Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/dSva_x_94t83ukqVVkBgQeOGMIM.roa
File: dSva_x_94t83ukqVVkBgQeOGMIM.roa (raw, json)
Hash identifier: 6W4MEELcaPllSideN4eiFRuVV6jEqpFRNnHWibzsyog=
Subject key identifier: 75:2B:DA:FF:1F:FD:E2:DF:37:BA:4A:95:56:40:60:41:E3:86:30:83
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 018CC795525BF1F78441F7232C136436480E
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/dSva_x_94t83ukqVVkBgQeOGMIM.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60772
IP address blocks: 185.32.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:52:5b:f1:f7:84:41:f7:23:2c:13:64:36:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=752bdaff1ffde2df37ba4a9556406041e3863083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:94:65:5f:7a:cc:09:74:02:7b:37:e5:47:
00:e4:9a:8a:f6:fb:0c:d1:04:ee:2e:18:94:18:80:
02:a8:97:fd:da:fe:1a:9f:c0:9c:b9:2e:21:06:a6:
06:95:9f:e7:0a:3b:89:1f:24:24:10:f5:c9:7b:e4:
23:ae:90:17:ae:0f:0f:84:6e:47:d7:0a:2c:28:df:
b5:d7:7c:15:3e:42:a3:ed:19:99:ca:3b:23:3a:5e:
11:be:de:1f:5b:8c:9c:23:03:83:3e:13:6a:cc:05:
c4:fe:47:39:9d:85:50:e8:05:bc:0a:92:08:3b:6e:
2d:d9:a6:24:06:f6:c8:93:2b:66:d2:15:65:d6:8f:
11:70:38:b3:0c:dd:05:00:60:9f:18:2a:55:25:aa:
62:8e:95:12:81:9d:31:9e:2c:f8:cb:5c:18:a2:a5:
08:8f:26:3f:0c:bf:7d:f4:3a:23:7b:56:43:dd:4a:
0f:0d:ca:03:ea:63:c0:ca:73:72:9d:9b:74:bb:29:
3e:7b:61:47:ba:fc:fa:16:14:10:24:28:c5:1f:b4:
9a:5e:93:98:25:c8:28:8e:08:70:95:bd:36:24:35:
78:ab:04:b3:5d:19:d1:5d:06:75:7b:77:b1:61:69:
95:ed:23:4d:6f:e3:67:4f:a4:9d:db:d7:d0:1a:61:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2B:DA:FF:1F:FD:E2:DF:37:BA:4A:95:56:40:60:41:E3:86:30:83
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/dSva_x_94t83ukqVVkBgQeOGMIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:aa:5c:00:41:c0:ae:ae:ba:2b:20:6d:24:40:bb:f9:77:b7:
19:20:eb:cf:73:07:17:97:63:aa:58:a9:a2:a9:a9:22:8b:6e:
d9:b9:3b:1f:40:79:59:1a:2f:88:02:a8:88:35:2d:5c:a7:ba:
b5:10:d7:ee:2d:83:05:b9:fc:c9:74:74:2c:68:98:69:2f:e6:
9e:63:77:20:6c:5c:8f:e8:56:bd:c3:d1:a1:ef:7b:d1:7f:03:
8e:65:57:6f:a8:03:fc:02:dc:d7:95:68:be:e3:23:99:80:39:
3e:6a:63:0a:4d:63:5c:00:17:77:6d:54:0e:da:a3:bf:38:1a:
d7:54:2b:40:87:46:6f:06:d0:ed:54:b7:31:f7:ef:43:e5:bd:
f5:e3:80:51:26:12:69:32:ab:c8:20:c9:37:93:6e:5f:c2:23:
5a:a3:e1:6a:b1:c4:9f:65:a6:02:8d:e2:d2:8b:66:4e:7b:ea:
dd:d4:36:52:5d:db:e5:45:05:47:8b:dd:45:1f:ae:2b:6c:52:
80:0b:3b:b3:cb:1e:c7:df:d2:3e:c3:94:a0:6b:03:1f:96:01:
e0:d7:45:ac:45:06:cf:cb:db:f5:85:c9:d5:2a:c1:39:cc:0d:
53:74:a3:5e:cb:fa:ef:c0:95:96:e0:a1:c0:eb:ea:dd:a3:ed:
4f:8d:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:49 2024 by rpki-client on console-fra.rpki-client.org