Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/Dde-f4bLUyFPi8amMJnyliBlZmE.roa
File: Dde-f4bLUyFPi8amMJnyliBlZmE.roa (raw, json)
Hash identifier: kWSJMnZ899OlJ5x8xR7GE1BEhjc8jx1ZYqOdmOlB8Lg=
Subject key identifier: 0D:D7:BE:7F:86:CB:53:21:4F:8B:C6:A6:30:99:F2:96:20:65:66:61
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 018CC348E24D607BAF1A1BEE486901A92544
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/Dde-f4bLUyFPi8amMJnyliBlZmE.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48345
IP address blocks: 194.0.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e2:4d:60:7b:af:1a:1b:ee:48:69:01:a9:25:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dd7be7f86cb53214f8bc6a63099f29620656661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:25:b0:ec:ea:1a:fe:c9:3f:6a:d2:a9:6b:
08:e2:d6:94:af:da:87:01:8e:5f:08:b9:81:42:6a:
9d:d5:64:c9:25:de:6b:68:cf:d8:89:8b:36:e2:eb:
ac:c5:b3:0d:69:3f:e3:33:af:07:bd:15:cb:32:b7:
09:ae:9a:77:ac:75:42:6d:b0:2c:27:30:31:97:f4:
7a:fd:27:58:b3:30:6a:25:04:c3:e6:ee:69:c7:ab:
b7:61:4e:0c:f9:ae:50:c7:c3:1f:db:3c:08:70:5c:
33:de:73:88:0b:8c:ef:5a:ce:88:84:84:de:dc:09:
8f:1f:57:91:1d:3c:fc:36:c4:ef:ae:62:e8:98:8f:
38:83:c2:b6:6b:8d:bd:2d:a6:0b:d2:9a:7f:eb:68:
d9:26:d0:7c:d7:2f:b5:c1:fb:4b:06:96:8c:54:db:
99:1d:72:2f:d1:94:22:47:38:ed:07:e1:7f:7d:3a:
82:8b:56:02:7a:64:e2:35:73:f0:a0:2b:7e:a8:4c:
66:e3:3d:7f:4e:2d:4f:39:67:39:cb:37:30:05:c1:
bc:ec:52:dc:0a:5f:7e:1c:02:47:31:e4:02:7b:a3:
d4:67:27:35:5b:32:c1:11:e8:c2:da:36:d7:10:17:
3c:5d:d0:33:00:1e:69:a7:13:db:47:46:d2:31:c6:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:BE:7F:86:CB:53:21:4F:8B:C6:A6:30:99:F2:96:20:65:66:61
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/Dde-f4bLUyFPi8amMJnyliBlZmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.215.0/24
Signature Algorithm: sha256WithRSAEncryption
40:47:a2:e8:5a:4f:eb:58:68:4d:f1:f1:9b:83:15:02:6f:39:
1b:2a:82:31:84:21:85:da:d2:9c:1e:86:31:47:34:a6:cc:ac:
3c:f1:b7:0b:89:e5:60:58:b9:60:32:1b:6f:f5:0f:6f:d1:aa:
58:5c:2c:12:5b:c1:be:03:53:fa:ea:af:a0:9b:b0:a0:14:65:
56:16:81:12:ae:77:31:68:18:08:44:69:6b:b6:69:ee:12:a7:
fc:e2:d0:77:f8:0a:bd:50:66:54:ee:14:da:e3:36:fa:0d:89:
fa:5e:2a:32:1d:a7:38:c4:89:ea:31:19:c7:a4:e6:ac:b5:2d:
10:6b:08:98:6a:4b:0f:51:e5:af:58:3d:43:40:55:3f:8c:0c:
db:8b:3b:e6:65:7b:03:18:be:54:57:d3:c8:cf:80:04:9f:91:
af:dc:59:1b:03:68:c2:e1:29:c8:4a:e5:43:d8:5b:8a:16:3b:
c3:11:5b:b4:4e:50:5c:6c:44:65:0e:a7:49:ac:82:b6:1a:dc:
34:71:c5:8c:01:e5:cf:ae:e1:11:2e:3c:f5:c9:66:a0:14:2e:
cd:74:e3:1f:cb:11:e3:54:64:f8:2e:fc:ad:61:c8:0d:aa:09:
a7:ef:6b:24:ce:72:2b:ab:1c:62:23:85:91:b2:6e:b8:5f:f4:
75:9a:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:51:36 2024 by rpki-client on console-ams.rpki-client.org