Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/DHkw-9b6iKs4e7dfR23U7wjR2B4.roa
File: DHkw-9b6iKs4e7dfR23U7wjR2B4.roa (raw, json)
Hash identifier: ccz7q3BHJl/rhHAVjQXE8tQglYWTOeRqQtr3FDd3Q1I=
Subject key identifier: 0C:79:30:FB:D6:FA:88:AB:38:7B:B7:5F:47:6D:D4:EF:08:D1:D8:1E
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E01F900D3EAB1C2D22827940D42BF
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/DHkw-9b6iKs4e7dfR23U7wjR2B4.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199721
IP address blocks: 148.81.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:01:f9:00:d3:ea:b1:c2:d2:28:27:94:0d:42:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c7930fbd6fa88ab387bb75f476dd4ef08d1d81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:3b:4c:5e:ed:57:dc:aa:9b:55:2a:59:e2:
4b:b7:70:e8:29:dd:f4:d8:90:a1:a6:62:09:ef:2a:
fe:6f:f7:48:e2:b7:68:f4:2f:bb:58:50:fe:4c:9f:
fc:89:86:18:53:02:92:35:1f:18:5a:a2:51:cf:b4:
c8:20:d7:1b:a9:17:32:68:5e:13:ab:81:72:53:e2:
47:bc:53:61:aa:e0:3c:a5:54:af:0d:fe:64:fb:6a:
d7:af:aa:20:e1:11:8f:a7:98:0b:68:3a:0e:cd:b9:
f8:a9:eb:06:09:2a:01:4b:26:65:08:eb:66:5c:4c:
ec:03:61:b2:71:0a:56:86:41:10:ee:b8:cb:69:f3:
44:75:3d:d9:cd:a9:6e:c0:b9:84:53:5e:9c:7b:8b:
91:7d:c0:11:a7:61:8f:65:0b:8c:8e:25:39:14:dc:
4d:f0:b8:e3:c4:1e:bf:80:78:10:c1:a2:d6:07:f3:
97:da:f9:9f:b8:10:4d:2d:0a:c9:60:c1:aa:4c:a2:
75:02:a4:d3:8c:a4:56:8d:06:cc:2e:6b:73:17:ce:
86:8f:aa:95:88:4e:cd:9c:85:70:f6:f3:e2:c6:c1:
ba:fc:4a:19:df:cb:a4:7f:e3:f9:a9:47:66:ac:24:
8a:fc:3e:dc:89:4d:39:9d:f6:bc:eb:bd:fa:a6:87:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:79:30:FB:D6:FA:88:AB:38:7B:B7:5F:47:6D:D4:EF:08:D1:D8:1E
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/DHkw-9b6iKs4e7dfR23U7wjR2B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.110.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1d:66:cd:4c:d0:70:cd:48:48:05:56:cc:c6:aa:83:26:9a:
53:7c:81:80:01:af:37:76:0f:9e:48:b7:d3:98:5e:31:a7:72:
27:b9:91:ac:d6:5c:63:67:b2:3f:10:51:3c:63:7a:a7:c1:ce:
a6:04:aa:fa:42:66:7b:20:73:83:dd:31:98:7d:8a:aa:49:4e:
4e:ab:ba:1c:92:bb:a1:0a:0a:cc:37:d1:25:f8:a3:cb:5c:58:
cf:7c:78:e4:f7:36:d0:e9:ec:bb:e0:ff:22:3c:97:5e:6b:73:
f9:87:5a:91:1f:d5:79:d3:33:e0:ce:c7:c5:84:db:62:fc:3d:
3c:7e:fb:3d:d0:ce:82:73:eb:09:54:97:2d:9e:3b:13:3f:78:
cb:00:9e:6c:d5:a1:b9:aa:eb:f6:ab:84:9f:45:7a:97:d4:ad:
39:a0:53:ca:9a:e9:fc:28:9c:8f:af:97:78:85:eb:8d:57:e6:
b9:c6:87:a2:5d:31:fe:88:3d:a1:3b:9f:82:5f:41:e6:80:39:
53:52:3c:85:c8:80:1c:c7:ed:ef:ca:da:7d:d3:ce:8d:a2:f8:
4e:78:8b:4d:2d:1d:38:cb:5f:d9:c8:ae:71:13:1a:51:67:52:
36:7d:fd:28:d5:eb:ce:e5:69:8c:b5:f3:0d:2a:ec:b6:06:0d:
fb:68:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:08 2024 by rpki-client on console-fra.rpki-client.org