Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/DKjZURwOaWIA-6at2RWFBhdkQj8.roa
File: DKjZURwOaWIA-6at2RWFBhdkQj8.roa (raw, json)
Hash identifier: KW8qECInLTuswGR2f1KWBZvzEsr+RpheOIVcQyvcaAQ=
Subject key identifier: 0C:A8:D9:51:1C:0E:69:62:00:FB:A6:AD:D9:15:85:06:17:64:42:3F
Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial: 018CC2DB6852A8719B5FEA442B8106DE42E2
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/DKjZURwOaWIA-6at2RWFBhdkQj8.roa
Signing time: Mon 01 Jan 2024 02:30:08 +0000
ROA not before: Mon 01 Jan 2024 02:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200235
IP address blocks: 45.137.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:68:52:a8:71:9b:5f:ea:44:2b:81:06:de:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Validity
Not Before: Jan 1 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ca8d9511c0e696200fba6add91585061764423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:16:f8:13:aa:21:18:11:e2:6c:c5:64:85:
67:8d:df:62:b9:84:76:6b:37:77:f2:b4:67:f7:ba:
fe:fb:1e:da:2d:7d:f3:b4:32:5e:b3:ac:89:c0:fd:
84:cb:64:51:8a:fd:d9:d6:2e:2a:0c:8e:b4:82:f2:
12:f3:b4:29:22:04:a4:1d:13:6e:81:fa:6c:50:a5:
89:2c:22:ef:21:17:ee:62:99:24:8c:28:58:a7:b2:
ca:46:cc:c8:2e:0b:a9:ff:66:4c:83:28:f8:20:4c:
97:b0:d4:06:e9:cf:b9:2d:fe:fb:7a:e7:23:1f:ca:
07:62:02:67:6f:6f:d5:ba:80:60:f4:68:a9:0f:f3:
ae:76:d9:98:e7:0e:a5:6d:3a:82:a6:d9:72:c0:7f:
c3:1c:d6:41:04:a4:2f:c2:26:bd:34:12:ef:39:f6:
31:cc:76:57:a9:d3:1a:e3:1d:27:41:6f:65:67:db:
04:bb:ea:5e:34:18:b8:a3:5b:7e:8f:e5:86:9b:58:
9e:f8:3b:88:fd:c7:60:3c:37:a1:6a:d4:68:42:a2:
53:b8:62:15:9c:d1:eb:68:2e:8e:11:c4:51:f0:47:
42:e2:ab:e3:6a:fa:88:e8:dd:47:54:fb:45:1c:1e:
21:9a:3d:c1:00:66:ab:e6:ae:e9:18:af:3e:1a:3b:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:D9:51:1C:0E:69:62:00:FB:A6:AD:D9:15:85:06:17:64:42:3F
X509v3 Authority Key Identifier:
keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/DKjZURwOaWIA-6at2RWFBhdkQj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.27.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:1a:48:2e:57:d3:b1:a4:5e:22:9d:8f:c3:f5:d7:a1:80:c3:
fd:2e:03:1c:06:5d:c2:66:ce:da:9d:85:4a:54:99:29:39:93:
28:86:15:9f:79:e6:ad:6e:a9:a6:6a:42:e6:88:b2:00:51:38:
44:4d:ff:bd:8e:38:95:1b:fb:15:93:a6:ec:b4:1c:37:5e:58:
52:1e:1b:7c:33:e9:3c:95:6f:53:1f:66:bc:e2:d4:22:89:64:
97:00:70:19:69:fa:e1:98:3c:4c:6a:18:69:ad:0d:f7:d2:30:
d3:ea:a7:ef:17:81:13:dc:2c:49:c2:24:35:e2:60:26:19:ba:
03:e7:3e:c4:ff:13:de:9c:8a:96:63:f1:c3:e9:46:ad:45:e4:
a4:28:28:23:e9:5c:2c:7d:12:12:21:96:a7:2e:33:6f:6f:a3:
f9:79:2c:e6:78:e8:99:9e:65:aa:b1:bb:74:24:8d:71:56:c4:
f3:c0:2c:c9:38:a4:a2:c9:c3:af:71:a3:52:00:82:17:48:55:
e8:62:84:6a:bc:e6:ec:39:9e:68:25:f6:7d:fd:4c:28:a6:1c:
17:59:2a:a7:46:d6:01:f5:22:e3:61:1a:03:91:25:cf:60:95:
d2:2b:fa:90:33:df:d0:19:cf:ff:bd:14:97:31:ff:9f:d4:6c:
81:bf:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:19:48 2024 by rpki-client on console-ams.rpki-client.org