Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Dj40Yr17rH7w-mrAi6kbmpb0Zuk.roa
File: Dj40Yr17rH7w-mrAi6kbmpb0Zuk.roa (raw, json)
Hash identifier: xP6Kxc5CzJ0PzIOQZ3vD5FRGAn9/aZAKPeHf6cjAfcU=
Subject key identifier: 0E:3E:34:62:BD:7B:AC:7E:F0:FA:6A:C0:8B:A9:1B:9A:96:F4:66:E9
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB8D774C8D6E44A2A2B92D0041C56
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Dj40Yr17rH7w-mrAi6kbmpb0Zuk.roa
Signing time: Tue 02 Jan 2024 12:35:12 +0000
ROA not before: Tue 02 Jan 2024 12:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202819
IP address blocks: 84.245.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b8:d7:74:c8:d6:e4:4a:2a:2b:92:d0:04:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e3e3462bd7bac7ef0fa6ac08ba91b9a96f466e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7f:4e:71:ae:10:42:ca:54:06:30:eb:6a:19:
af:cf:d5:2c:28:8e:61:33:4a:b4:a9:f2:79:15:72:
9e:fe:d8:e8:75:d3:31:bc:a9:9b:5e:35:8f:e6:05:
4c:cb:cd:a7:22:dd:b9:cf:6b:ec:f3:f5:a4:ab:66:
bf:eb:eb:35:b7:bd:3d:99:f3:57:70:6d:10:bf:47:
75:e3:4b:98:bb:7b:cf:63:4c:b5:1c:55:4e:27:b8:
f4:0f:13:25:63:15:a8:2d:ee:20:7f:fa:31:01:f8:
74:66:eb:a8:3e:bc:d3:13:46:6b:6f:c4:04:68:9e:
6a:c0:53:1a:37:c6:b4:04:10:de:b3:a8:61:11:16:
13:d7:fb:fc:c8:ec:50:45:56:d7:42:14:b4:a7:81:
70:ca:5b:dd:b7:f6:86:59:5d:7e:8b:16:74:2b:cd:
7c:60:e5:ee:e5:d1:3f:cc:e0:0b:ab:8d:14:7f:f6:
e1:d1:07:ed:2d:a3:0a:7c:e4:92:8b:40:be:e4:96:
93:c5:36:34:f2:2b:e8:52:7c:2b:8b:a7:3e:c3:0b:
d1:fb:42:23:a4:d2:e4:e2:eb:9b:0e:e3:45:d4:d5:
91:e8:80:41:a6:1e:70:99:c1:ee:78:d1:a5:46:14:
b0:8d:36:a3:f4:69:24:fd:f2:34:c7:51:0c:fc:6f:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3E:34:62:BD:7B:AC:7E:F0:FA:6A:C0:8B:A9:1B:9A:96:F4:66:E9
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Dj40Yr17rH7w-mrAi6kbmpb0Zuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.95.0/24
Signature Algorithm: sha256WithRSAEncryption
75:cd:10:8f:e5:db:37:d0:e4:85:ac:b2:1b:60:90:7e:4f:d7:
e3:f6:f0:fe:96:41:a8:3a:4d:83:8e:c9:46:e6:ca:b1:24:43:
3f:5a:48:f8:1c:3e:5c:94:88:bc:80:53:95:e6:80:57:a2:cf:
39:6f:1b:5e:36:95:1f:b6:86:29:17:85:2f:84:b3:7b:ec:8f:
41:af:9b:14:b8:31:a7:76:2f:a6:a3:fd:75:90:8e:76:76:6f:
f6:6e:8c:1f:f5:53:60:0d:29:5b:f9:ab:c9:75:85:d0:7e:22:
12:01:68:08:c3:a1:fa:93:6a:1b:83:d9:5c:00:ba:03:e1:9a:
75:47:db:5d:06:55:85:83:34:a4:48:bd:79:f3:9f:f0:43:1d:
d3:a7:e5:8f:ba:4a:36:71:b1:d1:d5:23:e9:79:07:7d:e6:d9:
0b:4d:3f:6e:c3:78:74:54:73:a6:77:6d:e2:71:e0:87:c1:cc:
1a:e1:85:71:0c:ed:9b:4a:9c:98:49:97:db:16:fd:63:4a:d3:
dc:1c:4a:e7:9a:d6:1c:04:f5:44:a7:7a:e5:a6:b6:26:18:21:
f3:5d:8d:65:aa:6e:d6:22:f3:c4:53:a4:af:86:5d:29:b0:30:
f9:5e:2f:ca:56:f4:3b:d6:97:bb:5f:9d:f2:65:52:9d:2c:e9:
6a:e5:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----