Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/DLPCyIKM7jz79PsqVnrxNoMgYXE.roa
File: DLPCyIKM7jz79PsqVnrxNoMgYXE.roa (raw, json)
Hash identifier: +QgaTeTZpZ2fDtls8hcOtAF0lYWHQbDmqjy56TBm3AY=
Subject key identifier: 0C:B3:C2:C8:82:8C:EE:3C:FB:F4:FB:2A:56:7A:F1:36:83:20:61:71
Certificate issuer: /CN=9e563c426d1aae4ed1e7f59536749022089e8479
Certificate serial: 019426D9786F668BD701ABA65FBEFF7589BC
Authority key identifier: 9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/DLPCyIKM7jz79PsqVnrxNoMgYXE.roa
Signing time: Thu 02 Jan 2025 11:49:33 +0000
ROA not before: Thu 02 Jan 2025 11:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3238
IP address blocks: 79.133.0.0/19 maxlen: 19
82.199.160.0/19 maxlen: 24
194.110.176.0/20 maxlen: 24
194.112.0.0/20 maxlen: 24
212.17.160.0/19 maxlen: 24
213.204.32.0/19 maxlen: 24
2a00:5500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:78:6f:66:8b:d7:01:ab:a6:5f:be:ff:75:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e563c426d1aae4ed1e7f59536749022089e8479
Validity
Not Before: Jan 2 11:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cb3c2c8828cee3cfbf4fb2a567af13683206171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:3c:3f:f2:89:6d:37:7a:98:d2:d3:a3:fb:
dd:1a:d7:91:dd:da:db:d7:7c:68:eb:3f:27:44:5e:
c4:45:00:85:f8:b9:ab:b6:b3:be:03:f2:c9:28:f5:
42:c8:3d:8c:54:ed:f9:c9:c3:29:da:78:0c:ce:15:
59:ff:b9:40:cf:33:19:8d:40:35:5a:0d:06:03:25:
fe:5a:13:81:a6:70:b0:d6:ce:a7:d4:18:4e:4c:27:
fa:cf:65:44:9c:3f:db:23:20:2d:54:4a:34:1a:c1:
15:dd:1a:cc:bc:8b:ec:f4:c7:bb:de:9e:be:f7:08:
11:06:e1:f9:a8:e4:c5:df:17:e7:34:42:1d:d5:53:
ba:99:15:03:3b:b5:4b:91:85:c9:92:f4:65:2a:22:
81:60:38:e5:60:b7:a2:71:ba:9b:54:d1:5e:7e:70:
d5:15:dd:fa:e6:47:f6:84:5a:50:41:ce:6a:db:76:
f2:48:52:7d:22:a5:0b:10:20:c5:b3:22:0c:49:72:
22:6c:7c:6a:50:e8:d1:e0:ff:dd:61:70:bb:89:7a:
d4:d9:2d:a7:7d:3b:ae:15:2f:b9:57:58:68:86:30:
dc:86:3f:80:dc:03:d1:8b:91:ca:ec:b4:c3:8e:91:
48:c5:1e:46:35:0d:b5:a8:bd:d8:fa:0c:64:2b:e4:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B3:C2:C8:82:8C:EE:3C:FB:F4:FB:2A:56:7A:F1:36:83:20:61:71
X509v3 Authority Key Identifier:
keyid:9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/DLPCyIKM7jz79PsqVnrxNoMgYXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.0.0/19
82.199.160.0/19
194.110.176.0/20
194.112.0.0/20
212.17.160.0/19
213.204.32.0/19
IPv6:
2a00:5500::/32
Signature Algorithm: sha256WithRSAEncryption
27:65:bc:9d:70:e7:92:d9:91:dc:8d:73:96:8b:7c:f3:3f:02:
bb:3e:6f:ad:7c:f9:4c:1e:1c:c0:7d:84:a0:55:23:43:4c:7f:
93:d5:9b:4f:81:3f:82:a2:a2:c3:2d:61:e9:87:32:cc:cb:ed:
97:7a:bd:b6:22:48:48:bb:02:ee:95:b4:59:b0:41:0d:b3:4d:
b4:05:10:40:c6:3e:14:28:16:57:8b:e8:6e:ee:34:1d:b2:88:
b7:0b:fd:14:2c:04:d9:41:bf:1c:28:f8:52:f6:e6:68:c9:38:
a2:db:3c:12:d2:a0:92:d8:a6:83:48:af:3b:61:70:16:fc:e1:
0c:17:bb:65:41:25:09:b8:80:c1:4a:cf:64:4c:8b:5b:b5:c0:
b7:6b:f0:57:5d:29:79:f3:d8:f9:34:89:d0:e4:53:1b:01:6c:
ef:35:4d:f6:7c:41:db:7d:41:f2:6e:2f:a7:34:cf:db:c7:00:
a5:40:04:0c:40:cf:58:81:ae:1f:54:3b:54:51:53:dd:f8:28:
86:f2:5d:1a:ef:d1:1b:fb:c2:e5:6c:e4:99:7a:6b:0f:37:33:
8b:52:fb:8e:e9:ea:01:64:9d:2e:71:de:7c:fe:7b:c0:c6:ff:
0e:43:7c:86:6f:26:7a:1f:58:ca:1a:4e:9b:c5:03:21:e8:9e:
d7:1b:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:54 2025 by rpki-client