Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DNfhm4AoJ40rzATCHrfWx5qbol0.roa
File: DNfhm4AoJ40rzATCHrfWx5qbol0.roa (raw, json)
Hash identifier: l+6KwIgtURszIE9NQBLBTuBUzHWhnZpoziHxXdpJlmQ=
Subject key identifier: 0C:D7:E1:9B:80:28:27:8D:2B:CC:04:C2:1E:B7:D6:C7:9A:9B:A2:5D
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018E7B396E973D18F5652F12DC656287D203
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DNfhm4AoJ40rzATCHrfWx5qbol0.roa
Signing time: Tue 26 Mar 2024 14:45:45 +0000
ROA not before: Tue 26 Mar 2024 14:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 92.246.140.0/22 maxlen: 32
94.141.100.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:39:6e:97:3d:18:f5:65:2f:12:dc:65:62:87:d2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Mar 26 14:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cd7e19b8028278d2bcc04c21eb7d6c79a9ba25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:6d:20:a5:02:f0:fc:26:aa:d3:3f:e0:de:
64:59:9c:6e:78:11:88:42:7c:f1:79:2d:84:d4:8a:
2f:55:fc:24:28:4f:cf:6f:56:6c:33:00:75:b0:b0:
74:4a:6b:a0:15:05:2b:8a:1b:ab:2b:38:2f:6f:74:
d2:5c:45:4a:77:a8:cc:7d:0b:79:92:4d:4a:9c:b1:
ad:ab:95:4a:3e:d5:52:ab:c9:f1:fc:ba:7d:ec:6c:
f2:aa:c0:68:db:45:62:6e:03:eb:87:be:5e:d8:37:
e4:ee:c7:4a:3f:37:53:78:1a:f8:9b:9e:b1:2d:64:
da:d3:12:cf:06:2b:a9:b7:ad:5f:c4:c7:54:95:1f:
f9:f8:69:76:44:f4:87:88:62:b0:64:a3:42:c9:a6:
24:7b:ed:16:88:a1:76:4e:5f:4b:74:0c:aa:5b:98:
d1:e9:cb:31:ba:f7:ff:4c:6b:ae:67:cf:eb:5a:18:
ef:8f:3a:1d:43:62:ab:dc:74:46:ce:6d:0f:d7:d3:
01:5e:6d:aa:d9:51:80:e5:44:37:90:17:cf:5b:ea:
2c:45:e4:6d:59:41:73:4d:fb:23:7d:e7:f3:fc:ec:
50:ac:6c:47:61:f3:8e:a4:88:2a:34:74:9c:01:83:
9f:5d:16:31:54:dc:00:0a:5f:16:95:5d:ce:5e:02:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D7:E1:9B:80:28:27:8D:2B:CC:04:C2:1E:B7:D6:C7:9A:9B:A2:5D
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DNfhm4AoJ40rzATCHrfWx5qbol0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.140.0/22
94.141.100.0/22
Signature Algorithm: sha256WithRSAEncryption
89:30:13:f7:c4:ff:5b:30:7a:df:03:cf:bc:b8:9b:54:2b:64:
71:ff:6c:a9:aa:db:db:72:22:8d:3a:79:34:5e:41:8d:12:8d:
05:f5:62:9d:8c:3e:1c:9e:42:e1:54:7f:a6:4a:ba:63:49:ec:
8b:97:d2:e7:a3:66:f3:91:d5:4d:1f:2f:72:87:86:01:ef:85:
29:fd:6d:ec:6b:c5:53:bd:5a:a5:e6:9a:d7:48:07:26:23:cf:
88:93:b6:ef:cb:a5:7f:23:60:e5:5a:33:06:b5:b9:51:5b:20:
fb:45:02:53:78:6a:a9:f7:26:43:d6:20:89:8c:d0:bc:72:61:
90:7d:49:fc:fb:a7:f7:29:f0:23:25:fa:af:0f:18:d4:a8:3f:
31:2d:93:78:f5:d5:5f:7a:ba:48:bd:d3:b6:2d:f9:dc:85:1f:
3b:7f:a3:cc:85:60:5a:c6:44:0b:0c:2e:52:e0:4d:1e:dd:c1:
7c:2e:2b:72:a1:1f:f4:a0:27:48:45:3a:f3:32:de:ba:3b:10:
02:b7:a4:8f:e8:e7:c0:cb:73:1c:ef:6a:32:6c:33:e5:8c:90:
b2:f2:42:36:af:da:76:c7:cb:38:27:72:9f:43:ae:ac:56:4a:
73:1e:95:52:e3:30:ba:34:e9:e8:91:dc:9f:c3:d8:11:00:83:
6d:57:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:32:47 2024 by rpki-client on console-ams.rpki-client.org