Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/DJ8-zKPGfbRi1ETeETbF1Yes5UQ.roa
File: DJ8-zKPGfbRi1ETeETbF1Yes5UQ.roa (raw, json)
Hash identifier: hHCxvl5f+Zltb8A2RhAr0UWC7M5IL4SzaM5N/eYj4z0=
Subject key identifier: 0C:9F:3E:CC:A3:C6:7D:B4:62:D4:44:DE:11:36:C5:D5:87:AC:E5:44
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 01908A5B02A849726AC136113CCC3E9C91C3
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/DJ8-zKPGfbRi1ETeETbF1Yes5UQ.roa
Signing time: Sat 06 Jul 2024 23:22:18 +0000
ROA not before: Sat 06 Jul 2024 23:22:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49556
IP address blocks: 193.24.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8a:5b:02:a8:49:72:6a:c1:36:11:3c:cc:3e:9c:91:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Jul 6 23:22:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c9f3ecca3c67db462d444de1136c5d587ace544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:fe:5d:55:44:5a:70:a1:4c:f0:fb:27:fb:
2f:ee:d4:1e:52:6e:8e:a3:78:fe:e7:30:10:53:8b:
1d:72:b3:14:b6:97:33:eb:10:76:e6:2c:96:88:2a:
58:43:d3:2d:14:67:b8:cf:4a:cb:65:bd:c2:5f:54:
d6:f6:41:fe:00:a7:68:75:3d:14:9d:4a:b7:85:c1:
f2:05:eb:c8:5a:b8:35:8c:25:c5:3d:96:8e:14:3e:
ff:69:e6:78:79:a6:6d:6e:0f:02:ec:e3:02:f7:8f:
f5:cd:c3:cd:d6:21:9b:7b:93:cf:95:04:91:3d:c4:
07:e6:57:90:05:5b:60:aa:eb:54:89:0a:18:fc:e2:
0b:14:26:7c:ad:60:91:59:65:42:ac:12:88:e3:61:
6f:a7:54:f6:a5:3a:60:c8:39:38:8c:20:7c:e6:2f:
7e:72:15:bb:48:d1:92:1b:76:25:76:2b:e4:90:5f:
34:16:f7:7c:e6:f9:a6:52:bf:74:45:2d:38:2a:79:
6f:dd:a9:1e:83:2a:83:d4:12:85:68:a7:2b:c7:a4:
cd:78:ce:5c:61:e8:9a:36:f4:64:ac:0d:54:44:d1:
5e:7b:57:60:96:74:56:13:52:e3:af:f9:e9:26:eb:
93:ee:02:7f:9a:02:05:3b:de:20:ea:5b:35:00:fe:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:3E:CC:A3:C6:7D:B4:62:D4:44:DE:11:36:C5:D5:87:AC:E5:44
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/DJ8-zKPGfbRi1ETeETbF1Yes5UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:04:35:8f:28:aa:fb:47:09:28:11:8e:48:9f:01:a9:a2:6c:
52:e7:d3:08:39:d9:22:5e:df:22:1d:d3:75:9e:a5:48:2e:64:
58:9c:db:3c:d3:27:7e:9c:6f:91:37:6f:96:60:39:24:3d:0e:
80:4c:e8:af:7c:71:0f:33:f4:a2:80:8d:b4:0e:bb:43:f6:b9:
ef:c5:d2:cc:f7:c2:50:3e:80:82:66:21:1a:41:6f:53:51:71:
9a:f2:58:2d:71:48:7b:5f:31:45:b7:a3:30:c8:29:c7:05:52:
b7:02:ca:d7:2c:3b:bb:48:ba:ca:82:02:ea:b1:dd:2d:8f:e3:
4b:30:62:b7:ef:bc:24:b6:91:e4:2b:de:2b:00:ad:31:31:96:
c8:6a:fe:8e:8f:21:49:99:83:97:a2:64:f3:7b:49:d9:07:57:
bd:ed:26:c0:04:6f:1d:b1:25:34:40:91:07:0a:d4:19:2b:97:
fa:1b:be:48:1f:31:5e:99:b0:d1:2f:e6:0f:b3:b2:d6:5c:4d:
0e:6b:e2:ef:a5:8f:09:6d:cd:55:2f:13:22:87:4e:99:31:1a:
e8:fc:8e:34:ac:a6:ce:ef:5a:03:fb:7b:fd:7d:53:17:51:93:
04:f5:a4:07:9f:4f:80:ca:de:37:b2:47:29:12:26:4d:7d:0c:
37:cc:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:40:35 2024 by rpki-client on console-fra.rpki-client.org