Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/DHQwb8pl36Cd5-t6FZeb8-gDqSA.roa
File: DHQwb8pl36Cd5-t6FZeb8-gDqSA.roa (raw, json)
Hash identifier: fKqPEOj1xFuRGmEFC4retIJv11NQ0uzvR05wqpk3AxI=
Subject key identifier: 0C:74:30:6F:CA:65:DF:A0:9D:E7:EB:7A:15:97:9B:F3:E8:03:A9:20
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 018CC4247FAC7E52868E205032319C88D3EF
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/DHQwb8pl36Cd5-t6FZeb8-gDqSA.roa
Signing time: Mon 01 Jan 2024 08:29:35 +0000
ROA not before: Mon 01 Jan 2024 08:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3176
IP address blocks: 78.108.173.0/24 maxlen: 24
5.57.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7f:ac:7e:52:86:8e:20:50:32:31:9c:88:d3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 1 08:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c74306fca65dfa09de7eb7a15979bf3e803a920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:dc:f8:87:41:5e:79:60:db:9f:6c:20:bf:
06:f4:dc:00:f2:ec:90:9d:83:57:ee:14:77:00:5d:
e1:a9:24:2d:e7:57:59:04:a6:8e:0f:06:3f:6e:8d:
3b:bd:c3:fc:87:90:5d:73:b4:87:80:7a:bc:8f:55:
aa:8a:99:e5:a7:f7:a7:24:47:9f:72:11:a2:33:9f:
8e:63:08:b1:10:06:89:7b:c8:f5:1c:3b:50:e8:57:
be:bb:94:ae:5a:2c:c0:59:66:aa:f9:13:90:67:70:
98:ef:20:1f:6d:22:53:ad:22:1f:27:3f:98:8d:5e:
9b:53:6d:93:d3:88:82:f0:89:41:93:d3:b3:68:94:
12:4d:59:af:c3:22:30:0e:4c:3c:fc:7e:02:0d:d5:
78:39:fc:b9:88:6c:7a:ac:1f:3a:95:52:e3:40:b3:
8c:d8:c1:6f:a0:53:bb:6f:bb:4d:ed:78:c9:7b:51:
ef:e2:fa:36:07:4e:42:28:e9:a9:25:cc:ff:48:cc:
9e:b7:90:58:4c:1e:c3:3e:36:cc:ed:a4:67:3c:5e:
51:30:49:a8:3a:b0:50:bb:68:2c:aa:ee:1c:82:0e:
72:b8:25:da:00:80:e9:49:f4:1f:86:8b:6e:b6:65:
f8:fa:34:ee:c5:81:9d:fb:be:32:5e:19:de:60:32:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:74:30:6F:CA:65:DF:A0:9D:E7:EB:7A:15:97:9B:F3:E8:03:A9:20
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/DHQwb8pl36Cd5-t6FZeb8-gDqSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.1.0/24
78.108.173.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a9:9e:cc:74:73:2a:84:40:bc:dd:9b:c2:5c:72:69:9c:15:
cb:3e:07:8a:5f:ed:d3:6a:23:5a:01:af:60:3d:0f:95:2d:01:
80:9f:6f:2a:27:9b:a5:7b:25:fe:78:c0:ba:3f:c5:15:60:25:
48:03:eb:bf:00:b7:d3:a5:6b:60:b7:8b:e3:0c:9c:b5:9c:52:
8d:3a:f2:c8:c3:48:41:bf:00:d8:5f:ac:61:d2:99:85:56:ba:
03:71:9a:32:d9:99:6f:14:2e:d0:7b:2a:b6:61:aa:7b:3d:27:
84:95:6d:76:84:a4:ae:df:05:0b:01:84:a1:6c:94:77:8b:f1:
1b:4e:58:d8:af:d3:e4:bc:0b:d0:d9:59:cf:be:11:17:e8:49:
27:71:f7:8e:8b:11:fe:29:ec:37:9c:be:38:9d:b3:2f:41:b8:
09:77:07:a7:d2:19:9c:e8:97:0d:98:41:4b:4c:e5:80:86:f2:
c5:ef:a0:c1:f9:f0:74:6a:27:87:35:4c:bb:13:84:96:a4:a5:
c5:04:82:29:39:8c:b9:9f:ce:81:7c:bc:99:7c:42:c0:29:c8:
d1:89:4f:c7:50:31:ce:e1:ed:95:71:9d:3f:f2:c0:47:ea:7c:
ba:72:ba:b5:7b:a4:85:b9:65:e1:28:b9:de:ca:3c:b9:65:8b:
5d:ec:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:15:28 2024 by rpki-client on console-fra.rpki-client.org