F550
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/DpCYQ_AdrJ3PXENmRN3irWstoBo.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211499
IP address blocks: 193.16.98.0/24 maxlen: 24
2001:678:f2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:07:d6:22:4e:83:03:92:ef:41:e9:6e:c2:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e909843f01dac9dcf5c436644dde2ad6b2da01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:87:aa:c4:fc:3b:4e:10:c6:9d:25:43:50:05:
c1:09:2b:67:e3:6f:1b:f3:96:79:46:31:08:50:d4:
16:e2:ad:92:3e:71:b7:6c:15:06:2f:8a:77:38:1c:
1a:41:8c:8d:13:47:6a:08:f1:6f:13:0d:44:c5:0a:
3f:e8:88:97:51:94:4c:92:48:1c:28:75:1f:0d:86:
07:56:c7:6d:32:9b:d5:35:9b:ff:ff:ce:f3:a6:12:
bd:37:42:01:b5:e1:e7:de:5c:0a:f8:1e:0e:40:6d:
ec:e2:71:78:46:d0:9a:5b:43:d7:79:51:1b:74:d1:
e5:57:a9:73:bd:75:bf:74:31:78:77:c8:e0:f7:a3:
7a:09:da:6a:8f:e9:21:17:ab:b8:b3:64:49:98:ef:
f7:f1:e5:8b:c5:62:19:a8:da:f4:72:43:37:8c:3f:
28:fc:26:1d:8c:4c:63:11:9f:14:3e:82:f8:91:9e:
cc:c1:63:5a:b6:1f:d0:94:1d:0e:dd:18:6a:11:24:
5a:e6:79:88:dc:17:12:ed:33:34:e7:44:01:46:3e:
61:1c:fc:42:0e:37:ed:7b:86:cf:2a:d3:c8:17:17:
a0:8a:ba:f7:d1:69:34:19:47:fc:35:e5:1e:45:5b:
73:f4:91:0d:07:dd:28:d6:b7:38:0d:8a:5f:e0:88:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:98:43:F0:1D:AC:9D:CF:5C:43:66:44:DD:E2:AD:6B:2D:A0:1A
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/DpCYQ_AdrJ3PXENmRN3irWstoBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.98.0/24
IPv6:
2001:678:f2c::/48
Signature Algorithm: sha256WithRSAEncryption
3d:45:32:b8:02:3d:b9:e2:ba:db:2a:72:6a:eb:09:59:98:bb:
d2:f0:1c:eb:45:38:09:1e:3b:a8:f8:90:62:04:61:e0:f1:9a:
2d:f5:77:f7:d2:ab:01:88:9c:e5:2e:98:7d:c5:79:08:7d:3d:
56:14:6f:db:8e:c0:16:44:6a:37:78:6b:eb:53:4f:e1:f7:92:
36:94:3b:52:5e:54:7f:40:33:f7:18:dc:c2:4f:93:ab:a1:b7:
83:07:90:4f:f6:6d:28:46:12:9b:71:82:53:04:a7:aa:6e:95:
0a:1c:a2:e3:5d:de:22:81:89:e2:c4:78:6d:0e:1f:47:56:3d:
ec:58:17:a4:16:19:7a:7b:8f:69:b7:b1:cf:a4:b3:70:6e:c9:
27:7e:de:25:c8:cf:2c:7f:8e:75:bd:0a:68:b1:7a:7c:e0:30:
42:02:86:19:d6:4a:31:67:3c:15:5d:1f:3e:4d:22:fa:e1:82:
3d:ab:02:5c:71:b0:b0:63:f5:67:d0:a6:23:94:22:1d:68:c6:
b7:f4:d1:2a:7d:d7:91:45:1d:fb:a5:4d:69:b1:05:ec:05:31:
6d:48:4e:3f:24:f4:29:0d:c0:c4:e7:f8:4c:7e:25:50:4d:ae:
61:ab:20:31:6f:b9:d2:d8:1f:32:a6:86:68:07:12:c8:17:40:
19:de:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:47:28 2024 by rpki-client on console-fra.rpki-client.org