Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DG6VC0iqZWrzZ6DtzaC3iUAxDc4.roa
File: DG6VC0iqZWrzZ6DtzaC3iUAxDc4.roa (raw, json)
Hash identifier: 8nq/6LGBUnPsPKzdKToH4zpc2hqduq3Ofju6sKrYKzw=
Subject key identifier: 0C:6E:95:0B:48:AA:65:6A:F3:67:A0:ED:CD:A0:B7:89:40:31:0D:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01902EEEB83B0426780A2A3AEBA940B86647
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DG6VC0iqZWrzZ6DtzaC3iUAxDc4.roa
Signing time: Wed 19 Jun 2024 05:18:34 +0000
ROA not before: Wed 19 Jun 2024 05:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 91.92.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2e:ee:b8:3b:04:26:78:0a:2a:3a:eb:a9:40:b8:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 19 05:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c6e950b48aa656af367a0edcda0b78940310dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:ce:d2:43:a5:2f:c9:52:e3:e6:2f:36:f6:
ec:61:b3:c0:4d:f7:b1:0f:b5:45:62:05:da:b8:f7:
ce:82:89:02:6e:f9:47:7e:22:4b:4f:12:80:2a:2d:
0f:ba:f7:d9:60:84:21:01:6b:57:67:46:b1:44:9b:
c9:d1:35:18:a6:d1:17:91:f6:48:19:1f:ad:9b:f6:
60:9a:ee:b7:58:5b:c1:1a:5d:a1:a1:27:ed:f1:c3:
20:ce:87:6c:e2:de:9d:af:73:b7:a2:0f:72:d6:b1:
e1:13:12:5c:65:c3:1c:05:81:83:92:08:b9:38:8c:
87:e4:a5:32:94:47:85:fa:d1:67:58:65:85:87:a0:
03:54:61:9b:9a:a4:a6:80:d3:8f:f8:ea:f6:a9:c3:
c0:11:88:d2:6e:c9:74:a5:2d:a2:18:a0:bc:eb:10:
46:b3:10:90:25:e9:89:df:90:f0:4b:ac:fa:87:02:
ad:22:d9:4b:2c:e6:38:ca:b9:60:e5:bf:21:bf:52:
c8:35:43:50:3f:16:f2:8b:d1:c8:46:42:33:83:46:
a1:34:48:9c:69:9e:a8:c3:4d:00:b6:69:7d:32:62:
60:77:d8:bd:88:32:f7:4d:b1:02:83:ee:9f:5b:7f:
15:64:97:98:76:53:bd:9b:34:d4:8b:92:c1:ba:00:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6E:95:0B:48:AA:65:6A:F3:67:A0:ED:CD:A0:B7:89:40:31:0D:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DG6VC0iqZWrzZ6DtzaC3iUAxDc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c5:28:1d:6f:ad:94:88:a9:f8:5c:0c:01:bf:0f:65:c5:2f:
37:27:1f:73:f7:bc:c2:47:cd:0d:fa:49:38:0b:73:3d:2b:7b:
7a:54:e6:63:4e:2b:71:be:78:17:f5:84:97:60:40:ce:9d:2c:
06:1a:98:d2:4d:31:7e:9d:c0:5e:b1:a3:c8:fc:d8:11:d5:6a:
54:ad:05:58:e6:65:97:7a:6c:5d:44:42:27:07:74:69:bd:4a:
5a:4c:f7:e3:7d:01:6b:ec:31:87:02:ff:da:7f:c6:5d:34:d4:
ff:d2:38:d9:74:a6:c6:06:56:47:62:a0:a1:b3:ce:df:29:ac:
ba:e9:a7:ee:6a:d7:28:97:f4:c5:20:0b:ef:dd:83:5a:4c:07:
64:e8:55:0f:53:bc:2d:14:6e:5e:fe:14:90:a1:3c:c0:67:ba:
16:60:c5:27:b9:bb:91:64:de:a1:52:2c:fb:52:b6:81:15:e1:
04:96:32:c6:8b:c0:2a:6e:d0:d5:4a:ea:ec:3f:1b:96:9e:28:
19:c4:b0:d5:a7:64:25:30:81:de:bd:92:c5:7c:6c:d0:bd:a5:
6c:27:3c:0c:1f:33:e2:ae:0d:dd:42:0c:ac:cf:02:3a:70:98:
c5:2d:25:82:7e:12:b0:b5:00:1a:7a:52:6e:fc:ce:62:23:84:
73:94:60:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:03:36 2024 by rpki-client on console-ams.rpki-client.org