Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/DlOXCOU6u6PZeyteLZp4ExTBfRk.roa
File: DlOXCOU6u6PZeyteLZp4ExTBfRk.roa (raw, json)
Hash identifier: qf8UQeQhMup+ZnEw0nGaL6VDCc6G3K3vCBFokWj5S4E=
Subject key identifier: 0E:53:97:08:E5:3A:BB:A3:D9:7B:2B:5E:2D:9A:78:13:14:C1:7D:19
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 018CC2DB45F4F3790435EC3BD037708DD0FB
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/DlOXCOU6u6PZeyteLZp4ExTBfRk.roa
Signing time: Mon 01 Jan 2024 02:29:59 +0000
ROA not before: Mon 01 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.239.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:45:f4:f3:79:04:35:ec:3b:d0:37:70:8d:d0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Jan 1 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e539708e53abba3d97b2b5e2d9a781314c17d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:2d:01:be:4b:95:72:fc:50:ab:44:3e:b5:
fa:83:5d:3e:d6:4e:40:13:60:e4:c4:d0:9c:17:15:
db:5f:ae:ef:f8:cd:a7:5b:e2:1e:ac:e4:9e:44:60:
4d:45:0a:d2:c9:83:0e:d7:0e:e8:94:91:22:2e:63:
5e:60:85:1c:57:17:68:b7:58:84:19:a8:ee:e1:38:
4f:90:19:35:ff:6d:3d:83:9a:1d:39:5c:f4:6e:db:
f0:29:1a:95:29:9f:03:4a:09:0b:13:11:81:c7:45:
be:ff:24:26:28:59:28:13:83:0a:48:29:a4:f3:91:
78:5a:18:51:4a:fe:df:2e:e2:a4:28:4e:e9:18:95:
8a:e3:ef:c5:d1:e8:85:67:59:0a:53:24:5f:ec:8f:
51:d9:79:2f:4b:8f:c5:63:2c:85:10:1b:e9:69:a3:
ec:4b:5d:5c:ec:e3:80:7c:1c:93:6c:d3:f2:99:9d:
9d:f7:9b:08:b0:52:33:a9:ab:af:f2:93:d1:f1:9f:
cb:9c:64:2b:7f:ab:65:fd:e5:8c:a0:04:8a:92:3c:
2d:59:e7:c1:ec:c4:33:21:51:3e:10:d4:8b:7c:2f:
b4:c3:32:2d:03:9d:94:ce:7b:72:83:42:99:ad:e4:
ce:9c:7f:bf:80:37:f5:ad:98:f0:2e:5e:75:58:8e:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:53:97:08:E5:3A:BB:A3:D9:7B:2B:5E:2D:9A:78:13:14:C1:7D:19
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/DlOXCOU6u6PZeyteLZp4ExTBfRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:56:01:f7:cd:56:96:3d:67:e3:a1:aa:3e:e1:11:4b:91:f5:
13:59:02:4c:01:37:10:28:97:58:c2:99:c8:3b:82:86:39:5c:
67:87:93:68:34:ae:26:4f:5a:2c:96:ba:0b:c4:ed:33:1b:5a:
2a:32:30:35:ef:88:6b:c5:7c:ff:58:47:eb:db:4e:92:c1:2f:
2f:7d:80:29:5a:9f:2a:19:38:a7:95:1d:a5:8d:bb:b8:5d:cc:
95:0f:4e:21:a3:e0:9f:a2:e2:3a:18:a7:03:5f:c1:d3:8e:93:
d3:1a:50:00:d9:22:0c:74:40:9d:50:d7:39:11:b3:a5:fc:20:
ef:24:af:4c:05:f9:9d:af:12:13:a6:10:42:a6:b1:9b:c9:2d:
63:dd:38:7d:80:6e:fd:f2:e2:86:ce:01:e7:17:f7:1e:cb:83:
17:58:67:c6:f9:f1:bc:c9:36:f7:b4:31:32:0c:4e:f7:0d:ad:
b0:c8:a1:5c:e9:d9:fa:b7:80:7b:23:91:31:5c:50:5b:a2:27:
fb:53:ef:f8:b4:36:ba:65:ab:5e:57:2e:5e:e8:58:b6:6b:ed:
27:4a:79:f4:05:b9:ba:64:c0:a3:96:3b:6d:5c:4d:4b:2e:9d:
ac:1e:5e:bc:41:a2:db:23:7e:0e:4b:19:18:99:33:a0:89:d6:
a3:43:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:43:45 2024 by rpki-client on console-ams.rpki-client.org