Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/DZ3IkhQZbWS0SH9nbrTC68JLJgk.roa
File: DZ3IkhQZbWS0SH9nbrTC68JLJgk.roa (raw, json)
Hash identifier: zcRtxIamtygx/4g/sZvVgb4THQvpprFRgU2q2jCIGSo=
Subject key identifier: 0D:9D:C8:92:14:19:6D:64:B4:48:7F:67:6E:B4:C2:EB:C2:4B:26:09
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 0192426EC5A8589DAB84619C54ADBB0F39D0
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/DZ3IkhQZbWS0SH9nbrTC68JLJgk.roa
Signing time: Mon 30 Sep 2024 10:16:48 +0000
ROA not before: Mon 30 Sep 2024 10:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 192.54.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:6e:c5:a8:58:9d:ab:84:61:9c:54:ad:bb:0f:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Sep 30 10:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d9dc89214196d64b4487f676eb4c2ebc24b2609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:4d:2b:7c:a8:bd:53:66:23:26:8d:80:37:
02:8b:cc:31:22:3d:d5:06:f1:1b:a1:92:98:ed:7a:
bd:bc:88:fb:c3:5c:ce:64:10:7a:8d:ed:68:1f:b6:
de:9d:dd:80:eb:72:cb:68:8f:a0:99:86:fe:8f:8f:
db:80:cc:4c:50:87:66:69:35:0b:3f:1c:46:c4:82:
fc:99:6b:b9:db:74:ec:fc:63:83:83:e5:3a:41:14:
a9:e4:43:92:f3:3a:ca:bd:21:41:5f:53:50:37:b7:
6f:6f:78:c0:43:70:66:33:a0:ea:d2:df:aa:18:a8:
d7:82:08:5c:79:af:65:03:4e:37:17:e5:6d:ea:dc:
e0:e4:56:29:be:9f:9b:92:5a:f0:79:d4:c7:33:e3:
19:88:65:73:39:3f:a7:df:c5:88:41:f3:e3:17:90:
69:87:c0:5f:df:f3:74:3b:33:02:18:34:1e:3b:cc:
01:ff:00:1a:4d:1f:84:e4:43:50:e7:02:f1:30:57:
71:2d:48:3b:d1:6b:7e:c2:da:46:93:00:a5:9c:5b:
b5:ff:f7:13:28:1c:da:c9:68:5f:7f:90:bb:53:6e:
4c:9e:97:7c:2d:fe:52:82:5c:67:cc:2e:a5:b0:b7:
14:cc:78:48:69:60:7b:93:f8:31:73:4d:8d:88:63:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:C8:92:14:19:6D:64:B4:48:7F:67:6E:B4:C2:EB:C2:4B:26:09
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/DZ3IkhQZbWS0SH9nbrTC68JLJgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.122.0/24
Signature Algorithm: sha256WithRSAEncryption
92:00:7c:40:bc:da:4c:87:3e:b1:2d:ce:1f:8d:14:52:4b:45:
7c:c9:9c:1e:0f:66:1d:33:ae:0f:b5:f4:6f:13:56:6e:64:02:
42:c9:b0:ef:ef:2f:15:20:fb:d6:8b:07:a0:e7:41:c4:e1:53:
7d:11:80:46:fc:6e:88:c5:64:fe:18:a0:2e:0a:2c:86:b4:d9:
c6:2d:d9:f8:0f:5a:96:39:09:e2:71:6b:97:e5:8f:5f:32:4c:
c9:b9:3f:3a:0e:f0:d0:43:2f:b5:77:63:52:92:9d:ea:da:80:
98:e0:fb:c0:86:6b:6b:e7:56:fb:4c:8f:5c:f1:c7:58:6e:70:
18:f9:8c:61:77:c1:50:d7:56:1b:13:4f:d3:f5:e5:fd:03:e8:
e5:52:80:79:27:bf:d0:17:00:26:c0:f0:1a:fe:a9:4d:63:14:
36:05:e8:d0:bc:38:ac:3c:38:2f:43:0b:77:a5:7a:39:95:a1:
fe:92:5a:79:68:d6:95:66:33:a2:46:31:a0:47:8c:54:88:9c:
37:7c:19:0e:3d:28:36:fc:60:1a:0d:28:c0:20:81:c9:f4:23:
13:be:d3:3f:c4:14:d6:c9:29:f9:3c:cc:7d:e9:2e:9a:e5:d2:
69:e5:81:15:9a:1b:71:e0:14:fe:f1:d5:fd:b9:02:8c:1c:27:
af:d9:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:47 2024 by rpki-client on console-fra.rpki-client.org