Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/Dt6rrxVfzPOoWqGJY5TydqUVpNo.roa
File: Dt6rrxVfzPOoWqGJY5TydqUVpNo.roa (raw, json)
Hash identifier: J/6QHlMTaNS+SylufhMpQaH1BvnWkPmT4CI1AhjINtg=
Subject key identifier: 0E:DE:AB:AF:15:5F:CC:F3:A8:5A:A1:89:63:94:F2:76:A5:15:A4:DA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 018CC3B66E436C66C88D0E6E4FB0089B4F80
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/Dt6rrxVfzPOoWqGJY5TydqUVpNo.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60845
IP address blocks: 185.113.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6e:43:6c:66:c8:8d:0e:6e:4f:b0:08:9b:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0edeabaf155fccf3a85aa1896394f276a515a4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:d3:a4:d7:30:04:df:a0:7c:9f:3f:a4:f8:
24:df:7c:6e:58:0c:2f:cc:4d:9f:af:e7:89:4a:47:
fd:38:01:a4:55:4d:1e:b5:37:01:5b:d2:08:78:2e:
53:ea:ca:11:b6:a7:f4:37:54:7d:8d:39:54:06:92:
5b:e0:18:1f:ab:0f:35:5e:a3:e8:07:7a:36:54:01:
1d:0c:57:09:16:aa:49:2a:fb:bc:9d:4b:7d:3f:a5:
6a:5f:86:4d:7d:97:02:a5:69:d8:ed:c4:f9:61:f0:
05:07:08:e1:80:cd:80:41:bd:56:68:e1:80:a5:96:
2d:8b:5e:2e:aa:9a:8c:4f:56:67:ac:70:db:36:73:
02:8b:ce:ee:0d:c5:9a:12:c7:c7:9d:69:8f:87:17:
99:7a:a6:01:8a:36:ff:db:89:6d:08:77:d2:59:4f:
0e:68:36:3b:72:ac:29:54:de:78:e3:a9:53:08:a8:
fd:60:4b:05:50:91:9e:5c:41:1d:e3:62:87:96:c8:
d3:79:35:17:f3:29:3f:40:11:b1:11:e7:e4:79:20:
d5:3c:e3:d1:77:7d:ce:c3:01:ce:06:58:79:53:11:
63:b6:74:cf:c6:a7:df:27:db:a0:b6:5b:6c:a0:e9:
da:f6:f5:0c:3e:ad:9c:e8:a1:11:c1:1c:ca:de:90:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:AB:AF:15:5F:CC:F3:A8:5A:A1:89:63:94:F2:76:A5:15:A4:DA
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/Dt6rrxVfzPOoWqGJY5TydqUVpNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.164.0/22
Signature Algorithm: sha256WithRSAEncryption
93:69:6f:6f:13:88:44:5e:16:08:e3:d8:2c:d9:f1:31:b9:12:
26:80:3f:2b:ca:db:98:94:18:f5:77:51:28:a7:27:ff:0f:5d:
82:f0:63:b2:94:c0:cf:79:66:92:8f:01:c2:c5:f0:be:cb:90:
b6:b5:e0:38:e9:52:81:ea:b9:a7:93:b9:aa:68:7b:c7:9f:78:
80:dc:8b:c4:2a:c4:f8:4c:36:da:20:52:96:80:4f:46:38:f1:
55:e7:6d:b1:f7:88:55:23:14:9f:4a:9d:a2:83:49:73:44:b0:
19:c8:42:82:91:19:86:38:9a:d6:9a:26:2d:69:2e:f6:5e:1b:
6a:59:3a:4a:d7:76:3e:89:20:8d:e3:93:f9:ee:ed:2a:6e:aa:
f6:f2:af:17:fd:bb:c8:49:aa:9d:17:69:4c:04:89:1e:c8:e6:
5a:c0:d3:3b:b5:ef:4e:0f:ed:8d:c8:d6:3b:af:b7:20:7d:25:
28:d8:4d:82:b9:d8:04:cb:03:e3:cb:8b:cb:ac:ab:c5:7c:c8:
d5:7f:eb:1c:a9:3c:f7:da:54:92:ab:fa:b1:15:8a:21:b5:e6:
b2:10:40:9c:d8:00:f3:9d:fa:92:8a:5b:63:bc:9a:1b:5a:d3:
d8:73:75:98:a7:b4:51:83:fd:5b:40:f0:d4:74:a1:cb:d7:0a:
45:7e:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:23 2024 by rpki-client on console-fra.rpki-client.org