Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/DYRgAIrI1sFWoaPOH21MSncRYQM.roa
File: DYRgAIrI1sFWoaPOH21MSncRYQM.roa (raw, json)
Hash identifier: VmFsq3sZnJMNAwnvpEzAmmLULqtCRFFqetdZ+jtMuY4=
Subject key identifier: 0D:84:60:00:8A:C8:D6:C1:56:A1:A3:CE:1F:6D:4C:4A:77:11:61:03
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0192B39FA48256F13DAC99834D25F01C5BF1
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/DYRgAIrI1sFWoaPOH21MSncRYQM.roa
Signing time: Tue 22 Oct 2024 09:47:16 +0000
ROA not before: Tue 22 Oct 2024 09:47:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202
IP address blocks: 145.61.196.0/24 maxlen: 24
145.61.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:9f:a4:82:56:f1:3d:ac:99:83:4d:25:f0:1c:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 22 09:47:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d8460008ac8d6c156a1a3ce1f6d4c4a77116103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:22:cf:b4:dd:47:ed:7b:6b:05:54:4b:06:
fa:38:53:c5:7a:bb:47:98:ba:c1:7b:e4:be:45:5d:
d7:12:17:5a:9b:96:42:d0:db:db:b1:d4:63:57:61:
ed:7a:76:9c:bc:aa:10:5f:36:a6:43:53:e6:3c:dd:
41:ac:9d:38:41:29:06:a3:f0:d1:93:34:d1:ae:31:
13:4a:d5:ef:2e:2a:e8:d8:76:8f:fe:f2:bf:ba:f4:
db:a0:3c:3f:84:58:a4:c0:8b:8d:b3:ca:b2:89:f5:
99:5a:07:17:3d:ba:e5:da:30:ec:f7:77:cd:93:b0:
a9:ef:b0:4c:58:3f:93:5e:99:38:ae:e0:30:31:7e:
c9:8a:14:1c:0d:57:2d:cd:6c:d4:4b:59:ad:c4:b8:
de:c8:85:90:e6:e3:f4:73:b9:9a:50:40:6f:e3:6d:
d2:67:b3:42:a0:1c:14:38:ba:7f:40:36:10:77:25:
b8:9f:e3:a2:31:54:b9:46:c3:86:be:8d:7f:07:51:
91:44:a5:9c:ba:b1:a4:a9:08:ff:bb:95:a6:60:0e:
6b:c2:72:85:d6:e4:f2:cd:08:01:aa:ff:2b:01:3d:
c7:cc:95:cd:8b:74:ec:60:89:df:a2:87:f3:13:43:
df:be:f1:ab:b8:1a:3f:6b:63:c0:4b:b6:6b:cd:9c:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:60:00:8A:C8:D6:C1:56:A1:A3:CE:1F:6D:4C:4A:77:11:61:03
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/DYRgAIrI1sFWoaPOH21MSncRYQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.61.196.0/24
145.61.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ea:2e:8c:4b:19:7f:7f:cc:4d:51:97:4e:f4:6a:90:01:3a:
be:b4:82:c3:5a:0f:f3:fe:9e:92:29:54:70:f3:31:d3:c2:9b:
76:19:5c:fa:47:4a:f0:fa:7a:49:9e:87:e8:ef:09:d9:59:47:
ad:99:69:0b:75:54:c1:cd:0c:47:b5:c0:9e:45:5a:ed:72:bb:
c1:15:ed:7e:fe:46:26:c2:e6:3b:0d:39:37:7f:ab:2d:65:8e:
42:e6:e9:69:cd:42:ef:0b:4d:bb:d4:82:c5:82:ef:79:1e:28:
03:3b:8b:69:45:d5:bb:d8:a1:cd:97:52:21:2a:35:26:64:f6:
81:c0:4e:b3:16:62:8d:01:01:6f:5f:75:9d:9f:07:63:53:af:
ad:8d:9f:5a:ec:59:87:8b:64:4f:2f:df:4b:ff:00:e5:ce:8f:
3c:2e:10:b2:41:7e:0a:82:74:35:1e:50:f1:4a:de:25:9c:b4:
f3:a5:8f:6f:e7:ab:aa:d4:b4:56:e0:16:e4:74:26:07:81:c2:
19:23:7c:90:cd:b5:28:76:00:36:89:7c:d2:07:57:98:0e:37:
f9:f7:95:1b:13:38:4c:5d:d0:f6:6b:7a:55:52:b0:78:99:bb:
3c:0b:a3:15:6a:7e:4e:0e:c1:79:14:98:32:6d:76:18:97:7c:
4e:e9:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:54:59 2024 by rpki-client on console-ams.rpki-client.org