Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/DpyiQgQ9FdTG5s8YbeYxHyQxbOM.roa
File: DpyiQgQ9FdTG5s8YbeYxHyQxbOM.roa (raw, json)
Hash identifier: YoIx6oD1L1+W6DX16hCA9uHG0kfmePKoHXMxdCbW3dE=
Subject key identifier: 0E:9C:A2:42:04:3D:15:D4:C6:E6:CF:18:6D:E6:31:1F:24:31:6C:E3
Certificate issuer: /CN=d8173d42a8788c05de36fdfcd329c35b43eece3e
Certificate serial: 018CC94C0BCA22EEE682E6AD8155DB87846E
Authority key identifier: D8:17:3D:42:A8:78:8C:05:DE:36:FD:FC:D3:29:C3:5B:43:EE:CE:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/DpyiQgQ9FdTG5s8YbeYxHyQxbOM.roa
Signing time: Tue 02 Jan 2024 08:30:53 +0000
ROA not before: Tue 02 Jan 2024 08:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57327
IP address blocks: 192.211.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:0b:ca:22:ee:e6:82:e6:ad:81:55:db:87:84:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8173d42a8788c05de36fdfcd329c35b43eece3e
Validity
Not Before: Jan 2 08:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e9ca242043d15d4c6e6cf186de6311f24316ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:6d:94:54:cd:f9:59:80:63:13:81:e0:31:
72:e5:36:c0:93:56:be:19:9f:61:d1:a0:6f:6e:be:
a3:c8:88:d5:b5:60:da:1f:c7:e9:43:9a:68:c7:69:
a7:ed:da:d0:cd:55:02:fc:47:43:a1:65:28:cd:af:
e0:0d:8e:0b:b7:6d:e4:cb:bc:bd:7b:4d:27:d8:c4:
55:8b:94:2d:1c:c5:87:fe:60:2f:c6:7c:1a:cd:91:
f9:7d:03:38:73:15:94:2f:47:df:54:ce:51:7b:42:
e9:37:8a:30:1b:65:dd:09:68:55:3f:88:a5:22:7f:
c6:0c:f6:5b:3e:72:e7:9e:62:4a:5d:84:f2:db:9f:
99:a0:60:d7:72:81:52:71:99:4c:f4:9c:c1:3b:b5:
27:b1:b9:d6:cd:ef:29:d4:6d:b2:5c:8a:01:ea:10:
ea:5a:3e:c1:16:87:28:6e:5b:38:d8:3c:00:4c:01:
2e:6d:35:25:ea:c3:4d:a0:60:9c:1f:45:02:4a:99:
be:64:96:9b:e6:5e:1f:72:29:4d:93:01:5e:d1:c5:
9b:25:27:ee:f2:3a:a3:ab:2d:37:de:a5:dc:68:5c:
95:78:ba:b6:30:32:a3:24:ba:21:42:6c:05:0c:68:
61:10:6f:7f:fe:45:6b:43:fa:0c:15:5f:25:0b:1c:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9C:A2:42:04:3D:15:D4:C6:E6:CF:18:6D:E6:31:1F:24:31:6C:E3
X509v3 Authority Key Identifier:
keyid:D8:17:3D:42:A8:78:8C:05:DE:36:FD:FC:D3:29:C3:5B:43:EE:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bc9Qqh4jAXeNv380ynDW0Puzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/DpyiQgQ9FdTG5s8YbeYxHyQxbOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f50839-b5fb-48d8-ad7c-72545c9b4a9e/1/2Bc9Qqh4jAXeNv380ynDW0Puzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.211.0.0/24
Signature Algorithm: sha256WithRSAEncryption
66:4d:70:cc:4a:d5:00:01:a6:27:23:59:fe:d5:41:a1:8d:df:
ba:19:c3:37:c8:aa:0f:87:6c:37:3f:18:fd:b2:5e:d8:68:0b:
aa:34:7b:85:5f:32:cf:cc:53:33:2c:e9:36:25:7e:95:bc:6f:
6e:cc:b9:7b:f0:78:bd:83:c6:09:61:46:38:fc:cf:3a:f4:30:
e0:12:b9:c9:df:ee:c8:9b:31:31:fa:13:2b:7b:19:2e:05:a9:
9f:62:3e:c9:f6:35:b7:17:e4:d3:0e:2e:24:84:14:8c:b9:05:
e2:58:30:bf:94:2e:92:a8:95:05:a1:47:c3:6b:52:f2:fc:30:
20:c7:e7:6d:9f:1d:72:ac:03:a1:f1:a5:d7:8f:c4:bb:86:88:
86:0c:33:6a:f2:c7:91:d9:51:6c:b0:34:66:2d:bc:3e:0f:c8:
bb:b7:9f:c5:ee:04:30:02:48:6c:ac:58:5c:1c:29:58:df:7a:
11:22:53:1f:8b:da:c0:25:5c:8f:3a:95:7b:f9:4c:a7:d1:53:
0a:0e:19:38:8e:1d:ea:a4:6c:4c:bc:eb:39:5e:47:0d:c3:f7:
45:0b:a1:cb:7b:6a:7f:da:ee:6c:b0:8b:c9:2a:f1:df:d6:26:
12:52:de:83:e8:a9:af:19:fe:3b:25:70:ab:3e:db:ff:97:55:
9c:1c:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:58:01 2024 by rpki-client on console-ams.rpki-client.org