Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/rDztUAJLhwVs5Oyet9UHmMbxDZg.roa
File: rDztUAJLhwVs5Oyet9UHmMbxDZg.roa (raw, json)
Hash identifier: 7fghlbH348qiPBhX9kS8yLEvgrqJYBsC7zrK0L7LVOc=
Subject key identifier: AC:3C:ED:50:02:4B:87:05:6C:E4:EC:9E:B7:D5:07:98:C6:F1:0D:98
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 018CC26D704389A8694322C3A6A3228955F8
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/rDztUAJLhwVs5Oyet9UHmMbxDZg.roa
Signing time: Mon 01 Jan 2024 00:30:01 +0000
ROA not before: Mon 01 Jan 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9051
IP address blocks: 185.124.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:70:43:89:a8:69:43:22:c3:a6:a3:22:89:55:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Jan 1 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac3ced50024b87056ce4ec9eb7d50798c6f10d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:31:ee:f0:35:27:9b:f4:4d:e0:ca:af:0b:
b8:6b:6b:9a:a1:a0:75:b4:f2:51:e4:16:6b:a9:c9:
62:3e:35:6c:cb:c3:21:13:e8:01:43:ba:b3:76:04:
fc:0f:67:0a:41:f9:1a:79:75:30:5d:29:82:44:11:
20:36:08:f6:08:56:05:46:0e:53:2e:a1:c5:a4:2e:
73:79:a8:f9:91:97:2e:82:48:5c:bd:99:98:06:25:
3a:d8:30:55:e2:61:65:10:60:e1:2d:a6:d0:02:cd:
be:fd:8b:51:51:2e:48:48:8a:a0:b3:13:23:6c:d6:
4a:c3:be:d9:d6:2a:62:8b:24:c1:bd:0a:a5:d8:f7:
42:47:65:f4:40:57:e4:a0:19:c8:f8:40:44:75:a7:
54:bd:7b:01:0f:40:02:39:62:ff:a8:c8:9c:b4:d2:
16:15:91:5c:7e:20:91:59:7f:ad:6b:60:cf:48:07:
c9:97:97:b4:91:33:04:4c:85:b0:69:8a:12:96:bc:
dd:33:83:f7:8f:52:86:23:6e:06:ac:d9:64:e3:78:
97:1f:95:b9:8f:b4:af:91:31:c7:d7:9f:b4:7e:be:
e2:3d:06:d8:af:0b:1f:81:a1:10:cf:0a:c7:e6:c4:
00:bf:e5:d9:d5:7b:6e:c1:07:45:07:a0:0d:a8:03:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:ED:50:02:4B:87:05:6C:E4:EC:9E:B7:D5:07:98:C6:F1:0D:98
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/rDztUAJLhwVs5Oyet9UHmMbxDZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fb:09:01:42:ee:af:03:37:e8:fe:9f:14:98:ec:09:22:59:
ea:b8:80:97:e6:67:77:7f:3d:43:37:b1:66:5b:39:c3:d1:32:
b0:41:8c:a0:2a:2b:18:e8:56:d3:ce:ed:20:2b:56:98:68:59:
55:1d:5e:40:d2:82:ca:18:75:c7:b4:5e:ca:7b:d3:50:53:7f:
95:05:f0:57:c8:d0:53:e3:43:ee:97:70:a7:ea:2f:b0:d6:74:
c1:20:43:2e:91:8b:24:d6:c3:a1:7d:07:41:6c:38:f6:78:aa:
fd:d3:a6:68:69:d6:df:d3:d5:f1:08:cd:48:43:50:02:85:5e:
68:5f:d4:4f:44:c2:df:99:e6:b8:77:01:54:fc:77:f4:d8:92:
e7:57:23:7f:8f:11:68:6e:74:da:3b:e6:36:1e:cb:c0:6b:e5:
6f:42:fd:16:eb:1e:bf:74:fd:7e:41:26:6c:41:6b:ea:09:d3:
23:16:5b:a2:df:df:9c:3c:9d:7d:6d:87:a7:f9:8f:87:80:14:
66:f7:51:3f:31:80:d2:0e:63:c6:35:d9:b5:06:8e:cd:76:3b:
c0:12:7a:1b:f9:43:88:7a:a5:5d:f9:7f:2f:da:11:87:e9:5b:
9a:ef:f3:ef:f5:c6:36:13:69:c6:e8:50:e1:a2:93:e9:83:5c:
e2:02:c4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:46 2024 by rpki-client on console-ams.rpki-client.org