Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/dAm-l0_ABT478I9ddaiSpv6XfgY.roa
File: dAm-l0_ABT478I9ddaiSpv6XfgY.roa (raw, json)
Hash identifier: IDQxC4qBDaKjClhn2oRJVnCknOoNZfUqqQ1P36gQsqo=
Subject key identifier: 74:09:BE:97:4F:C0:05:3E:3B:F0:8F:5D:75:A8:92:A6:FE:97:7E:06
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019077DCD21033BF47CA56DA849AFECA9124
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/dAm-l0_ABT478I9ddaiSpv6XfgY.roa
Signing time: Wed 03 Jul 2024 09:11:18 +0000
ROA not before: Wed 03 Jul 2024 09:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 91.195.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:dc:d2:10:33:bf:47:ca:56:da:84:9a:fe:ca:91:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Jul 3 09:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7409be974fc0053e3bf08f5d75a892a6fe977e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:81:90:47:4d:98:16:c5:60:ab:98:13:81:
df:68:cb:2a:a6:68:a5:86:89:79:bf:4c:82:8f:d1:
4f:9b:c2:98:c7:c0:dc:9b:0e:8b:d7:56:d8:b2:62:
a1:b0:8e:2a:83:2d:4f:1d:2f:62:f4:cd:00:f0:79:
76:9b:65:8b:f8:f4:37:84:bd:32:51:e9:11:5c:79:
c5:a0:27:2f:7b:08:97:d4:e1:33:c2:78:d1:5d:1c:
2c:d0:eb:65:ce:c1:65:6d:8b:27:2c:13:36:de:a5:
eb:38:27:4b:d0:42:e8:8f:eb:2a:08:d9:84:a2:61:
ea:7f:90:61:7b:23:7f:84:66:22:7c:c1:73:3f:cd:
aa:3b:f9:bc:a9:01:af:c1:e2:d2:ed:7b:82:e1:bd:
6e:fa:74:00:83:69:1c:16:2d:7a:97:c4:4b:86:de:
e5:9e:b2:9d:31:f3:ae:bf:d8:33:3c:54:51:2c:54:
b6:28:26:16:73:92:e0:9d:02:f6:b5:c7:1c:ae:e2:
80:57:54:81:87:e5:a4:61:ab:2b:e8:0e:12:ac:f4:
09:a1:df:4a:dc:d4:ee:fd:30:2c:63:c9:e8:c4:5f:
a1:56:f6:f7:31:7f:2f:42:77:3d:62:bb:70:ff:6c:
8b:4a:35:f3:2d:da:59:dc:11:6d:1d:3b:01:35:4b:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:09:BE:97:4F:C0:05:3E:3B:F0:8F:5D:75:A8:92:A6:FE:97:7E:06
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/dAm-l0_ABT478I9ddaiSpv6XfgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.37.0/24
Signature Algorithm: sha256WithRSAEncryption
af:82:86:da:09:b6:ac:f2:a0:7f:6e:f6:d5:4e:6b:5e:54:74:
0a:2e:c7:b6:dd:ff:36:7e:2e:a4:2b:d8:92:ee:93:a6:80:87:
c6:65:1e:61:bb:e3:6e:43:63:ed:3e:ff:2f:de:10:19:96:4a:
3b:a7:9a:e6:29:c0:4c:5c:39:f1:51:df:e1:0d:83:16:5c:1d:
b4:09:52:a0:98:ee:33:17:6c:e2:ca:f5:ba:bd:9d:6f:10:db:
f0:6a:46:3c:66:8e:be:35:fb:e4:6f:e6:02:27:d4:06:4b:1f:
10:03:5f:43:6b:68:9d:17:f9:79:05:23:93:6b:8e:cc:93:cd:
1f:05:6c:bf:b9:21:ad:26:b4:9a:38:a7:73:21:44:14:e2:25:
63:f5:e5:a6:6f:64:5d:c4:23:07:ef:43:c2:c6:51:a6:60:d7:
72:35:23:ab:6a:a9:c8:8a:1d:5d:af:b5:e3:2b:88:ff:36:89:
65:8d:fa:28:32:25:83:ad:f0:24:ac:1a:88:ac:00:b5:c5:e9:
cd:4d:27:0a:8b:25:39:a7:53:4c:4b:70:ae:b1:c2:8d:33:07:
dd:1a:01:d3:5b:fa:43:53:f4:0d:7e:84:70:b9:64:17:b7:c7:
d7:03:61:23:07:35:5d:3f:e9:c8:79:36:3d:76:b9:1c:3d:02:
d8:36:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:23:43 2024 by rpki-client on console-ams.rpki-client.org