Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/Del0sElACeEmPxbCFxo-qrxcC6g.roa
File: Del0sElACeEmPxbCFxo-qrxcC6g.roa (raw, json)
Hash identifier: A/gI63ERSc+w9xVvJnjbE11mjwKkCVbRYSH99lAhUVY=
Subject key identifier: 0D:E9:74:B0:49:40:09:E1:26:3F:16:C2:17:1A:3E:AA:BC:5C:0B:A8
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 018CEF2BE132D141CC796C49401E1628EDDC
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/Del0sElACeEmPxbCFxo-qrxcC6g.roa
Signing time: Tue 09 Jan 2024 17:01:19 +0000
ROA not before: Tue 09 Jan 2024 17:01:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 188.92.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:2b:e1:32:d1:41:cc:79:6c:49:40:1e:16:28:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jan 9 17:01:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0de974b0494009e1263f16c2171a3eaabc5c0ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:90:20:ec:22:02:f6:1c:71:27:20:12:44:
ce:c8:2e:09:05:2a:c8:2e:cf:ca:b5:24:c2:49:e3:
f9:51:0a:1b:d7:5f:2b:a9:8c:8b:f4:da:3d:66:c0:
4b:ab:6f:03:85:47:c4:a0:01:b8:68:ce:a5:8f:f5:
77:34:ca:25:86:c8:f4:4f:a1:6b:3e:fb:9b:2b:30:
7a:9a:60:c8:87:21:7c:1c:73:60:e9:3d:b4:cf:04:
24:a9:96:09:58:28:3a:c0:93:98:c0:83:fe:bb:6b:
96:c2:51:cc:1d:c1:be:66:ed:73:66:c4:a4:b8:09:
1f:27:20:e8:d2:4b:40:12:a9:ee:8d:8c:42:29:fa:
2d:f7:fd:ad:7f:84:35:84:d8:84:2c:fc:67:e5:38:
1b:e1:ab:88:81:a4:84:b1:6a:3b:a0:8e:74:81:23:
45:0f:fb:a9:b0:e1:84:c2:7e:7b:ee:31:b7:a7:29:
e8:71:a2:1e:3a:55:a8:2d:86:0c:eb:97:f6:73:9b:
88:2e:bf:67:9d:5c:b6:83:4b:9e:16:1a:bc:8b:82:
fa:af:c3:35:2b:b8:6a:c0:87:c0:5e:fc:07:1c:19:
9d:56:39:f2:fe:6a:2b:c9:72:85:4d:07:f8:18:0e:
f8:ce:ac:a8:0b:af:61:ba:be:06:8f:30:55:c9:75:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:74:B0:49:40:09:E1:26:3F:16:C2:17:1A:3E:AA:BC:5C:0B:A8
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/Del0sElACeEmPxbCFxo-qrxcC6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:90:a9:b4:53:57:02:4d:70:0a:da:f3:ac:14:27:32:66:3a:
83:6e:34:e3:a4:98:16:ce:8e:92:71:c3:21:39:c1:f5:a4:34:
f5:d9:e0:1e:bb:21:08:ac:4d:41:1e:d4:cb:5c:97:72:57:12:
65:72:20:e0:0b:9d:f7:af:aa:d6:d2:45:ff:d1:cb:bc:c8:d7:
3d:cc:5f:85:51:14:48:80:1f:28:7a:d2:01:44:ad:e7:88:80:
ac:f0:e5:4c:9f:82:d3:9b:29:f2:91:49:29:bd:6c:a7:72:01:
cf:fb:0d:b7:56:26:f5:53:f9:54:c4:47:0f:74:19:55:74:d2:
e6:ca:18:58:6b:36:1d:ac:f7:b1:f4:84:3f:19:36:1e:37:60:
8c:47:42:fa:c8:ea:11:ad:e5:31:3c:06:dc:01:4b:6f:54:cc:
bc:a9:63:7b:69:54:bc:25:c5:f5:25:21:b8:54:d2:bb:4d:a8:
2c:d0:7e:89:5b:c3:cc:00:bc:a0:c0:6b:bf:28:bd:d9:c6:c4:
87:74:89:c0:35:1b:14:01:bc:ff:a1:ad:4e:b8:9f:a5:50:09:
e8:21:dd:86:33:29:2e:94:bb:81:3d:89:12:5e:8a:b7:cc:74:
24:45:9d:21:07:1b:c0:22:3c:1f:a2:97:11:78:2e:5e:ac:4a:
86:38:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:28:49 2024 by rpki-client on console-fra.rpki-client.org