Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/DSeKDqU0-uL62A2uD2F_6mXAsRk.roa
File: DSeKDqU0-uL62A2uD2F_6mXAsRk.roa (raw, json)
Hash identifier: oYFDeS7HN44+YxuKjhc0zEVELftEtvqRcvxuGSIv5jQ=
Subject key identifier: 0D:27:8A:0E:A5:34:FA:E2:FA:D8:0D:AE:0F:61:7F:EA:65:C0:B1:19
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0192DEA8DCD9D09E638774F6D0C7AFBD1A0F
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/DSeKDqU0-uL62A2uD2F_6mXAsRk.roa
Signing time: Wed 30 Oct 2024 18:21:01 +0000
ROA not before: Wed 30 Oct 2024 18:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204601
IP address blocks: 45.88.78.0/24 maxlen: 24
95.215.205.0/24 maxlen: 24
95.215.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:a8:dc:d9:d0:9e:63:87:74:f6:d0:c7:af:bd:1a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Oct 30 18:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d278a0ea534fae2fad80dae0f617fea65c0b119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:90:86:15:e9:6c:31:69:de:79:30:87:cc:
5a:67:98:b4:26:29:da:2d:75:e3:44:f3:b0:2a:9e:
d6:bc:d6:4b:78:fd:2b:b4:7d:37:ae:35:e6:5b:8f:
45:ca:bc:ee:23:de:4a:89:55:cf:a3:dd:c9:b4:1c:
13:b6:99:d0:fe:c5:0f:65:62:2b:ef:2a:1b:a8:98:
dd:2a:27:07:69:a4:75:ee:e8:f4:4f:ec:a5:98:e3:
d7:df:af:47:cf:d8:de:2f:e1:9f:57:76:6f:35:d4:
d3:f7:2d:aa:cf:10:1d:20:2b:d1:7c:5f:01:6e:60:
13:f9:ec:3b:c7:f7:49:c3:7c:4d:cf:18:14:22:5d:
a7:25:b3:fd:8b:56:1f:13:f5:4e:97:2b:fd:82:b7:
d6:15:db:53:b2:67:21:07:3c:16:68:e8:9c:99:d3:
48:37:18:09:ff:36:00:e3:5e:46:5e:cc:76:c1:c4:
fe:36:f9:84:48:11:c9:d7:76:3d:c0:f6:c5:ff:81:
f8:a9:57:ab:0c:66:da:40:39:30:0c:95:1d:86:05:
89:e3:41:f1:74:55:29:77:a1:9f:e2:53:1b:bd:ec:
b7:ea:cc:81:79:b0:de:a3:1d:4f:6a:d9:f5:e3:a1:
ef:b7:8d:7e:09:2a:74:07:4b:90:7a:97:64:27:c9:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:27:8A:0E:A5:34:FA:E2:FA:D8:0D:AE:0F:61:7F:EA:65:C0:B1:19
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/DSeKDqU0-uL62A2uD2F_6mXAsRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.78.0/24
95.215.205.0-95.215.206.255
Signature Algorithm: sha256WithRSAEncryption
69:fe:54:f9:bd:1c:46:4d:f2:df:50:72:46:8c:05:b3:d9:8d:
27:59:37:1c:58:d1:ea:dd:9f:62:fc:e5:2c:b2:2a:bb:25:ad:
3c:ce:a5:66:a7:74:35:62:a5:96:f5:be:27:db:a0:38:96:5b:
83:3e:fa:8f:e9:ce:c3:24:2d:77:80:34:44:1e:48:b7:05:5a:
80:c2:17:34:80:d9:66:8d:dd:6b:21:8d:03:8f:a3:9c:b0:45:
92:24:9b:03:6b:51:6e:4d:93:99:11:31:a6:7c:1e:ce:c0:0d:
88:d0:bc:95:4a:dc:21:7e:ae:6c:90:0b:09:c5:df:55:a9:16:
30:75:f1:f6:df:52:67:78:ba:5b:ec:4d:04:81:9e:3e:21:74:
6f:05:89:fe:1d:02:c8:03:ef:08:5d:27:d4:91:2e:37:b4:7a:
56:9a:6d:75:47:99:71:76:92:91:ae:da:dc:c2:c6:4e:a0:93:
45:40:08:7f:dd:0f:41:96:64:a5:d4:6c:38:b8:ad:ee:c3:c1:
60:84:c8:cb:e9:a3:48:c4:9e:96:ff:51:10:15:2d:71:3e:49:
3c:a9:25:26:b9:0c:71:b9:28:f2:77:63:96:8f:42:99:fb:77:
4a:6b:10:22:8a:c3:0c:2d:11:06:18:fc:33:cb:ae:8b:85:9b:
06:31:11:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:20 2024 by rpki-client on console-ams.rpki-client.org