Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dld_-r5-S0WOICzch7D-iDerrY8.roa
File: dld_-r5-S0WOICzch7D-iDerrY8.roa (raw, json)
Hash identifier: vL9z4I8lxqCFuX7O+eZA5APu1GkeQBFE2GJsMF5UQOs=
Subject key identifier: 76:57:7F:FA:BE:7E:4B:45:8E:20:2C:DC:87:B0:FE:88:37:AB:AD:8F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194282507ABA4088EE1812439384E10200A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dld_-r5-S0WOICzch7D-iDerrY8.roa
Signing time: Thu 02 Jan 2025 17:51:42 +0000
ROA not before: Thu 02 Jan 2025 17:51:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210974
IP address blocks: 212.193.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:07:ab:a4:08:8e:e1:81:24:39:38:4e:10:20:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76577ffabe7e4b458e202cdc87b0fe8837abad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:c7:de:c3:c5:dd:ee:92:2c:b9:1b:59:3f:
d3:e2:63:70:28:db:6e:39:42:92:28:8a:24:64:66:
d6:a5:49:f9:9c:02:dd:67:fb:a4:06:93:44:08:b0:
86:25:62:42:d1:e4:6d:53:97:62:65:55:f8:96:9b:
f0:f9:2f:ca:ee:21:20:f0:e0:e9:71:cc:58:4b:b3:
7b:60:19:c6:95:76:4e:cb:6a:37:0e:3a:2d:ac:d7:
d7:d7:d1:f1:a9:66:1d:a5:67:00:11:50:e4:47:bb:
3b:2e:b6:1e:eb:3d:f2:29:62:a5:cd:7c:18:04:84:
08:1a:6b:8e:f8:c0:a5:d3:44:44:1e:b9:49:ff:57:
3f:46:0d:d0:3e:0e:bc:65:d8:9b:ed:59:52:c5:0a:
51:bd:d8:86:e8:40:65:cd:b5:7d:82:60:cb:a7:7f:
75:c0:2e:d9:3a:be:62:42:ce:f9:0f:7d:6f:40:eb:
8c:98:80:99:80:26:a1:d8:af:f9:2e:33:61:a4:d6:
6e:49:58:98:eb:80:4e:b1:33:5e:4e:86:d6:19:62:
c4:9b:79:98:c1:02:3f:8a:9c:e2:19:0a:81:3b:0d:
da:f5:45:5e:e7:78:f5:c5:0d:a7:7c:16:8d:49:76:
73:55:9e:ec:ca:97:32:aa:fa:b0:c5:0b:36:74:69:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:57:7F:FA:BE:7E:4B:45:8E:20:2C:DC:87:B0:FE:88:37:AB:AD:8F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dld_-r5-S0WOICzch7D-iDerrY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.8.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7e:54:94:9a:d1:27:f4:25:59:b3:04:31:64:03:b0:50:5f:
5f:96:f8:cb:c2:d2:6d:3e:fd:d2:43:53:4e:27:63:82:37:65:
03:a7:26:5d:73:89:ca:b2:97:bb:b2:44:5d:76:c2:fe:f6:77:
e8:fd:d1:eb:16:3d:8c:db:1c:6b:75:d3:7a:8d:22:88:e2:08:
9e:81:cb:cb:f1:63:c7:7f:4e:ff:36:a9:f1:5d:a0:ab:d6:71:
29:c2:8b:b5:14:2c:aa:aa:1f:bb:82:63:5f:64:7c:a8:91:7e:
5b:cf:fe:b7:49:93:6b:e7:c4:ef:8a:aa:aa:43:75:23:69:02:
d3:a6:f2:60:a2:e4:86:de:e5:53:4b:89:c2:df:93:f0:f7:b5:
f1:22:4a:d6:30:35:18:d5:20:3d:d5:18:b4:45:d7:1d:72:ed:
9e:0f:56:aa:41:7d:b3:5f:25:90:62:18:da:59:93:4d:cb:94:
c4:73:54:57:3a:7e:2a:83:52:bd:54:52:26:bd:65:67:ff:b3:
4f:3a:04:48:93:14:15:23:e6:af:ec:7a:78:8c:bc:0c:bb:4f:
ac:8b:5a:ae:37:b5:34:54:b4:94:88:f3:ad:d5:4b:cf:df:7e:
2c:91:87:ec:6f:b7:92:6e:9c:77:49:89:19:2c:24:77:b6:2b:
38:51:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:29 2025 by rpki-client