Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Dcvxu9tUnpZqoeXW9IXyV2pU7EU.roa
File: Dcvxu9tUnpZqoeXW9IXyV2pU7EU.roa (raw, json)
Hash identifier: YqkXDDw1XcCGyJZssA4HEvOX3gikrGxAlvJ9bt7J11Y=
Subject key identifier: 0D:CB:F1:BB:DB:54:9E:96:6A:A1:E5:D6:F4:85:F2:57:6A:54:EC:45
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 018CC424692BF9B586B80A1E5805F57885C7
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Dcvxu9tUnpZqoeXW9IXyV2pU7EU.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201897
IP address blocks: 185.59.254.0/24 maxlen: 24
185.59.255.0/24 maxlen: 24
185.59.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:69:2b:f9:b5:86:b8:0a:1e:58:05:f5:78:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dcbf1bbdb549e966aa1e5d6f485f2576a54ec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:23:b7:b0:b1:00:82:63:30:17:eb:4a:a9:
86:17:6f:6a:3f:08:be:d6:e4:ff:7d:3b:1e:99:0a:
02:0c:f9:37:3b:f8:a5:4e:94:af:35:ef:1b:fd:44:
e4:9e:da:08:f8:55:14:1c:f2:4a:cf:be:6a:6c:a5:
4c:48:9e:73:94:a5:1c:35:b8:63:8d:6f:f8:96:50:
08:b1:53:1e:59:24:eb:db:8a:86:e2:8a:57:54:78:
61:2e:33:40:64:92:5b:d2:72:ff:aa:4e:e8:f2:68:
12:2b:12:13:d7:b7:f0:26:a5:cc:78:1b:c2:c9:af:
7c:93:1f:ed:d8:d5:4c:19:1e:d3:e7:1d:15:c8:15:
62:39:91:e7:21:d3:1d:8b:41:08:2d:6d:b5:b8:f6:
66:46:c3:3c:71:d7:2f:41:6a:ea:94:a5:5f:92:42:
5b:af:ba:11:c2:01:14:f0:99:32:da:e6:7c:0d:18:
e9:57:d4:c9:ea:1a:9a:6c:ba:bd:ce:1e:54:be:80:
f4:86:d9:be:74:22:75:fa:bd:15:8f:aa:c8:68:88:
60:a8:53:c2:5d:d3:24:7d:05:5c:c5:d6:d7:68:89:
60:7b:63:c6:8b:cd:2c:40:e8:38:7f:31:20:76:c1:
85:cd:3b:b6:56:6a:b0:96:1b:ee:49:6f:7b:22:d9:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CB:F1:BB:DB:54:9E:96:6A:A1:E5:D6:F4:85:F2:57:6A:54:EC:45
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Dcvxu9tUnpZqoeXW9IXyV2pU7EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.252.0/22
Signature Algorithm: sha256WithRSAEncryption
92:3a:54:a3:1c:6d:d0:64:a9:ba:a4:4c:bd:68:b3:7d:4f:4b:
92:ba:7c:ac:70:54:b1:ef:cb:b0:9b:6e:c9:64:e9:53:0a:cf:
cd:f6:ab:fb:c6:10:20:61:9e:73:be:51:e7:c4:53:21:87:b5:
f0:3c:74:b8:3d:14:25:6f:a5:64:0f:97:3d:d7:7e:86:bc:28:
3d:c0:f7:2c:25:dd:c4:ff:d9:b0:09:b4:82:17:20:50:aa:90:
95:4c:de:ee:52:8c:40:aa:5b:40:89:f1:f5:d3:b0:69:33:9f:
e2:55:e6:cc:91:bf:3d:9b:5e:16:99:78:88:9d:a5:b5:20:c3:
0a:db:ea:7f:75:f0:b3:5a:bc:1c:02:a9:52:c2:d0:08:16:70:
d7:77:32:98:c7:b6:fc:3a:05:83:a9:c3:4c:89:b3:d8:50:c9:
26:64:fc:8c:0d:45:e4:64:a0:6c:81:7d:eb:f2:00:c0:ca:1f:
76:b9:29:a7:19:f2:14:b7:41:9b:87:28:d1:39:39:f1:d7:3d:
46:6f:81:b1:b9:90:b8:e2:49:20:db:cf:fb:30:46:56:5b:51:
a5:c9:74:eb:c5:28:2c:f7:1e:09:c0:ee:33:4a:14:b8:88:7d:
b7:b5:c7:75:8d:ab:9d:bb:bd:b8:18:89:de:26:a8:c2:12:1f:
bc:4c:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:00:09 2024 by rpki-client on console-ams.rpki-client.org