Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/DViIKfg4Jag1eSqxqRzbARxP5No.roa
File: DViIKfg4Jag1eSqxqRzbARxP5No.roa (raw, json)
Hash identifier: 7cAXt0ge8AwdNoxn3kzpH5WnqaQ1U3NmmlMMZw3JlCM=
Subject key identifier: 0D:58:88:29:F8:38:25:A8:35:79:2A:B1:A9:1C:DB:01:1C:4F:E4:DA
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 018DFB79033F8502C3EC5DEE0D588C321B4B
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/DViIKfg4Jag1eSqxqRzbARxP5No.roa
Signing time: Fri 01 Mar 2024 19:23:48 +0000
ROA not before: Fri 01 Mar 2024 19:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc0::/32 maxlen: 48
2a12:5bc1::/48 maxlen: 48
2a12:5bc2::/48 maxlen: 48
2a12:5bc3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:79:03:3f:85:02:c3:ec:5d:ee:0d:58:8c:32:1b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Mar 1 19:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d588829f83825a835792ab1a91cdb011c4fe4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:42:9d:d4:0c:e2:da:41:e0:2c:ed:95:1f:8c:
05:e9:62:94:87:81:63:aa:1e:15:25:c8:51:54:18:
db:04:f5:6a:6e:07:fc:26:ee:51:4e:fb:3a:4d:5b:
48:f1:0c:4e:b6:d6:eb:2d:c4:55:65:3d:70:dc:c1:
5c:2c:22:f0:60:11:24:14:a0:73:ae:93:53:96:75:
db:50:01:42:1b:c3:00:03:06:1b:b3:95:5b:da:27:
6f:1e:e8:58:09:d8:7d:5d:42:3d:aa:60:2d:a9:24:
d6:a2:8e:e6:c3:5b:7f:f4:ae:4c:b6:29:f8:c3:df:
a9:3a:47:20:26:45:5a:4a:e7:4a:d0:8e:cf:4b:88:
f8:6e:19:07:2e:fe:b8:5c:83:04:d6:37:38:6e:73:
53:f4:e7:61:99:19:73:a5:8f:22:ef:3e:3a:07:42:
93:bb:6b:da:5e:7b:3d:fd:a4:ef:30:ff:ec:0d:27:
85:72:f1:9a:94:83:55:12:ec:6a:8b:46:3a:1a:b0:
c9:24:63:30:71:c0:26:12:04:9e:e3:a5:da:a0:90:
aa:08:36:f0:d7:a6:5e:aa:81:40:56:89:b1:29:d0:
84:68:c4:fd:48:5a:ca:3b:be:b7:81:9a:01:00:82:
af:6d:49:38:4a:6c:41:23:e0:e8:d6:e3:93:eb:af:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:88:29:F8:38:25:A8:35:79:2A:B1:A9:1C:DB:01:1C:4F:E4:DA
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/DViIKfg4Jag1eSqxqRzbARxP5No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc2::/48
2a12:5bc3::/48
Signature Algorithm: sha256WithRSAEncryption
05:44:ee:09:bc:a6:c6:1a:66:2e:cc:78:c2:4b:5e:a1:42:8a:
1b:43:a5:a0:78:99:bc:45:19:fc:9a:d5:c9:fb:d1:25:77:d4:
65:22:d0:7c:dd:1d:0d:2c:4f:92:82:5f:01:e7:e3:6e:97:35:
19:ee:55:4a:2c:d3:4e:8b:94:d5:46:43:3a:c6:39:1a:5e:f9:
0e:03:cb:b6:6a:5c:38:5d:0b:d6:7f:e2:3d:32:61:25:5a:d0:
73:32:67:10:b0:d6:03:be:92:e6:27:c3:ef:1b:de:69:df:37:
9f:2d:c1:e8:dc:e1:c8:f1:1a:21:bc:62:07:dc:04:ec:5f:70:
52:2c:68:1d:97:e7:4d:5b:12:b1:6b:d5:5e:02:c2:5a:30:6e:
22:6a:98:51:dc:34:2d:56:65:f4:c2:0e:ff:e6:05:97:fb:ad:
0f:bc:7a:4e:2f:4c:10:15:c3:3d:5e:c0:c1:88:e7:77:b2:4e:
4b:58:2e:ba:ab:97:e5:d7:71:2f:a9:89:fd:ca:8f:0f:e2:07:
5c:14:e8:78:ff:74:be:98:9d:ae:db:92:aa:b7:78:f2:ca:17:
ec:2c:46:2f:0c:54:fc:88:24:28:8e:f8:ba:7b:5c:d6:b4:17:
68:7e:05:d6:84:49:b8:bd:da:3a:ee:e0:6d:21:bf:ff:a7:96:
67:db:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:50:20 2024 by rpki-client on console-ams.rpki-client.org