Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dpYs-Z0GJWN4S_s_f9ZIZAsmqqM.roa
File: dpYs-Z0GJWN4S_s_f9ZIZAsmqqM.roa (raw, json)
Hash identifier: QlmQKsuiSNhxmHxCuZrVc06KqwMQl7k/1HG/kbWyF/g=
Subject key identifier: 76:96:2C:F9:9D:06:25:63:78:4B:FB:3F:7F:D6:48:64:0B:26:AA:A3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019193143D965CDD6A34E8FA6FBAB938A9A2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dpYs-Z0GJWN4S_s_f9ZIZAsmqqM.roa
Signing time: Tue 27 Aug 2024 09:04:22 +0000
ROA not before: Tue 27 Aug 2024 09:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60957
IP address blocks: 45.150.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:14:3d:96:5c:dd:6a:34:e8:fa:6f:ba:b9:38:a9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 27 09:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76962cf99d062563784bfb3f7fd648640b26aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:17:ff:82:0b:85:d5:47:7c:60:83:a5:de:
78:fc:78:d8:f7:13:70:c4:6d:87:62:66:e8:43:ee:
3d:a2:78:28:dc:e9:e4:c5:c9:38:d9:7e:e5:02:39:
3a:f5:90:43:21:3c:65:b8:ef:94:a3:56:52:6d:ca:
fd:a6:cb:0a:cd:8b:fd:3d:b9:be:e3:89:14:ae:12:
26:e5:b7:37:fa:e7:f8:7c:0a:44:11:9a:5e:f3:21:
61:cb:5c:a5:43:de:6e:a1:80:cb:c7:d9:69:be:18:
4e:18:15:13:ce:7d:5f:37:2b:46:69:ed:f3:91:6b:
ec:58:7e:8a:12:8e:59:e1:d1:0a:8d:fa:32:00:50:
ef:88:24:bb:49:c0:02:cd:4b:ea:1e:e6:3a:c3:05:
e8:6d:9f:35:88:26:d9:26:e0:19:98:e3:9f:39:ac:
30:83:7a:9a:d8:3d:6e:7e:cb:f2:aa:93:0c:c8:f1:
28:ab:4d:94:07:8b:0d:46:2a:7e:01:c0:6d:7b:0f:
46:71:74:d2:98:c5:4d:5f:2d:df:96:d9:bd:c0:91:
95:c1:6f:21:8b:20:ef:2b:86:10:68:76:47:ea:c7:
52:35:1c:9d:ac:30:e5:df:f8:60:3a:f0:43:1b:2d:
4f:b6:a6:84:97:55:18:42:44:c6:c4:44:c8:85:08:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:2C:F9:9D:06:25:63:78:4B:FB:3F:7F:D6:48:64:0B:26:AA:A3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dpYs-Z0GJWN4S_s_f9ZIZAsmqqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.114.0/24
Signature Algorithm: sha256WithRSAEncryption
71:86:b4:13:aa:34:ee:51:1a:40:bb:11:d5:14:c6:43:2d:88:
68:89:6a:00:47:3d:73:55:15:2a:2e:5d:5a:02:de:7d:da:79:
e8:24:0d:8a:b5:af:40:4f:ef:86:4f:e7:e9:ec:d1:06:40:1a:
c7:fd:a7:7c:bb:87:6c:f8:0c:bf:ad:9f:ab:12:0e:c0:8f:89:
9b:da:2d:fc:bb:83:b9:5e:90:cc:0d:4d:58:af:3f:2c:20:0a:
60:87:58:6b:a8:4b:16:f4:9e:79:0e:fd:9b:2c:7a:b2:f7:ea:
d4:2a:57:1f:ea:f6:fe:ca:f2:78:f0:2b:3c:0a:2f:de:e3:f7:
4c:95:dd:f6:6a:5d:95:5f:f1:ed:d7:dc:5e:07:b3:0c:ef:c1:
f4:93:4c:03:31:34:d5:27:65:ed:e8:60:70:59:9c:99:14:22:
15:f5:e1:f4:c7:6a:98:35:36:14:17:44:32:7a:7b:0e:2a:0f:
e9:b4:63:4d:0f:4f:c7:c5:6c:f1:ae:48:9d:30:b7:ff:cc:4f:
e0:f8:14:b6:1a:5a:a3:4f:fc:af:db:c7:68:2b:20:1c:de:bc:
4c:bd:e9:76:01:72:fa:be:39:11:ad:86:d6:62:de:2c:02:e6:
bb:eb:a8:61:c0:0f:a4:b7:a6:c4:1a:0f:a4:6b:2f:f6:c2:47:
c3:3f:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org