Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/DTEyeA1vyY-iNUbPzzlKrrJThrs.roa
File: DTEyeA1vyY-iNUbPzzlKrrJThrs.roa (raw, json)
Hash identifier: yz1K7thTWUMgyFxGBIuS7TeQvWaNUaEVH8aOAvIyZFM=
Subject key identifier: 0D:31:32:78:0D:6F:C9:8F:A2:35:46:CF:CF:39:4A:AE:B2:53:86:BB
Certificate issuer: /CN=abd1baae21a27cadae9828d528e1d7557a168974
Certificate serial: 018CC64B547C6DDF0108DD43FA20029FDCC6
Authority key identifier: AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/DTEyeA1vyY-iNUbPzzlKrrJThrs.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62119
IP address blocks: 194.6.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:54:7c:6d:df:01:08:dd:43:fa:20:02:9f:dc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd1baae21a27cadae9828d528e1d7557a168974
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d3132780d6fc98fa23546cfcf394aaeb25386bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:37:96:e4:d3:7a:e9:05:91:6f:84:c7:9d:
91:85:63:18:49:37:5c:13:48:06:ee:a9:d8:3e:02:
bd:c3:6e:78:0c:00:33:0b:6b:be:82:9b:de:c2:2a:
6e:54:92:30:db:6e:1c:de:4c:8f:9f:c8:10:fa:69:
b5:40:1f:61:c4:54:e6:6b:09:73:d0:a0:3f:c1:df:
46:75:71:5f:7c:13:12:74:01:da:5b:7e:f4:86:5a:
67:e9:de:17:ab:fd:00:cf:7e:2c:b9:63:9d:6b:52:
1e:a4:78:2f:a3:20:a8:3c:98:fe:34:6f:3b:bd:2f:
fd:45:5d:08:92:69:c7:7c:b7:ee:bd:bb:5c:fd:ed:
89:ee:7c:23:ea:6a:03:c2:20:69:42:51:1e:9e:f3:
ae:df:b9:36:69:a1:d2:06:81:f1:2c:17:85:63:0e:
f6:4e:60:83:2f:d6:a7:80:4d:7f:ab:8f:da:ba:79:
12:bd:09:72:14:0f:40:5e:de:c3:d3:e9:34:d4:7d:
fd:49:74:37:ba:fd:52:23:78:00:f8:9a:31:1b:10:
77:e7:0b:cf:ec:96:02:be:ab:d8:55:a2:74:f2:56:
cf:dc:a3:57:63:21:6f:33:f9:08:50:ea:26:95:87:
97:e0:78:f8:a7:f3:06:65:dd:d0:f9:86:d3:59:df:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:32:78:0D:6F:C9:8F:A2:35:46:CF:CF:39:4A:AE:B2:53:86:BB
X509v3 Authority Key Identifier:
keyid:AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/DTEyeA1vyY-iNUbPzzlKrrJThrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3e:b3:c2:18:1c:05:d5:ee:71:0f:88:45:bb:61:66:91:48:
ed:53:8b:60:f3:5d:4a:db:90:35:05:c5:ae:88:c7:4e:8d:f6:
6d:e1:79:3e:8f:b7:9e:1f:e3:8a:e4:43:ac:60:33:f9:65:53:
be:9e:0a:56:c3:26:76:ba:e0:b5:26:c9:be:0e:f7:74:7e:b6:
f1:d0:48:81:f4:02:c0:96:74:0b:34:9a:5b:08:5f:5a:57:a0:
6f:08:62:19:e6:04:e3:8f:be:1f:5f:93:08:fc:ea:7f:29:04:
8e:f6:71:e9:9b:e7:3a:1c:3a:30:47:f5:db:54:94:59:16:dd:
1c:bf:2c:32:72:f6:c7:f9:b4:64:8b:d3:bf:ac:f1:16:b6:7f:
5f:d3:93:30:2d:bc:2b:6b:d3:46:72:6f:c1:4c:89:4d:e2:03:
05:a8:e0:5a:67:87:a5:84:5a:d6:c2:46:8f:e9:00:05:45:11:
41:4d:b7:4b:7e:81:92:7b:40:fe:4d:ee:ca:d1:ae:b0:30:57:
ce:b6:e8:f4:03:24:b8:a6:f0:aa:5d:98:63:ba:97:95:c5:89:
c8:28:41:cb:ef:a6:43:5a:f4:4b:c9:6c:4a:00:3f:6c:14:d4:
8f:47:aa:35:80:48:67:8a:d2:a1:a9:87:3c:6e:02:e1:c1:95:
0a:60:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:08 2024 by rpki-client on console-fra.rpki-client.org