Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/DhyL9Ux9uiNEcbqwUG-_jrUBV-I.roa
File: DhyL9Ux9uiNEcbqwUG-_jrUBV-I.roa (raw, json)
Hash identifier: 1SKd6sCGTtlfVms4cxDJ68ywUjzp2YabeKryWwJy+CE=
Subject key identifier: 0E:1C:8B:F5:4C:7D:BA:23:44:71:BA:B0:50:6F:BF:8E:B5:01:57:E2
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 018CC5DC7DC7A71D2C3381C2E59B6A231D43
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/DhyL9Ux9uiNEcbqwUG-_jrUBV-I.roa
Signing time: Mon 01 Jan 2024 16:30:10 +0000
ROA not before: Mon 01 Jan 2024 16:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201123
IP address blocks: 213.59.151.0/24 maxlen: 24
213.59.152.0/23 maxlen: 23
213.59.159.0/24 maxlen: 24
81.177.192.0/24 maxlen: 24
213.59.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7d:c7:a7:1d:2c:33:81:c2:e5:9b:6a:23:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e1c8bf54c7dba234471bab0506fbf8eb50157e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:ba:1e:d7:7d:7b:29:56:60:a0:09:2d:9a:
f8:6f:d3:dc:04:a2:25:4b:9d:06:0f:46:ec:a8:a4:
db:05:ee:83:e2:46:a0:80:79:7e:f4:0a:67:a0:7b:
e7:fa:64:b5:4e:92:3e:30:62:1f:bf:23:06:bb:be:
53:15:34:83:6c:2e:06:bb:a4:95:73:25:97:8f:67:
67:65:97:7d:fd:78:d1:25:60:4d:ac:84:a9:1a:b4:
23:14:6f:5b:37:43:73:9a:53:22:64:f1:7b:94:08:
87:b3:bf:6d:66:d3:d8:68:68:b4:57:37:e9:b7:67:
29:63:23:9a:78:81:81:63:f7:c3:ba:55:ec:81:c2:
b7:23:8f:41:48:02:0a:22:de:0d:9b:3f:ca:be:4b:
55:20:de:e0:76:a7:38:3b:f6:91:e3:54:db:b0:18:
2a:3c:57:71:d2:01:39:a0:a3:37:cf:73:5b:63:83:
88:89:17:9e:57:e8:39:d5:ea:22:b8:51:fb:5f:2f:
eb:ac:5f:b9:1d:37:14:09:b2:48:dd:85:c8:cc:e3:
70:e5:04:f6:32:cd:b4:c6:89:3e:d2:d6:34:d5:42:
b0:b7:28:f9:69:cf:0a:c3:97:b0:77:40:f9:07:fe:
02:86:ed:8d:73:67:1b:92:51:8d:9c:f3:c2:7f:a9:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:8B:F5:4C:7D:BA:23:44:71:BA:B0:50:6F:BF:8E:B5:01:57:E2
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/DhyL9Ux9uiNEcbqwUG-_jrUBV-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.192.0/24
213.59.128.0/22
213.59.151.0-213.59.153.255
213.59.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:65:1e:51:e2:88:93:6b:69:c4:4a:53:8b:a9:ed:4d:46:7b:
d0:aa:80:77:25:25:48:31:d4:6c:17:aa:9f:b6:83:b8:09:9f:
73:c2:a9:fd:50:0e:8f:0e:6d:c5:69:c6:84:c3:2d:72:8c:d5:
d7:92:29:ce:7e:4e:cb:1c:b0:1e:2e:39:15:a3:1a:e8:98:3f:
48:3e:eb:57:55:1e:3a:af:c5:09:5c:d9:37:ec:2b:d8:98:fe:
f8:8c:90:8e:a0:af:d4:3f:76:4d:82:df:ba:10:bf:4f:bd:57:
d1:4e:7c:f3:8e:b9:25:00:89:96:64:21:75:33:ee:89:59:23:
8d:37:f1:77:05:cc:b5:f4:f7:09:f2:f0:90:5c:0e:70:a8:19:
6a:a2:10:07:fb:de:54:ac:79:9a:3a:a0:85:72:ae:00:a2:34:
c4:2b:3f:19:36:f4:10:23:75:c1:6e:3d:a3:e4:3e:7b:c8:8c:
85:80:79:b5:88:2b:f6:8a:89:cf:2c:7a:85:30:48:c6:6d:ef:
5c:fe:fe:19:6e:1c:f3:63:fb:76:d7:c5:78:ed:c9:9c:54:7a:
b5:a2:e5:26:ea:44:ad:01:e0:6c:02:e8:71:05:55:ed:78:c2:
50:0d:86:7e:91:0d:0b:60:9a:34:bd:f9:5f:49:5d:ad:8c:6e:
5d:ec:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:03 2024 by rpki-client on console-ams.rpki-client.org