Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DJ2o7MyQy6ImMTtsmXzhv5GGcRA.roa
File: DJ2o7MyQy6ImMTtsmXzhv5GGcRA.roa (raw, json)
Hash identifier: VD++fSabprO9s6it9BJcIRFR8BW3LqsSFNpCZzOHTgo=
Subject key identifier: 0C:9D:A8:EC:CC:90:CB:A2:26:31:3B:6C:99:7C:E1:BF:91:86:71:10
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A47E021B984843BBE8AE43FA184A3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DJ2o7MyQy6ImMTtsmXzhv5GGcRA.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207677
IP address blocks: 92.253.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:47:e0:21:b9:84:84:3b:be:8a:e4:3f:a1:84:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c9da8eccc90cba226313b6c997ce1bf91867110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:d3:6d:83:38:14:8e:73:97:b7:99:b8:0b:
d6:47:a9:e2:ec:37:2d:09:b1:35:42:91:f3:7a:d9:
6e:83:00:34:70:85:07:b1:0f:d7:02:5f:85:48:89:
48:ba:25:83:ba:a0:7e:bd:3c:b7:48:35:06:dd:5d:
c5:e7:6e:2f:eb:be:dc:6b:3e:fc:14:94:ed:dd:83:
98:58:0b:7b:58:d4:99:d8:63:5a:0d:39:e0:e5:9e:
d6:6b:8e:05:92:2b:e2:15:36:6e:d4:8e:86:dc:2f:
90:bf:18:1e:a1:0a:fa:66:ff:25:a8:a6:52:0a:d1:
55:b7:5e:36:34:17:78:5c:7b:f4:4f:40:b6:b0:68:
ce:97:c1:40:7a:09:9e:36:f1:58:84:7e:e5:85:5a:
25:9c:c8:86:b7:01:7a:34:ad:93:08:bb:b7:41:f0:
86:8e:75:c7:42:41:14:53:f7:04:45:8d:7a:b7:ec:
3f:39:de:3f:e3:a8:ce:0e:6d:d0:5d:52:6c:e9:9f:
0c:95:5b:56:77:ad:31:d5:39:0d:d9:70:e6:f8:37:
08:c2:27:0e:a9:65:48:9e:07:ef:0c:06:33:07:5f:
7a:09:a2:70:25:fb:74:0a:00:32:bb:33:c8:6c:a0:
f8:37:9d:2f:61:00:5e:8f:e4:3b:c8:ef:fe:8b:ff:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9D:A8:EC:CC:90:CB:A2:26:31:3B:6C:99:7C:E1:BF:91:86:71:10
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DJ2o7MyQy6ImMTtsmXzhv5GGcRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:75:87:f5:df:41:6b:d6:d1:e8:1b:85:96:2e:7a:8d:f8:92:
e7:bd:7e:6c:3d:06:7b:44:1e:97:8e:25:68:64:49:e5:8f:fb:
17:97:67:44:09:0d:e4:a4:f7:60:c1:19:71:67:1f:92:6c:a6:
43:03:3d:c7:24:c8:d2:9a:31:2d:fa:f0:67:51:78:a0:d1:27:
1b:43:70:d4:bd:d2:7d:40:02:1c:51:a7:ae:84:c7:92:41:5e:
da:5a:82:2f:8d:2a:4f:de:fb:76:06:39:c8:03:d5:28:40:a7:
c4:0f:0c:47:75:7a:42:f8:5d:d6:01:ec:15:52:b7:8d:5f:25:
b0:d2:0a:a6:4b:2c:83:ab:08:43:39:cf:20:b3:94:92:54:5b:
d1:6f:17:13:f0:df:7d:b5:ad:ab:67:c6:ce:9d:1c:dd:5c:67:
fa:bb:a7:51:ec:b7:a3:83:70:7c:9f:28:32:a7:0d:d3:a4:04:
9c:a6:99:56:dc:26:b2:7f:ec:82:98:51:ed:eb:23:c7:dc:44:
03:fc:ac:b1:bc:6a:6e:5d:98:14:22:18:96:09:8e:93:aa:bc:
ba:13:ce:88:43:75:07:fe:e1:fa:6f:87:7a:f3:7f:cc:0c:2a:
a2:8e:70:41:82:75:d4:15:23:15:0d:1e:fb:19:27:a7:37:be:
2b:4a:0e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 07:55:30 2024 by rpki-client on console-ams.rpki-client.org