Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/dyTxALLDXfL-9g21H1rZS3Hdmsg.roa
File: dyTxALLDXfL-9g21H1rZS3Hdmsg.roa (raw, json)
Hash identifier: mMxGo+0S/djDrz8vHpIGW0fsDDSQTJ8lNTsAocVpVOA=
Subject key identifier: 77:24:F1:00:B2:C3:5D:F2:FE:F6:0D:B5:1F:5A:D9:4B:71:DD:9A:C8
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 0192972A686FD8869D987F9A7FA03EDD5CDB
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/dyTxALLDXfL-9g21H1rZS3Hdmsg.roa
Signing time: Wed 16 Oct 2024 21:09:51 +0000
ROA not before: Wed 16 Oct 2024 21:09:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 37.44.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:97:2a:68:6f:d8:86:9d:98:7f:9a:7f:a0:3e:dd:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Oct 16 21:09:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7724f100b2c35df2fef60db51f5ad94b71dd9ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:19:c1:6e:a5:3d:02:fe:cd:8e:c3:bf:af:
10:20:e7:c6:d2:53:36:b0:08:1b:5a:48:05:3e:0b:
87:c9:ba:8e:86:be:4f:33:89:62:e2:f2:69:67:13:
42:5a:5b:04:0c:03:72:25:72:12:c6:b0:0a:4b:d1:
11:7b:6a:a1:70:cb:a2:fa:30:e6:d6:0e:c2:e8:8f:
0e:bd:3c:21:15:96:f1:98:bd:9b:43:b3:57:db:c4:
3a:1c:b6:52:ea:4d:0d:de:d4:1f:9d:98:7b:bc:2c:
22:9d:2b:5c:0c:f6:47:92:fa:7e:9c:f7:ab:9e:ef:
55:be:88:28:2e:71:c8:c3:6a:c2:2a:ea:e9:79:b9:
c6:31:50:e5:5f:67:be:59:0c:1f:68:55:aa:07:cf:
e1:1a:b8:c0:98:6e:af:85:56:04:6d:1c:4f:4b:1e:
25:38:15:6a:4c:d5:c0:48:d2:9f:e0:d1:1c:fa:46:
ff:17:ae:e5:d8:27:b4:a9:2e:e0:ed:d3:41:a4:d8:
01:48:21:0a:07:67:db:9d:6e:54:e9:61:ff:63:87:
de:26:b2:3e:10:ce:14:b1:03:d4:f4:ec:49:49:f6:
1b:5f:fc:cd:90:cf:9c:fa:48:85:ad:61:66:db:f6:
03:cd:42:22:1d:d3:fb:cb:a1:10:5d:d6:d8:78:84:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:F1:00:B2:C3:5D:F2:FE:F6:0D:B5:1F:5A:D9:4B:71:DD:9A:C8
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/dyTxALLDXfL-9g21H1rZS3Hdmsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.216.0/22
Signature Algorithm: sha256WithRSAEncryption
64:b0:9d:a0:c0:2e:8b:91:84:02:94:dc:60:f5:da:0f:2e:99:
3c:4b:d3:41:69:d2:31:78:34:65:f9:c4:a9:55:f7:7c:6e:cd:
5a:99:6d:18:a9:8a:a8:a1:ce:f7:f8:7f:ba:33:27:71:80:d9:
1f:68:21:8a:b0:57:60:82:4d:e4:23:f4:7d:a8:fa:1a:15:e2:
c5:04:c4:e6:2c:5c:74:a7:37:d1:4c:3f:fb:4e:3b:2d:ad:15:
ed:a4:4e:9f:cc:83:82:df:e9:42:5e:75:5b:13:de:f4:a4:7c:
e2:15:11:5f:34:bf:ec:8b:88:33:88:2e:a7:93:7d:77:b4:09:
9e:77:54:28:c7:b9:98:07:02:c1:58:5c:a4:31:e7:0d:92:dc:
b4:01:65:c3:e0:f2:f9:7d:bd:9c:ad:a4:d4:5c:33:13:ef:1d:
ea:bb:b5:3b:8d:3e:80:1b:3f:13:ab:55:15:ae:79:7f:31:ab:
b1:03:03:6a:99:b7:cb:0f:28:1b:5e:89:4f:85:85:00:d5:2d:
3d:f2:e3:a1:21:31:6a:f3:6c:6b:e9:5b:09:7e:d4:37:56:d7:
ae:3f:c6:8c:e5:94:28:7b:c2:20:47:35:8d:76:9f:fe:b7:e9:
73:95:29:c9:5c:92:06:77:fa:93:99:4c:0c:14:a4:e7:ae:89:
df:20:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:26:51 2024 by rpki-client on console-fra.rpki-client.org