Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/dyne9Sx2gtO_5CKucfL9pG0knkA.roa
File: dyne9Sx2gtO_5CKucfL9pG0knkA.roa (raw, json)
Hash identifier: qUlp33TWV6qvVNboKZPBhYQrQYy3BM2MXLvanrwWGlc=
Subject key identifier: 77:29:DE:F5:2C:76:82:D3:BF:E4:22:AE:71:F2:FD:A4:6D:24:9E:40
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 018CC49353DA13F5058665A12B8CD9B71F35
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/dyne9Sx2gtO_5CKucfL9pG0knkA.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1741
IP address blocks: 130.232.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:53:da:13:f5:05:86:65:a1:2b:8c:d9:b7:1f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7729def52c7682d3bfe422ae71f2fda46d249e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:ab:ed:27:e1:93:fc:4f:51:41:a9:2f:cd:
a6:a8:ed:cc:1d:c4:f2:69:2d:66:74:58:09:16:d9:
ae:97:55:0f:4d:21:f1:e9:12:c2:90:1c:ba:de:ea:
e4:3e:77:91:41:b5:c0:ef:da:94:06:df:f2:87:c5:
f3:8f:ae:ca:8d:0f:53:81:79:29:65:ef:39:d9:08:
65:e2:49:0c:bc:01:13:bd:35:2f:10:72:61:ae:19:
6e:9e:85:f9:a2:53:19:7b:60:36:b7:95:2e:c1:28:
a1:1f:39:8c:f0:52:56:35:34:6a:21:48:b6:ff:85:
f7:7f:e3:be:b4:68:d9:15:59:01:21:46:f8:d6:c9:
b1:24:34:74:72:67:3c:8d:0a:2b:46:43:be:b8:d6:
96:2f:ff:62:17:c1:74:93:5d:7e:9b:e6:df:42:a2:
8f:8b:00:4a:85:3b:c5:14:7c:b9:39:1b:a5:c9:dc:
b3:4c:6b:d7:6a:5b:51:82:5f:6d:7c:05:94:e9:c7:
a8:6f:33:73:e9:31:81:e8:cd:19:57:b2:ba:90:03:
64:df:1e:01:aa:18:44:c8:f8:7c:b3:18:3e:93:29:
d8:a3:41:7a:1d:11:01:07:77:74:8d:c6:ec:39:7c:
55:bf:35:30:c9:42:5b:76:3b:a7:83:69:84:33:d9:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:DE:F5:2C:76:82:D3:BF:E4:22:AE:71:F2:FD:A4:6D:24:9E:40
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/dyne9Sx2gtO_5CKucfL9pG0knkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:e5:6d:8d:32:23:5e:e4:8a:74:96:e8:99:a6:cb:b8:dd:25:
78:45:03:46:ee:95:b1:fb:bf:0b:8c:b6:7e:d9:da:70:18:60:
c6:19:05:60:f1:8c:61:52:c3:e9:6f:a7:09:5b:87:b2:06:4f:
9e:4d:50:ea:d2:03:49:73:94:47:2b:2e:4e:15:6d:0e:25:68:
28:fc:7a:48:96:a2:28:2f:1c:e4:98:33:71:0f:7a:16:e4:99:
2d:e2:bc:ed:a7:55:bc:e5:a8:01:52:ab:74:1f:de:1d:85:74:
b1:54:3d:75:27:6b:0c:44:b1:75:8a:d5:85:e3:88:1a:4a:93:
19:79:b2:b1:22:d9:40:e0:87:ad:ef:cc:c0:76:ed:53:8b:8d:
6f:d1:54:d8:ac:a2:6b:22:b1:13:40:23:d5:e2:d1:b2:56:91:
b9:f9:3e:9b:f4:41:dd:b7:1c:2b:5f:96:54:e2:57:03:ee:33:
d3:7a:a7:13:53:8a:a6:b6:10:3e:d8:fd:9d:76:87:e8:31:74:
cc:4b:39:5b:d6:e1:c0:fb:2a:44:f2:fa:bf:7e:3e:cb:ca:12:
50:fd:03:90:ff:cc:03:02:bc:a4:16:d7:b9:84:03:57:66:a2:
ed:84:4f:82:9d:ba:86:45:e6:48:8a:56:82:a1:f1:f1:74:f8:
bc:58:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:28:51 2024 by rpki-client on console-fra.rpki-client.org