Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DQ6HhpeAviOIg2SFk9auiOKw7RA.roa
File: DQ6HhpeAviOIg2SFk9auiOKw7RA.roa (raw, json)
Hash identifier: Ue7PEpOAQ/qh5DAgYJ1tOkBPLhv4ZmxGXC4xnjVV0nk=
Subject key identifier: 0D:0E:87:86:97:80:BE:23:88:83:64:85:93:D6:AE:88:E2:B0:ED:10
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB0A348F667A6E78C58E7BC45CD45
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DQ6HhpeAviOIg2SFk9auiOKw7RA.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199482
IP address blocks: 178.156.122.0/24 maxlen: 24
178.156.126.0/24 maxlen: 24
84.236.157.0/24 maxlen: 24
37.72.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b0:a3:48:f6:67:a6:e7:8c:58:e7:bc:45:cd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d0e87869780be238883648593d6ae88e2b0ed10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:98:0c:7c:e8:e5:78:6f:dc:2f:65:f2:5a:
b5:58:21:72:cc:09:67:4c:d5:ae:de:9f:06:4d:2a:
91:f1:a4:1a:d2:52:85:8b:a2:40:dd:64:df:73:c0:
f5:07:95:e0:5f:1e:7a:a3:e3:57:cb:c7:ff:a5:f4:
87:66:b6:77:c2:d3:fc:63:f0:99:bc:c5:01:5e:c7:
74:7a:26:3f:f2:1c:c4:62:f7:3e:0e:70:a9:13:7f:
32:16:60:05:6d:cc:90:58:40:b2:13:48:44:f3:df:
5f:10:37:5f:ca:ee:5b:1c:bf:49:8e:ae:16:7c:e3:
5e:8d:73:26:12:de:df:1d:c0:b3:2b:9d:fb:95:c7:
ea:e9:16:dc:d6:6f:3d:93:fb:f6:89:51:2b:40:f4:
54:93:05:d0:cb:6a:dd:7a:1e:7d:1e:25:25:02:4c:
8a:18:b0:a6:5c:7a:2d:f6:db:30:6f:3c:7c:37:ca:
9b:50:99:79:f8:cf:e5:65:b0:04:10:50:b8:eb:64:
e7:8a:41:b1:2a:39:0b:10:b7:b4:b0:64:49:c2:cb:
56:54:e5:0c:a7:7b:a9:e0:c6:00:d2:1e:8f:be:e6:
29:e5:ea:1c:6d:7c:96:9b:3b:38:f9:4b:d6:eb:74:
f4:14:10:8e:02:7c:66:11:4d:4b:b5:4c:59:ac:d3:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:87:86:97:80:BE:23:88:83:64:85:93:D6:AE:88:E2:B0:ED:10
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DQ6HhpeAviOIg2SFk9auiOKw7RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.12.0/24
84.236.157.0/24
178.156.122.0/24
178.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:71:8e:09:25:2c:0c:86:f4:11:3d:31:64:c9:41:b1:85:1d:
fe:03:98:26:86:b3:58:b3:46:cf:27:e3:ed:a4:a4:12:a3:cd:
23:30:2a:ff:f5:24:3b:b8:c0:cc:0c:f1:b2:19:d4:b0:6c:30:
c1:bb:7a:6b:6b:55:8a:a8:92:57:3a:af:f5:58:4a:15:43:5a:
80:60:f8:3e:81:9d:e9:cc:db:b5:c8:9e:b2:4d:8c:8d:f8:96:
45:ab:34:47:9a:f9:bb:84:3c:61:ae:a7:ee:03:1d:3b:45:1d:
3c:6c:da:35:50:0f:fb:c1:4a:c5:ae:6f:f9:99:f2:24:07:04:
91:ee:89:68:25:e5:26:54:75:ee:4f:39:71:db:5f:4a:b1:97:
50:15:71:3e:70:b7:58:a1:80:6e:e4:6e:bb:53:4e:ba:8d:66:
e8:43:7a:07:a2:06:c9:2c:33:6b:b4:29:12:05:b4:43:dd:df:
3b:fe:04:d2:8e:02:47:a0:0a:d5:1b:03:48:53:19:f3:d7:6f:
3a:99:ab:aa:a6:62:e2:d5:16:90:9c:bd:bb:fe:c8:e1:91:36:
42:66:10:f2:b3:16:d5:c3:65:27:1c:11:6b:e7:06:9a:93:25:
2e:bd:42:18:e0:76:fd:ff:39:ad:64:d2:23:b5:fd:f5:da:bc:
71:08:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:34:18 2024 by rpki-client on console-fra.rpki-client.org