Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/Dgr4pl7_-irt4dyaGhj6OswSjXY.roa
File: Dgr4pl7_-irt4dyaGhj6OswSjXY.roa (raw, json)
Hash identifier: U8XBUa+RiM8GLE/JVyz5Ia7a6nwXYHgt97SKvfm2d34=
Subject key identifier: 0E:0A:F8:A6:5E:FF:FA:2A:ED:E1:DC:9A:1A:18:FA:3A:CC:12:8D:76
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 018CC86F7D3A77CF76938D659306FC0D6270
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/Dgr4pl7_-irt4dyaGhj6OswSjXY.roa
Signing time: Tue 02 Jan 2024 04:29:58 +0000
ROA not before: Tue 02 Jan 2024 04:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198701
IP address blocks: 185.236.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:7d:3a:77:cf:76:93:8d:65:93:06:fc:0d:62:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Jan 2 04:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0af8a65efffa2aede1dc9a1a18fa3acc128d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:44:55:e3:21:78:86:5d:da:ac:1f:aa:fd:
ac:a4:d5:8f:7d:ee:19:99:e0:68:8a:67:a9:8a:9d:
5d:ab:f9:73:6d:6f:74:b5:1f:d3:a0:46:ab:63:10:
99:9e:ab:69:4a:a8:cf:5d:00:f3:ab:89:50:e8:d3:
62:59:7b:27:63:9d:4f:fa:97:67:d1:57:b8:5d:d1:
b2:e5:32:7c:0c:f2:d3:fe:43:ad:f5:28:e1:cc:21:
14:b9:22:fd:48:e6:b0:19:43:07:c2:40:4a:b4:40:
1a:1d:50:39:43:af:51:da:29:06:87:1e:9b:18:20:
9f:61:4a:ac:95:1a:d8:e2:12:b2:c3:45:c6:1b:bd:
b8:88:a9:47:b5:51:18:20:d8:8d:77:de:ab:46:08:
10:80:13:d6:c0:81:57:3d:e7:11:9a:72:28:2c:73:
bb:32:29:05:0d:06:d7:86:f8:98:a7:93:df:62:ff:
78:7b:8a:5d:22:5f:f2:29:c6:1a:4f:13:e9:ee:38:
6d:ac:f6:07:10:94:2a:ab:2c:1d:c5:65:fa:2a:5d:
97:20:b9:76:ef:8f:e3:14:48:5d:f4:ea:2e:01:42:
08:3f:fa:dc:7b:c1:ca:f9:af:b3:28:26:56:f0:92:
38:75:1e:7e:a2:c9:bb:18:76:dc:ae:a8:a4:eb:76:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:F8:A6:5E:FF:FA:2A:ED:E1:DC:9A:1A:18:FA:3A:CC:12:8D:76
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/Dgr4pl7_-irt4dyaGhj6OswSjXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ba:13:5a:c6:4c:f5:58:f1:d1:f3:4a:01:f1:18:ac:f8:ea:
ba:c3:36:0e:f3:d4:9b:8d:96:05:e2:9b:60:b3:3f:a1:5a:a0:
ff:83:76:29:1d:0d:93:ab:5b:8f:05:e5:a3:66:a3:b6:f0:fb:
a1:1a:a4:83:91:05:e7:14:2d:71:9b:9e:56:ed:42:3f:d6:e4:
b2:0c:e9:48:28:e7:43:d5:f2:89:69:9e:38:3d:b7:75:7e:1a:
a1:5f:de:83:25:f3:11:26:b8:79:55:00:9e:34:03:03:f4:47:
29:35:96:ba:2b:94:45:e5:09:b8:5e:2e:71:33:38:13:85:d7:
72:aa:2b:0d:ab:c4:c4:5c:0d:82:80:1f:5a:fe:28:d6:27:48:
4e:47:9b:c0:8d:c6:cc:a3:cd:50:ef:6b:d8:de:43:9e:90:09:
55:ea:d8:f2:20:a0:1c:60:ec:d9:54:57:b3:75:c4:6a:b8:9c:
2d:db:1b:9e:48:ef:7e:2b:68:3c:28:9c:6f:14:26:55:da:94:
38:07:43:ab:d1:d4:7a:01:ff:ba:4a:41:ab:4c:90:e5:db:94:
5e:7b:b9:a5:7d:cb:ce:9e:5b:f9:41:04:8e:44:40:23:4a:93:
1a:16:e8:55:2f:dd:8f:63:52:a0:83:62:b9:eb:76:66:35:0c:
c0:3a:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:08:03 2024 by rpki-client on console-fra.rpki-client.org