Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DrXIYRGoooC0I-rRdAEGaJd-i1o.roa
File: DrXIYRGoooC0I-rRdAEGaJd-i1o.roa (raw, json)
Hash identifier: C6lDcGsJnTTimORadf2gJJB5ST6J0/on32nhG0WHaZM=
Subject key identifier: 0E:B5:C8:61:11:A8:A2:80:B4:23:EA:D1:74:01:06:68:97:7E:8B:5A
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB84826F526D4E4A2FAD7C174500F
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DrXIYRGoooC0I-rRdAEGaJd-i1o.roa
Signing time: Tue 02 Jan 2024 08:32:43 +0000
ROA not before: Tue 02 Jan 2024 08:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210791
IP address blocks: 109.167.106.0/24 maxlen: 24
78.136.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b8:48:26:f5:26:d4:e4:a2:fa:d7:c1:74:50:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eb5c86111a8a280b423ead174010668977e8b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c3:c4:71:74:0d:1f:a5:f2:0e:c4:92:f9:a3:
7f:39:7d:4b:0e:f8:cb:b9:a6:69:f4:38:e6:20:58:
a2:58:76:c1:98:d8:a4:57:f1:52:6b:93:34:5c:cb:
25:87:6a:8a:4b:19:43:44:86:be:a5:47:13:ed:3b:
89:99:26:7b:86:5d:2a:c5:5f:4f:f7:33:8a:7f:3c:
41:57:21:3b:8b:2c:5a:fb:4c:ee:11:07:34:42:30:
55:ca:c7:e1:c1:19:ec:ef:0e:00:cd:82:c2:8c:ac:
7f:fc:a4:39:b2:64:1d:25:3d:d2:18:b3:07:0c:9c:
87:16:09:e5:47:32:f1:4d:a7:7f:dc:ef:06:d0:f3:
58:e5:67:c5:a6:b7:5d:bb:4e:05:cd:50:32:1d:07:
27:6f:6a:4a:30:c1:32:ce:bb:73:38:86:50:b0:63:
89:d4:c3:4f:92:4f:27:2f:c9:6d:04:ea:1f:fc:3a:
f7:9d:01:3c:0c:cf:3f:58:16:66:6a:f4:58:f5:71:
f1:68:54:98:d1:43:22:94:2b:9d:a2:91:1f:6b:2e:
95:25:1b:0b:c4:74:59:3d:96:4c:cf:05:75:1e:5c:
d3:59:b6:50:de:af:01:65:23:2a:17:ce:b8:36:ba:
ea:72:00:9c:81:02:6f:53:dc:1d:e3:dc:36:3d:c5:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:C8:61:11:A8:A2:80:B4:23:EA:D1:74:01:06:68:97:7E:8B:5A
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/DrXIYRGoooC0I-rRdAEGaJd-i1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.110.0/24
109.167.106.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b0:4a:8a:58:94:62:98:51:60:18:41:b8:9d:92:e2:b1:7f:
d2:75:33:59:88:cb:86:59:2a:3c:c9:38:1b:9b:f5:ef:90:8d:
90:68:3d:b0:b7:e8:b7:6a:6d:23:36:5d:2f:f7:44:7c:4d:29:
0b:c5:c1:3c:58:67:96:b7:07:16:a1:b9:91:eb:97:3c:c0:8e:
c4:1b:af:a4:83:a5:5b:f4:5f:2a:48:13:4c:28:1d:5a:84:2f:
49:b9:7f:fa:93:bf:40:2c:06:d6:5d:8d:df:6d:75:14:88:79:
c4:6b:f9:02:e6:99:94:17:ee:d9:d7:ff:b9:6b:aa:e6:98:c1:
5e:9b:c2:04:c3:1e:3b:dd:86:28:40:43:11:dd:72:67:64:63:
2a:1a:a6:66:ed:d3:0b:c7:4f:eb:10:e0:e8:f5:7d:d6:00:2c:
0e:4c:43:10:05:1d:ec:35:2c:1c:b9:44:de:a1:f6:1f:6a:e7:
18:f6:43:45:c2:64:04:ac:2a:66:67:c8:7c:ac:6f:f6:57:eb:
00:47:ba:11:49:ab:1c:07:b7:39:1a:8b:86:31:81:ee:24:47:
25:72:0d:38:9c:31:7c:9c:e0:b7:2d:98:7c:50:8f:88:7a:51:
94:86:b3:57:37:95:d4:37:27:f1:8c:b0:e7:21:e6:1a:76:d3:
c3:66:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:38 2024 by rpki-client on console-ams.rpki-client.org