Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/DXA7suc33xUgKtH0dcvdDQL5xm0.roa
File: DXA7suc33xUgKtH0dcvdDQL5xm0.roa (raw, json)
Hash identifier: CTZt4U9aUJQI/KtwCq5+eFIRdq3ywQRMqKChLSlJG4s=
Subject key identifier: 0D:70:3B:B2:E7:37:DF:15:20:2A:D1:F4:75:CB:DD:0D:02:F9:C6:6D
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 018CC493225DD9F83E2FB3CDE671EF78A609
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/DXA7suc33xUgKtH0dcvdDQL5xm0.roa
Signing time: Mon 01 Jan 2024 10:30:26 +0000
ROA not before: Mon 01 Jan 2024 10:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59828
IP address blocks: 185.70.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:22:5d:d9:f8:3e:2f:b3:cd:e6:71:ef:78:a6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d703bb2e737df15202ad1f475cbdd0d02f9c66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:99:0c:a2:8e:ac:1b:ea:a8:a0:b4:b3:8b:
b3:27:8d:da:2d:2e:c7:91:32:54:8d:8d:73:fe:16:
4e:a4:84:da:5a:6b:04:a2:a4:70:47:b7:6e:33:e4:
6a:47:3a:1a:eb:3a:b0:cb:d9:6d:e1:b8:3f:72:3e:
de:35:e8:a4:78:88:66:52:36:2e:4c:6f:73:9b:09:
25:bf:ab:62:0d:15:c5:0f:9b:c6:14:e7:57:07:e4:
77:ab:e1:70:8e:81:74:61:c5:be:fe:ef:37:85:2a:
32:ef:db:59:7d:56:0a:f9:f4:0b:08:d5:5f:7c:bf:
41:01:da:15:a9:a7:ee:9d:ba:82:48:19:39:75:e1:
29:82:06:7f:53:1b:75:5d:29:09:ca:3a:51:29:90:
89:6f:26:e2:59:69:20:89:73:f8:64:dd:e8:9f:eb:
99:fb:73:0c:ad:34:b2:a7:2c:92:31:29:48:e8:ea:
01:f2:2c:8f:f8:2a:69:cc:b0:58:e5:cc:2b:81:1e:
e3:1c:aa:17:29:11:d0:56:9e:ee:e4:87:d3:5b:de:
ac:a6:dd:5a:4a:a8:7c:55:dc:32:b2:80:df:ca:f8:
78:17:9c:2d:06:1a:7d:de:a4:cd:83:56:93:54:1c:
bf:f9:65:71:a7:cd:dc:b5:7d:24:bb:6f:a0:73:a5:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:3B:B2:E7:37:DF:15:20:2A:D1:F4:75:CB:DD:0D:02:F9:C6:6D
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/DXA7suc33xUgKtH0dcvdDQL5xm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.36.0/22
Signature Algorithm: sha256WithRSAEncryption
17:de:b3:21:0d:0f:56:a9:76:1f:1f:d2:26:3d:10:5b:89:e8:
ca:07:9a:d1:da:b1:c3:f1:3c:b0:90:b6:a1:4e:78:4f:96:a1:
52:3f:00:ad:a2:69:e9:ba:a1:16:3d:41:ca:3d:73:15:dc:51:
55:21:51:30:0d:e9:50:86:a8:73:ba:f0:a1:51:b2:93:4b:f7:
57:b1:c7:71:cc:9b:2c:d8:7f:72:15:40:3f:86:8c:e8:3d:76:
53:fc:7f:03:35:71:04:be:07:9c:7a:73:df:1d:68:5a:5b:58:
c9:18:85:08:b8:7e:cc:af:43:1e:47:db:39:1b:aa:aa:bb:b3:
a9:af:e2:d9:25:a4:01:a9:1a:92:f2:fb:2f:5a:33:5e:a6:85:
36:26:7f:f3:35:59:d4:16:33:0c:05:e8:4a:a4:d4:26:90:e5:
59:84:63:14:98:61:d1:14:9b:d2:de:99:a8:48:f5:76:0d:7b:
ef:28:1f:11:b3:5d:54:df:cc:47:b1:00:e4:66:bf:8d:c7:01:
00:44:83:a8:0d:a5:a8:41:70:d5:cd:25:47:79:b8:ed:2d:5b:
2c:88:77:a8:e9:8e:63:26:6f:54:b9:0a:8b:00:6e:f9:4c:e2:
cf:71:38:73:47:1b:d3:24:5a:ae:ae:31:84:d7:ba:5a:e6:ab:
85:12:1e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:10:29 2024 by rpki-client on console-ams.rpki-client.org