Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1Dg6Yyy4yY9lsquAIORrqreDZvY.roa
File: 1Dg6Yyy4yY9lsquAIORrqreDZvY.roa (raw, json)
Hash identifier: anrofmKXLGPDRoe/qM/u/GbFRHjockSWQOsfIMproX8=
Subject key identifier: D4:38:3A:63:2C:B8:C9:8F:65:B2:AB:80:20:E4:6B:AA:B7:83:66:F6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955450BBBCCD2F25C85FE14DD4B626
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1Dg6Yyy4yY9lsquAIORrqreDZvY.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50660
IP address blocks: 93.115.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:54:50:bb:bc:cd:2f:25:c8:5f:e1:4d:d4:b6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4383a632cb8c98f65b2ab8020e46baab78366f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:45:85:b0:d7:3a:cf:9e:8c:c4:8c:b2:8e:
87:6a:a5:95:b7:a4:73:42:8a:cc:36:ae:19:93:97:
2f:22:ec:eb:8a:33:e5:c2:69:dd:4c:64:3b:26:a7:
57:d7:2c:cf:fd:b4:e9:03:9f:24:48:dd:66:18:7f:
e1:da:4d:ef:ea:7a:86:3b:94:e9:23:ea:99:01:49:
73:57:fb:f0:4f:e3:fd:42:74:28:20:06:54:f8:63:
d4:1c:36:99:7b:7e:aa:69:9a:33:bf:ca:59:70:39:
f2:5f:f7:65:13:17:69:ed:04:46:8f:7b:1f:63:22:
69:5f:0f:75:e7:f4:ec:c1:f8:c6:fd:f1:57:b4:0e:
42:05:c0:01:a8:7f:c1:2f:4e:90:51:e3:5b:dc:67:
f7:b3:95:b2:01:91:11:2b:15:2e:10:b7:2a:e8:aa:
06:d6:6d:f9:ff:43:7d:46:ed:e5:ca:f0:6e:fc:23:
6e:af:c6:b0:8d:6d:d5:51:cd:89:f1:54:1b:7f:52:
25:12:98:3f:2f:33:80:3a:ea:eb:c5:8a:1b:1c:dd:
0f:c9:31:28:97:a7:2b:bb:b8:35:75:61:af:85:de:
ec:86:f9:ec:b4:65:d5:36:78:9e:e8:5a:30:25:f7:
b9:16:da:15:09:84:3c:f8:da:15:9b:7c:b3:aa:6f:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:38:3A:63:2C:B8:C9:8F:65:B2:AB:80:20:E4:6B:AA:B7:83:66:F6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1Dg6Yyy4yY9lsquAIORrqreDZvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.153.0/24
Signature Algorithm: sha256WithRSAEncryption
59:42:bc:2d:7e:6e:36:8f:1c:6e:cc:05:d7:44:d8:ac:94:e6:
ca:68:17:f4:86:49:3a:41:e3:d5:1b:69:c7:57:be:ea:f6:ee:
f9:93:72:cf:b0:7c:9a:e5:c3:d8:b4:c1:b0:c5:76:38:d5:70:
cc:62:d8:b4:0e:c5:45:fa:39:9c:b6:bb:bc:b3:d8:08:ae:90:
f8:15:be:79:57:6f:66:5e:31:8a:3b:92:c2:b9:20:1f:b7:5b:
70:64:6e:55:4c:6d:9f:0b:4f:59:a6:7c:83:d6:35:f9:b1:bb:
8d:79:ae:7f:71:e0:e1:24:12:11:59:90:58:17:58:dd:bb:35:
39:76:07:e0:d9:f2:b5:74:ce:13:35:33:5b:c7:b6:c8:d8:c9:
63:98:ed:b4:51:7e:9a:a9:7e:d4:0f:fd:6c:cb:a1:ec:1f:24:
95:b3:13:16:b2:0f:a0:6e:fa:f1:5b:64:9d:01:34:84:7b:65:
fc:0a:90:79:10:b7:97:f0:93:1e:2d:32:45:fc:9c:60:53:d9:
f1:4a:af:63:23:06:2c:41:11:15:68:30:d4:2f:85:62:76:a4:
8a:aa:42:06:5c:b9:ae:ca:f3:79:7f:0a:c3:65:51:10:97:8a:
48:d0:95:ec:84:42:64:dc:2e:f4:71:e5:da:7e:2c:db:17:24:
eb:85:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:56:37 2024 by rpki-client on console-ams.rpki-client.org