Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/DtrK-wWPlhYLyHH5i8MqPp-UJQ8.roa
File: DtrK-wWPlhYLyHH5i8MqPp-UJQ8.roa (raw, json)
Hash identifier: Wi1e8vg5AoLMIoJjdUzpV3KwrhRDftChUusAhyu/N9M=
Subject key identifier: 0E:DA:CA:FB:05:8F:96:16:0B:C8:71:F9:8B:C3:2A:3E:9F:94:25:0F
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 018DFA5439D994B83CA3C6EF19E0CE271588
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/DtrK-wWPlhYLyHH5i8MqPp-UJQ8.roa
Signing time: Fri 01 Mar 2024 14:04:00 +0000
ROA not before: Fri 01 Mar 2024 14:04:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39686
IP address blocks: 193.53.128.0/19 maxlen: 19
193.53.128.0/24 maxlen: 24
193.53.137.0/24 maxlen: 24
193.53.139.0/24 maxlen: 24
193.53.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:54:39:d9:94:b8:3c:a3:c6:ef:19:e0:ce:27:15:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Mar 1 14:04:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0edacafb058f96160bc871f98bc32a3e9f94250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:1b:f9:19:e6:86:e8:ea:61:3a:9e:06:cf:
ae:dc:fd:82:54:52:5e:fc:19:0e:98:f2:65:71:0d:
b3:fc:d2:50:f3:cf:be:f7:29:8e:cf:07:90:a7:97:
1f:37:86:de:5b:d2:1c:d3:90:69:d9:4e:ae:0f:3a:
66:59:f8:e4:3f:bc:1d:50:73:43:bf:ee:d1:79:e1:
f9:b2:82:b1:5d:84:1a:38:b1:04:30:ce:fa:7f:a3:
57:b5:2b:f1:13:ca:7b:71:0e:96:05:95:f8:d1:4b:
81:75:46:ac:51:c3:d0:4c:82:c9:9a:17:77:85:3a:
c6:72:99:c7:64:ac:b8:39:68:db:84:e0:b5:72:a3:
c3:ec:2b:1f:73:ab:1f:e9:11:df:02:3e:86:ee:d5:
50:ef:a4:3d:91:4b:e1:7f:b0:09:eb:9b:76:01:20:
0c:f3:e2:c9:de:a4:02:34:b5:7a:d9:8e:3e:58:c0:
e7:3b:86:53:ef:34:85:cd:d3:93:08:c2:e3:fa:0e:
65:00:9e:75:2f:2a:28:42:cd:f5:ea:36:a7:ef:e5:
0b:a3:e0:d0:36:51:07:ab:f1:50:7e:f4:0f:79:30:
55:87:e4:0a:a0:89:cf:a4:6c:d6:79:ce:43:50:47:
18:79:53:6d:7b:45:19:89:56:48:6b:60:d6:c4:07:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:CA:FB:05:8F:96:16:0B:C8:71:F9:8B:C3:2A:3E:9F:94:25:0F
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/DtrK-wWPlhYLyHH5i8MqPp-UJQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.128.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:70:72:cc:6a:5b:3a:33:5a:3e:7a:71:8a:12:23:61:cd:6e:
11:07:4c:98:70:69:d3:55:7e:b0:ce:36:e6:2a:de:4e:00:58:
49:d8:d0:b3:0e:a1:75:2f:eb:6b:71:bf:39:85:48:77:e4:c8:
b4:50:af:90:41:3e:2d:46:69:1e:61:10:1f:47:b4:e2:f0:7a:
e7:d2:c2:26:c3:7f:63:74:ca:64:01:4e:4d:1b:58:fe:31:4a:
23:a8:19:39:aa:ff:cf:d8:72:b3:66:68:7e:60:dd:3c:cb:d5:
65:26:11:1c:d8:dd:e2:1f:9a:7f:32:ec:35:34:c3:3b:7a:9f:
8f:bf:ed:c2:80:6c:48:5b:43:f1:4e:b9:98:92:7c:2e:5c:91:
e0:1b:28:d8:22:26:01:9c:d1:18:7a:f5:36:f3:75:68:3b:f9:
5b:ab:2e:a4:26:38:76:c1:86:62:02:ed:f8:6e:6e:9c:fd:71:
26:a8:87:dd:f4:6e:ea:45:26:c6:98:7b:66:c8:b4:4d:0b:91:
a3:2b:f1:5c:60:26:76:57:b1:0f:34:16:0a:c3:e8:cc:26:b0:
80:98:b0:26:f3:4c:a3:29:52:11:eb:de:ef:69:0f:0f:42:18:
37:cc:9d:b0:51:8b:fc:20:50:3b:20:01:fd:ae:83:78:65:7d:
6e:77:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:01 2024 by rpki-client on console-ams.rpki-client.org