Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/du-Dlfd1Ei0ri1RQhQor81ZLUNI.roa
File: du-Dlfd1Ei0ri1RQhQor81ZLUNI.roa (raw, json)
Hash identifier: qiqa9UQSD0oGFhUioJ/FKkL+EwNVtDhEjC1x9J6ziIM=
Subject key identifier: 76:EF:83:95:F7:75:12:2D:2B:8B:54:50:85:0A:2B:F3:56:4B:50:D2
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCE1D81178C823F2D884DD5CB800C6
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/du-Dlfd1Ei0ri1RQhQor81ZLUNI.roa
Signing time: Tue 02 Jan 2024 10:34:08 +0000
ROA not before: Tue 02 Jan 2024 10:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56862
IP address blocks: 195.91.146.0/23 maxlen: 23
195.91.144.0/23 maxlen: 23
195.91.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e1:d8:11:78:c8:23:f2:d8:84:dd:5c:b8:00:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76ef8395f775122d2b8b5450850a2bf3564b50d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:96:5e:d2:09:79:60:e3:08:5b:73:d2:f0:
94:36:bb:fd:98:a0:42:61:6d:ff:39:34:96:1d:e0:
82:34:13:f5:99:af:a8:d8:ef:d5:fe:3b:49:27:c5:
ed:3b:d6:be:ed:ac:c1:e8:54:d1:0e:49:d3:5b:0d:
9c:9e:37:28:82:9f:b0:33:7c:12:a1:2d:71:ba:28:
ad:f4:e7:80:80:5c:94:ce:20:89:10:bd:0e:eb:80:
f5:ef:07:0d:ed:0a:ed:47:dc:9f:50:1b:e4:8e:56:
7c:a8:f7:8d:b8:bb:99:5c:5d:01:13:65:a7:9b:e6:
f2:76:3a:6e:90:9b:46:15:14:5c:1f:39:66:46:76:
0d:ee:c0:99:f1:62:20:f0:86:bb:6c:ea:e4:a9:86:
fd:8f:12:28:2b:23:1d:77:88:72:3d:78:18:1c:67:
83:30:7f:64:0d:d6:a4:ab:71:f8:28:4d:d0:56:cf:
b1:61:fc:3d:d5:61:cb:a9:f1:55:99:05:87:fa:55:
e6:85:61:79:9f:5b:ad:7c:6b:a3:a9:36:b5:b6:c8:
02:84:b2:a8:9f:41:e6:8a:b0:2c:e8:5d:78:a5:a3:
07:5f:23:4c:7a:94:01:3b:10:20:00:d4:b1:6c:19:
96:49:8a:5e:5f:65:55:78:e6:06:37:bd:ef:93:48:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:83:95:F7:75:12:2D:2B:8B:54:50:85:0A:2B:F3:56:4B:50:D2
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/du-Dlfd1Ei0ri1RQhQor81ZLUNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.91.140.0/23
195.91.144.0/22
Signature Algorithm: sha256WithRSAEncryption
97:a3:f5:a5:f5:1c:53:ae:ec:73:32:58:bc:d5:57:7b:5c:31:
96:88:e1:a3:5c:b4:fd:1a:11:5e:45:b8:75:8b:5e:6a:56:25:
e4:ed:e5:83:85:8b:ef:77:cd:75:8f:05:80:5d:fc:cc:0d:87:
f5:82:4a:ce:19:57:4b:99:3e:94:a1:46:af:7e:d0:f3:84:29:
a3:c4:3a:51:4d:12:4a:20:a2:41:df:dd:f1:80:c2:9d:24:00:
b2:58:f8:80:04:2d:4c:6b:d8:b4:c0:a2:90:8f:80:f4:b5:b2:
95:df:0d:20:ce:6d:ed:80:3b:87:43:eb:3d:b5:ca:4b:65:b0:
48:50:67:97:0b:3e:cc:f2:35:92:20:2f:e0:f6:27:62:06:a4:
b0:76:7a:85:e0:fa:50:1e:00:36:aa:1b:ec:b6:f6:0a:42:ce:
ae:54:a2:63:77:17:3d:e2:4b:1a:6b:16:29:d7:37:a3:ed:b8:
02:a5:ae:f3:ae:1c:0d:20:1b:03:0c:72:91:90:66:61:62:aa:
d9:d7:b5:80:e3:c1:3e:0d:43:02:11:20:f3:79:e9:f2:fe:66:
97:0b:ca:3f:d2:69:9c:9e:c5:ac:e7:28:7b:01:de:ea:a6:82:
f0:fe:af:b8:28:e3:cc:13:42:18:58:d6:b0:27:42:8c:03:f3:
86:f5:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:05:36 2024 by rpki-client on console-fra.rpki-client.org