Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/DFAOyc9lH0EKbgpGENOSLS2ycnc.roa
File: DFAOyc9lH0EKbgpGENOSLS2ycnc.roa (raw, json)
Hash identifier: 9jRzYlttC9RJ8qjCrex0wQcg4YcVlF0eiSj5GKjGgdA=
Subject key identifier: 0C:50:0E:C9:CF:65:1F:41:0A:6E:0A:46:10:D3:92:2D:2D:B2:72:77
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018CC6B813D628096B41C11F69D5479393B0
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/DFAOyc9lH0EKbgpGENOSLS2ycnc.roa
Signing time: Mon 01 Jan 2024 20:30:01 +0000
ROA not before: Mon 01 Jan 2024 20:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35473
IP address blocks: 213.87.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:13:d6:28:09:6b:41:c1:1f:69:d5:47:93:93:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 20:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c500ec9cf651f410a6e0a4610d3922d2db27277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:77:8c:bd:a0:92:88:af:74:f0:5b:fa:b2:
fe:d2:f6:4f:30:65:cd:16:41:60:02:52:a6:63:2d:
73:f8:8e:bc:5a:0a:50:c1:0c:7d:de:db:59:36:c5:
5e:d9:d2:62:85:56:37:1f:b4:7c:fe:0b:2e:45:55:
66:f8:73:97:a3:75:ef:0f:0a:14:fe:56:2a:41:9a:
e3:5c:6f:74:20:a5:7d:3a:f6:f0:12:aa:10:7e:9e:
3b:47:32:a4:7a:e4:ba:cf:56:d4:ac:6c:1f:5f:8e:
af:d9:21:de:1f:2f:3a:81:d9:3d:ac:05:e5:73:97:
94:d1:66:6f:09:0c:21:71:d5:60:a3:2a:62:fe:b8:
96:a5:2c:7c:b5:6f:ee:1d:a4:34:3b:f7:ab:39:0e:
9c:6e:78:35:d9:85:37:99:08:96:53:b6:17:96:64:
05:08:f9:1b:f9:ca:1b:86:2e:90:34:e3:bb:34:59:
e2:49:e1:36:f9:0f:6c:42:fb:45:51:b1:66:ed:05:
ae:6e:b8:b3:98:b5:d8:1f:f0:dc:67:43:f6:f4:cb:
db:8b:7b:b6:41:c9:0d:e2:86:db:f5:3c:16:8e:87:
7b:fd:5e:18:71:fa:4c:39:eb:d9:01:9b:19:9d:7d:
9e:dd:b1:7c:ef:7c:9f:94:e5:cb:b6:cd:9d:4c:dd:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:50:0E:C9:CF:65:1F:41:0A:6E:0A:46:10:D3:92:2D:2D:B2:72:77
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/DFAOyc9lH0EKbgpGENOSLS2ycnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:5c:3f:15:8b:1d:34:c5:45:23:53:7a:ce:07:0d:a8:33:e6:
d5:cd:19:d2:15:1e:43:af:e6:dd:92:0f:d4:61:d2:da:72:2a:
ae:5f:40:83:0d:e1:c6:8e:3b:2b:8c:84:14:dd:0a:93:5f:35:
a8:53:bf:24:23:6f:48:2e:de:46:c2:d9:ec:94:93:4a:2d:64:
ed:9a:db:d0:9a:ee:43:15:27:d8:c6:e6:e1:e2:c5:b9:d6:77:
cb:15:95:07:2d:8a:b8:fe:a2:08:9b:0c:cc:6e:9c:33:4a:96:
60:31:f9:d2:11:be:dc:51:e0:03:ce:61:f6:4a:fa:4f:25:c4:
c4:4b:44:83:16:9c:be:24:d7:71:4a:15:3f:89:5c:0c:1d:73:
83:0b:fd:da:dd:fc:74:82:3d:e7:f3:5d:c3:58:9f:84:70:0b:
d7:2d:88:de:44:44:a5:da:d4:2b:c7:d6:ca:c3:4a:79:9f:77:
14:e1:54:d2:ed:16:e5:8b:9b:77:24:c3:69:51:31:a5:3f:a8:
29:10:c6:ee:0c:4d:92:8a:96:99:8a:1e:cf:21:4d:2d:02:05:
67:6b:9a:9e:f7:81:54:22:6f:fc:7b:dd:69:ba:b4:e1:14:ec:
ff:f6:91:f4:ab:86:07:0d:1b:f4:95:13:3a:1c:73:40:02:4d:
60:5d:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:16:56 2024 by rpki-client on console-ams.rpki-client.org