Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DPlm6rO6zPySLjMZDvdIk5iGKLo.roa
File: DPlm6rO6zPySLjMZDvdIk5iGKLo.roa (raw, json)
Hash identifier: lqQbsY/hSPsfwaJBtoVS+xqvmN/JHOvtrt3dcGT/TVs=
Subject key identifier: 0C:F9:66:EA:B3:BA:CC:FC:92:2E:33:19:0E:F7:48:93:98:86:28:BA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F8F2B4F0815A9EE2F6417A147800
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DPlm6rO6zPySLjMZDvdIk5iGKLo.roa
Signing time: Tue 02 Jan 2024 02:31:27 +0000
ROA not before: Tue 02 Jan 2024 02:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62313
IP address blocks: 192.165.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f8:f2:b4:f0:81:5a:9e:e2:f6:41:7a:14:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cf966eab3baccfc922e33190ef74893988628ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:22:e2:67:e6:38:62:22:b2:10:21:66:9a:
7d:52:38:94:7f:6a:e6:4e:ee:f2:f8:48:03:97:9e:
d0:a6:4c:00:66:5a:85:7e:fd:25:c6:42:ea:bb:15:
37:d5:54:9e:96:50:80:09:28:12:d5:58:04:f1:17:
2a:fc:5f:0d:29:48:02:dc:e0:9d:a5:3d:f6:21:11:
c8:87:15:91:4c:60:d0:43:91:a4:c1:04:83:c1:90:
23:ce:db:ad:59:0e:57:09:ed:bd:07:56:7b:73:a6:
d0:19:ab:ef:98:56:07:42:71:ad:77:0c:f9:36:d3:
5e:6c:1d:fb:de:87:9b:3a:a8:77:9a:c9:d3:26:8d:
67:1a:9e:1f:a8:ec:38:20:20:1f:5b:85:9d:75:e1:
44:c9:a4:fe:2d:75:0c:e7:ab:4a:86:d9:93:c1:db:
6f:01:ae:78:b0:1e:3a:24:73:50:c1:bc:9c:b0:7e:
6b:59:56:5e:dc:ef:ae:1d:85:68:0c:b3:65:cd:9c:
97:e7:a1:ac:49:f0:34:5e:d2:f7:89:0d:05:de:f7:
50:0e:d2:1a:89:6e:01:45:57:8b:ff:4f:29:84:55:
61:04:5e:81:0e:fd:f2:32:9f:f2:78:3a:7d:0d:cf:
04:ff:0b:fe:a0:e2:f7:7d:36:b5:3a:10:c6:ce:6d:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:66:EA:B3:BA:CC:FC:92:2E:33:19:0E:F7:48:93:98:86:28:BA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DPlm6rO6zPySLjMZDvdIk5iGKLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:37:5d:e2:4b:af:4d:62:27:a0:7a:d5:39:06:43:9b:c1:6e:
33:81:9f:20:d5:eb:cb:2e:1e:c9:22:eb:a2:c9:f2:f0:9e:81:
5d:ec:dc:63:43:2a:2e:2c:d8:81:34:74:78:35:2c:83:2b:c7:
8b:1c:d6:9a:d8:29:57:23:7e:3e:72:83:28:42:b6:40:74:1d:
1d:0f:af:aa:12:21:57:64:0f:f1:b8:30:bd:4d:e7:9a:47:ed:
ab:ae:d5:5a:37:59:82:8b:93:c2:88:1d:a1:b1:39:1a:fd:ab:
8d:9a:e8:2b:14:1a:d2:f7:86:c5:83:89:a4:35:00:52:a4:ce:
d8:f3:a5:d0:62:8e:af:13:53:ef:22:86:ed:c4:bc:ca:e2:d2:
b5:bd:95:3a:df:57:dd:43:b4:ff:c3:69:3f:da:8f:b8:06:65:
e9:64:ea:97:43:86:52:85:1d:90:29:2f:40:3b:7e:90:b6:d5:
70:20:b5:65:13:c9:85:93:03:de:bd:63:8d:f5:d1:5b:c2:3a:
c9:ef:27:8f:0e:71:7f:2c:a9:3b:35:92:c6:2f:97:c7:16:d7:
f2:aa:ce:f1:d6:e7:46:0d:38:7b:53:d6:d8:dd:9c:70:1e:8a:
0b:7b:97:25:9a:73:5b:7d:a9:cb:bd:44:f7:a6:63:0c:3c:bf:
59:ea:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 11:45:45 2024 by rpki-client on console-ams.rpki-client.org