Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DG81HCofQOKfLHWvM5-61jbXDIc.roa
File: DG81HCofQOKfLHWvM5-61jbXDIc.roa (raw, json)
Hash identifier: 0aYJbyd/foTqP6BopoZe1y+Is0CDnRr5DyE6nf+ni2A=
Subject key identifier: 0C:6F:35:1C:2A:1F:40:E2:9F:2C:75:AF:33:9F:BA:D6:36:D7:0C:87
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018CC7275A15CF85BD9A3889ED71C8F282C7
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DG81HCofQOKfLHWvM5-61jbXDIc.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 146.19.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5a:15:cf:85:bd:9a:38:89:ed:71:c8:f2:82:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c6f351c2a1f40e29f2c75af339fbad636d70c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b2:e1:69:1a:a5:13:82:f3:43:eb:c7:1a:fe:
c1:f4:de:4e:fc:01:b0:3b:bd:f3:0e:9f:0e:9e:bf:
64:f3:6d:b2:41:4d:80:77:c3:75:f6:94:d4:a9:42:
f4:64:23:47:97:11:42:62:41:f9:7e:f5:77:21:1a:
0a:c5:44:23:66:07:81:db:ba:45:56:35:1f:62:f1:
52:f0:69:bf:59:d4:ad:0f:f6:9d:72:92:c9:a8:e4:
7f:a2:75:bd:2e:1b:d3:f7:49:de:c1:25:6a:60:7b:
45:fe:1c:7f:37:7f:17:e8:d3:99:43:2e:2d:af:ad:
78:a6:64:03:5a:bd:cb:ff:66:ab:ab:b8:44:db:29:
cc:4e:4c:87:5c:94:19:2e:24:51:e6:fe:a1:f3:68:
60:b6:00:46:1d:95:e3:63:52:ef:cb:bd:51:3c:b7:
08:ad:d0:0a:5b:93:e5:83:b9:76:b4:2f:97:4c:22:
94:63:02:61:74:de:57:88:8a:9d:d5:45:71:88:41:
c3:15:be:3e:b4:21:35:92:dc:63:bc:a1:1d:33:fe:
18:10:3e:22:69:e9:e8:1f:93:ab:8f:5f:4b:95:f0:
9f:2a:fe:38:50:8d:42:73:00:6f:03:07:af:7b:aa:
4b:26:73:32:0e:23:fe:f6:38:5c:b1:60:12:70:37:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:35:1C:2A:1F:40:E2:9F:2C:75:AF:33:9F:BA:D6:36:D7:0C:87
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DG81HCofQOKfLHWvM5-61jbXDIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:03:69:55:d9:ce:68:e7:bb:06:01:56:1c:6b:5a:b3:b6:d1:
c3:1e:af:e7:68:fa:0b:ea:da:2d:e8:58:ac:8b:6e:8b:73:0d:
63:f6:5c:95:9c:17:cc:66:95:de:0b:d6:04:c2:98:3e:54:c2:
be:2b:59:9a:c7:1a:68:2b:a4:f1:aa:5b:d8:07:1d:07:c4:10:
f8:83:a5:89:5c:4c:c1:72:0d:fb:b9:f6:c3:1a:97:7a:17:a8:
b3:da:9a:d1:c4:91:ce:2c:7d:ac:d3:93:bd:94:1b:9b:fe:42:
7b:ac:c4:02:f2:3c:9d:d3:f0:4c:aa:85:a3:5f:11:ac:5d:f1:
82:a7:6c:2d:0f:aa:36:b6:32:cb:45:9b:b6:99:fa:8c:3c:46:
60:e1:8e:b1:04:83:1c:c2:bb:37:0d:8d:fa:ea:37:10:f2:f3:
df:5b:d5:ad:03:30:51:39:59:16:a3:81:32:c2:6e:6c:ff:d0:
df:65:d3:71:84:0c:b5:a0:d5:97:b7:61:44:90:84:13:5c:79:
f2:c9:2e:5b:d9:d6:0c:c7:b6:c9:46:75:b4:87:a2:6f:28:4e:
92:db:9c:0c:89:f3:45:37:49:0f:85:b6:f2:f4:68:2a:c0:5b:
30:d9:c8:ea:10:d3:dd:09:68:18:88:f8:45:05:1c:69:36:85:
3f:f4:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:27:27 2024 by rpki-client on console-ams.rpki-client.org