Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/DE_--DNnP32Tc1xTvp_ZBPiM0ug.roa
File: DE_--DNnP32Tc1xTvp_ZBPiM0ug.roa (raw, json)
Hash identifier: DPf+mJz4thKmEmXQzSnHAHvp106A7Dp4DptPf0zo1jI=
Subject key identifier: 0C:4F:FE:F8:33:67:3F:7D:93:73:5C:53:BE:9F:D9:04:F8:8C:D2:E8
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 018CC64B0596399DA9115EC37E04295E7578
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/DE_--DNnP32Tc1xTvp_ZBPiM0ug.roa
Signing time: Mon 01 Jan 2024 18:30:54 +0000
ROA not before: Mon 01 Jan 2024 18:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31587
IP address blocks: 185.99.223.0/24 maxlen: 24
185.99.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:05:96:39:9d:a9:11:5e:c3:7e:04:29:5e:75:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Jan 1 18:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c4ffef833673f7d93735c53be9fd904f88cd2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:fa:96:71:63:ac:cd:3d:5b:ae:da:a8:13:
fc:44:de:13:ae:95:61:e2:f2:55:54:3e:c5:88:85:
8d:fd:cd:34:0d:60:79:f2:22:3d:59:3d:6e:eb:f8:
50:5f:35:2a:4d:55:15:3b:25:8a:89:d2:44:8f:15:
a4:fe:0a:c5:6c:22:fd:d0:9c:e2:bc:fe:c8:d2:e6:
78:69:72:a2:78:79:f1:fe:33:5c:86:93:ed:55:f5:
75:a8:cd:7e:bd:a6:3d:e3:ed:66:be:a9:a6:a7:04:
25:bd:24:b2:e5:99:db:5f:1a:d1:98:62:e6:53:2c:
b3:00:55:a6:2d:ae:9a:64:a4:ac:7f:9f:c1:80:0b:
14:eb:3f:2c:5c:2b:70:bb:fa:a9:78:d2:89:0a:86:
f4:79:d2:98:a6:01:54:30:44:a9:c9:43:1e:f8:29:
5c:b4:71:24:81:51:ef:6b:03:5f:a5:3d:fe:16:90:
75:d9:aa:f2:5f:82:3c:19:29:0e:16:8e:9c:f2:8d:
34:2a:dc:7e:81:62:35:4e:c0:6c:65:bd:6e:27:f6:
5e:04:b0:0e:dd:ec:7e:7b:bb:02:db:4b:b8:a3:b4:
5a:8b:2a:60:55:09:e5:5a:2c:59:90:f6:8c:96:03:
2b:96:7b:e3:7c:1d:fe:fd:0c:8a:64:e9:1d:b3:4c:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:FE:F8:33:67:3F:7D:93:73:5C:53:BE:9F:D9:04:F8:8C:D2:E8
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/DE_--DNnP32Tc1xTvp_ZBPiM0ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.220.0/24
185.99.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:97:62:a1:7c:3a:9b:c7:3e:13:53:b9:56:90:f4:2c:77:0a:
46:fe:f1:39:43:f8:f9:51:96:1c:bb:6b:3f:2e:d4:9d:18:b9:
db:22:06:c7:09:7e:11:70:5d:58:ad:2b:3b:15:3b:2d:45:12:
8f:d7:3c:11:0a:5e:10:1b:6e:3d:09:ab:3f:88:fe:80:e2:b0:
80:3a:5a:6a:ab:46:27:3e:d5:ee:e6:fd:df:0c:a6:85:67:fc:
8b:86:43:a5:0d:ad:d5:bf:93:84:79:7b:1f:5d:e8:18:8a:70:
3f:b9:d8:af:fe:21:e6:90:b7:51:33:29:4d:10:b2:14:e1:cf:
86:5f:64:40:c2:7e:ac:b8:66:d2:6a:0b:dd:7a:5c:58:5a:c4:
0b:d6:63:2a:44:11:43:0d:dd:a3:f2:05:88:99:d5:83:ba:0b:
fc:47:08:f1:a9:b0:80:83:e1:6d:b1:bc:e8:77:4e:b0:6d:1b:
a4:5e:5e:6c:6a:64:fd:9e:62:cb:7f:80:af:17:87:a6:98:9e:
7e:44:02:cb:a4:88:8d:0a:97:c4:69:f1:e9:2f:5b:50:97:6c:
cb:cf:62:ae:d9:f9:d2:c8:4d:ba:60:10:da:28:5a:7a:cd:09:
d9:45:bf:ee:e6:ef:46:42:c6:03:f8:63:93:c3:bf:49:aa:60:
da:75:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:04:11 2024 by rpki-client on console-ams.rpki-client.org