Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/dxyQAKOO2fYCdW8cvwIVOQ1maqA.roa
File: dxyQAKOO2fYCdW8cvwIVOQ1maqA.roa (raw, json)
Hash identifier: 3yQCmDvA/v8BBtxwLnzzGLzDD8jcbJd5STApXK5lkZY=
Subject key identifier: 77:1C:90:00:A3:8E:D9:F6:02:75:6F:1C:BF:02:15:39:0D:66:6A:A0
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 018CC49347FD02D0A8BF5808D05A618AD499
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/dxyQAKOO2fYCdW8cvwIVOQ1maqA.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 130.115.248.0/22 maxlen: 22
130.115.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:47:fd:02:d0:a8:bf:58:08:d0:5a:61:8a:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=771c9000a38ed9f602756f1cbf0215390d666aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:2e:4f:86:96:05:e5:4e:ce:92:85:ad:14:
15:7a:aa:48:86:67:fb:35:d9:d0:a0:f9:b0:92:87:
10:30:d7:53:26:8a:92:83:eb:f3:d0:fb:53:fd:9b:
ad:4a:d0:1f:29:b1:18:2c:fd:ba:4c:76:e7:45:53:
8f:17:3c:9a:4b:79:4f:4d:77:f7:6d:b9:be:60:3c:
fe:3b:98:e7:b5:a1:2c:57:72:82:11:97:83:ea:62:
03:de:8e:ad:c8:b3:b2:c3:3c:53:21:22:87:5d:05:
3c:d0:42:88:0f:24:28:15:de:88:d9:20:d9:ed:c2:
eb:16:b7:d4:f1:c5:c3:13:eb:43:a9:a4:69:9f:d1:
c9:9d:4d:bc:e7:87:de:9a:f2:84:4d:71:f1:6d:53:
9d:23:88:b0:5b:e0:62:65:c7:4c:bc:3a:45:51:70:
85:f1:7a:93:ef:7a:1e:6a:e1:4d:03:eb:84:5e:b6:
ed:d3:c4:a2:9a:f7:29:13:d1:73:88:81:11:de:32:
0e:e0:95:de:25:8d:94:8e:7c:be:4f:01:38:70:03:
ad:20:c0:22:aa:6c:c1:e8:c6:ce:a7:90:53:b4:8d:
d0:9f:65:ac:34:81:01:36:04:a4:8e:df:26:37:39:
f9:44:36:4b:9f:e9:dc:e9:89:53:c6:ef:52:b4:86:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1C:90:00:A3:8E:D9:F6:02:75:6F:1C:BF:02:15:39:0D:66:6A:A0
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/dxyQAKOO2fYCdW8cvwIVOQ1maqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.115.248.0/21
Signature Algorithm: sha256WithRSAEncryption
af:09:0a:4a:68:2a:42:57:d1:33:8f:a5:ad:a3:46:d7:9e:25:
6a:a6:27:ab:c5:84:ef:29:8d:e4:6c:b5:e5:ed:29:1e:fb:fa:
d6:1e:eb:a1:b8:41:0a:52:8a:6a:26:ef:7d:29:98:56:aa:75:
c7:79:15:0a:6e:2d:d8:7f:46:fb:5d:9f:a6:e0:e6:66:34:bc:
df:66:16:f5:4d:21:e0:3f:51:78:91:43:e3:9a:a0:89:c6:b8:
0d:34:19:4f:d8:a5:49:1a:44:97:b9:56:d2:da:51:cf:23:8d:
0d:ec:5c:17:6a:64:ce:7c:49:aa:4a:62:3f:2f:c0:3a:18:21:
e0:5f:64:5d:0d:40:b1:f8:77:56:02:e4:ca:16:a2:fd:e9:71:
4b:6f:1d:c5:03:27:51:7a:ba:15:29:1d:ea:c8:91:ce:84:b6:
35:e6:5e:e6:07:87:97:4a:60:e1:18:fe:31:65:32:96:ef:62:
b8:ba:73:8a:51:58:36:71:61:a3:bf:0b:0b:a4:11:89:c1:3a:
ad:3c:35:2b:a3:68:b9:89:ec:5b:93:78:5c:9e:e4:a8:38:9c:
bf:74:cb:de:eb:03:cf:65:d7:b3:57:1c:cf:d3:af:f2:b6:86:
b3:82:94:bc:42:7a:09:8d:d5:6b:d7:dd:15:ad:78:ad:06:f4:
07:e8:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:14:24 2024 by rpki-client on console-ams.rpki-client.org