Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/DGs_8BciRPUKIGLQT9ehPytDuqc.roa
File: DGs_8BciRPUKIGLQT9ehPytDuqc.roa (raw, json)
Hash identifier: U1jX5qkLNbqZ5goEksM1OF8Rd7cYmiQwuIyicyR5fWQ=
Subject key identifier: 0C:6B:3F:F0:17:22:44:F5:0A:20:62:D0:4F:D7:A1:3F:2B:43:BA:A7
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 018CCA2935080C4593E68015944A70228033
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/DGs_8BciRPUKIGLQT9ehPytDuqc.roa
Signing time: Tue 02 Jan 2024 12:32:27 +0000
ROA not before: Tue 02 Jan 2024 12:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212269
IP address blocks: 185.179.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:35:08:0c:45:93:e6:80:15:94:4a:70:22:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Jan 2 12:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c6b3ff0172244f50a2062d04fd7a13f2b43baa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:20:d5:d1:14:38:86:73:d5:a8:77:98:96:
bf:d6:c9:b0:bc:63:62:a0:30:c5:d8:fb:47:bf:58:
e2:1f:53:5f:c9:ee:4c:54:6e:58:07:ef:33:7a:a4:
6e:7b:37:da:a9:0b:ec:4e:c8:3e:c6:2d:d5:4b:b4:
7c:c8:af:a5:4c:ec:31:0a:b2:3d:a8:bb:21:85:2a:
ef:cd:b3:8c:e3:f0:86:31:50:97:c9:6b:3a:b7:44:
68:39:d6:0c:a8:cb:96:1e:72:23:7e:ca:77:ab:51:
f6:0b:8c:6c:7d:8f:7c:5e:a9:79:f9:e5:bc:22:65:
14:c3:99:d0:6d:a5:8f:6c:e5:d5:be:14:dd:9a:a2:
43:80:de:38:5a:a2:0f:e6:d3:b0:5f:e4:8d:b1:c9:
12:50:26:ce:53:34:fa:04:0c:44:c0:56:38:b0:87:
e0:6f:4b:68:b6:ba:01:0b:d4:d7:5b:fc:86:29:c9:
86:4e:9f:85:e6:ff:b1:64:8e:34:21:10:fe:3b:fd:
4d:d4:64:51:55:c0:88:2a:47:b9:3f:b7:17:48:cc:
de:7b:2c:15:0c:55:3a:b4:e3:9c:06:11:97:20:1f:
00:84:ca:cd:8a:1a:5b:55:af:bd:2b:fd:bc:1e:0b:
ff:a6:7b:b0:d1:eb:72:c2:75:90:56:49:5b:41:79:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6B:3F:F0:17:22:44:F5:0A:20:62:D0:4F:D7:A1:3F:2B:43:BA:A7
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/DGs_8BciRPUKIGLQT9ehPytDuqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.100.0/24
Signature Algorithm: sha256WithRSAEncryption
32:58:19:4e:60:85:35:00:6d:5e:b7:ed:90:a8:68:dd:fc:ae:
f2:e8:bf:3c:f9:eb:93:a4:1d:e8:5a:b1:61:9d:0e:1c:18:5f:
80:13:a8:3e:d2:e9:71:ad:32:b4:43:5c:8d:bd:65:e6:ed:bb:
1d:f5:c2:f9:66:c8:a4:ef:f6:05:a9:26:31:b9:56:49:ec:a5:
56:ef:88:78:19:cb:d0:64:7c:13:9d:ec:13:80:ff:00:85:70:
ae:8d:70:8f:d3:bb:fa:b0:02:18:79:a9:64:04:e7:81:a3:ce:
5c:2a:b5:a2:3a:8c:ed:14:d3:6e:a0:f9:6c:50:d5:6d:3a:6b:
6a:95:cd:4c:df:22:03:d8:bf:2e:06:c1:a1:1d:79:ff:a7:e8:
60:03:78:87:01:aa:30:67:50:5b:34:e7:b8:5f:e0:96:a7:e7:
77:89:2b:ce:a9:39:fb:79:da:96:dd:8d:9b:b9:d0:47:21:a9:
53:0e:52:84:34:3b:50:89:b2:6a:78:47:77:6a:d5:c7:64:a7:
e1:62:bd:cd:e9:74:17:83:e8:1a:23:d8:63:47:04:48:65:5b:
e5:e8:b2:23:da:7b:a0:cc:26:fb:f3:4d:ca:2a:e1:cc:1d:97:
98:8e:2b:65:b0:0b:48:c4:0a:a8:0c:85:56:5f:0f:df:26:98:
79:92:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:41:49 2024 by rpki-client on console-ams.rpki-client.org