Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0dz3ts2zKXvEtnk2zSuTWSHmz7Y.roa
File: 0dz3ts2zKXvEtnk2zSuTWSHmz7Y.roa (raw, json)
Hash identifier: k7IWES6qMt1q3AiZP8pi0b5abQ0btQEO9YmCYseQfEM=
Subject key identifier: D1:DC:F7:B6:CD:B3:29:7B:C4:B6:79:36:CD:2B:93:59:21:E6:CF:B6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD9A2DBB5D0112463EFAA503F78DE
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0dz3ts2zKXvEtnk2zSuTWSHmz7Y.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197903
IP address blocks: 82.177.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d9:a2:db:b5:d0:11:24:63:ef:aa:50:3f:78:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1dcf7b6cdb3297bc4b67936cd2b935921e6cfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:0b:18:c1:83:6e:ba:07:63:1f:0f:8a:b2:
67:e0:4c:6b:0b:47:f6:e3:5b:8c:e9:44:a0:86:da:
e3:6b:61:7f:a7:51:30:db:42:02:cc:2e:df:10:03:
65:31:01:dc:68:bf:e4:18:15:78:a8:fd:64:ca:fd:
04:91:61:fb:e3:7a:28:9d:07:af:c9:9d:c1:2f:7e:
92:37:1a:2c:6a:53:91:1a:40:ae:21:c6:8c:43:a1:
a3:63:db:03:21:7f:cc:f3:01:16:96:d4:0c:b8:60:
8e:44:be:8e:58:cc:e8:d6:55:1a:8a:20:cf:61:05:
ec:26:b6:62:d4:d5:de:21:fc:75:86:40:4f:23:ec:
79:b5:6a:0a:ac:0e:f1:0f:69:f7:b4:c1:5f:e6:a3:
7f:65:35:bb:31:77:d7:2e:a2:88:24:7b:91:13:c2:
18:fd:8a:d2:9f:4e:30:f1:60:2c:e4:95:64:2e:60:
b6:87:f3:38:0d:d3:97:54:bc:c3:e4:b6:e4:c2:69:
3d:4d:b2:6c:b9:e2:e8:3a:02:c2:1a:ef:4f:ac:7e:
fc:25:e1:17:6c:1c:51:84:85:42:88:d4:6d:f9:73:
2d:b8:fb:c7:22:c2:89:74:41:05:44:8c:dc:f4:a4:
98:ae:a4:c4:a3:33:1d:c2:e1:cd:fb:31:49:aa:c6:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:F7:B6:CD:B3:29:7B:C4:B6:79:36:CD:2B:93:59:21:E6:CF:B6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/0dz3ts2zKXvEtnk2zSuTWSHmz7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6f:5e:8e:90:47:6d:f3:79:ec:e2:14:a4:fc:b2:7d:64:f4:
a2:9b:9c:d8:e4:be:1c:67:47:12:c4:c3:84:a0:73:2e:19:82:
8b:28:98:e6:1d:72:c4:e8:3c:5f:96:17:24:aa:f8:4e:cd:95:
e5:40:02:e3:fc:fe:5c:3f:cd:10:5f:5a:7d:f5:2b:61:55:aa:
a8:69:c9:51:5f:88:33:06:57:a5:7d:b1:08:85:8a:98:5f:c0:
fa:09:8e:2a:75:67:87:3a:2e:a0:1b:3a:53:82:9a:c0:53:41:
72:b9:14:57:79:29:f8:2f:60:0f:fb:6e:83:eb:c1:3a:36:47:
c5:50:55:da:96:b1:85:8f:35:f8:7a:34:59:76:90:79:1f:88:
10:3a:10:1e:b9:13:34:b6:07:87:b7:cd:84:e1:0d:eb:9f:46:
fd:19:2d:ce:a8:61:d4:42:71:b7:92:e7:ad:98:4d:2a:98:7e:
37:80:14:4b:ca:95:56:0f:a0:b0:22:fa:9f:4b:7e:9b:5f:f7:
84:73:c0:ef:8f:4e:ce:a9:bf:6d:de:5d:60:f7:20:e1:92:e9:
e9:49:e5:17:2f:70:4b:e6:a0:52:9f:83:04:a2:1b:72:17:06:
51:c5:d4:12:04:2e:d8:9d:97:86:3a:7b:25:ba:c7:f5:1b:70:
04:e8:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:20 2024 by rpki-client on console-fra.rpki-client.org