Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/DOkainZ-3TpOjA2JKEMzTsbFBtM.roa
File: DOkainZ-3TpOjA2JKEMzTsbFBtM.roa (raw, json)
Hash identifier: tlo0hYdGvV9K9mxbmOJiZWfJcY7SMjA1BjnbxqcsmWE=
Subject key identifier: 0C:E9:1A:8A:76:7E:DD:3A:4E:8C:0D:89:28:43:33:4E:C6:C5:06:D3
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 01931BE93BD7A720255F7F27711B91F2463B
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/DOkainZ-3TpOjA2JKEMzTsbFBtM.roa
Signing time: Mon 11 Nov 2024 15:48:10 +0000
ROA not before: Mon 11 Nov 2024 15:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44050
IP address blocks: 91.203.152.0/22 maxlen: 22
176.123.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:e9:3b:d7:a7:20:25:5f:7f:27:71:1b:91:f2:46:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Nov 11 15:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ce91a8a767edd3a4e8c0d892843334ec6c506d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:c2:7f:30:94:86:b3:16:f0:30:6e:f9:f5:
73:c6:49:e7:76:e0:12:69:87:b2:db:d5:18:f5:75:
3c:8a:34:0e:fb:e9:99:32:c8:0f:43:2d:7f:bf:96:
2e:92:78:38:89:7c:34:42:45:04:35:99:df:79:ec:
4c:2b:c2:50:89:5c:7c:fc:bf:e8:1e:92:2d:e1:11:
ff:05:21:d8:11:8f:aa:3b:3e:d6:87:ca:06:60:89:
d9:75:67:40:85:0a:9d:4f:62:b8:2b:fa:06:f4:2f:
46:2e:ca:8d:47:28:a9:5b:02:fa:38:c8:66:1c:4c:
89:fd:8f:f5:30:75:4a:17:65:00:ad:ba:67:d0:1b:
15:33:22:ec:fc:57:21:25:03:a7:3e:b0:00:71:02:
5d:4a:02:77:28:9d:0f:9d:e2:93:73:6f:46:65:73:
ff:f5:6a:0c:c4:60:eb:e1:6d:c7:ee:e6:2c:34:1e:
e3:f6:92:cf:74:b6:24:ee:f7:53:17:74:fa:0b:f3:
ea:ec:fe:1b:8b:63:9d:b9:b8:ec:75:c4:3f:89:10:
22:6f:9d:ca:1e:bd:1d:9f:a9:8c:f4:53:c6:10:c9:
e1:f1:50:3a:04:78:4c:7c:f2:83:e7:0e:d0:25:48:
51:57:71:94:92:6b:5b:3a:53:3a:a5:d3:44:ef:ba:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E9:1A:8A:76:7E:DD:3A:4E:8C:0D:89:28:43:33:4E:C6:C5:06:D3
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/DOkainZ-3TpOjA2JKEMzTsbFBtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.152.0/22
176.123.128.0/19
Signature Algorithm: sha256WithRSAEncryption
45:93:60:7c:85:23:ea:a5:27:19:eb:f0:b5:c3:51:57:49:66:
9b:6d:8d:6c:e0:7a:99:de:24:7c:ac:08:c5:58:c3:f0:f2:27:
f0:c0:a6:cf:5d:bf:5b:09:7a:58:f3:18:43:3f:0d:80:8d:05:
ee:6c:94:ff:da:9e:7e:5a:d8:db:1e:82:27:30:7f:69:f9:9a:
49:1c:0d:18:3b:c6:fe:d3:23:bd:ae:bc:26:dc:14:e3:54:dd:
07:49:cc:04:f7:36:d1:ae:67:b2:1c:19:eb:73:45:cf:51:4f:
a3:78:49:4e:10:96:74:fe:16:d7:60:c3:cc:ed:74:71:05:10:
bc:12:1f:8c:6c:55:96:80:bf:eb:b3:dd:14:90:aa:86:56:5b:
c8:bf:98:14:b1:d9:78:9b:0c:44:95:2b:24:13:aa:6b:55:73:
c1:b0:52:5b:35:65:94:07:1f:ac:0b:73:28:b8:55:d6:d0:d2:
d2:fb:25:21:fa:4f:51:3b:af:ca:3d:8b:af:09:f9:75:01:e9:
d6:26:8b:45:ca:b2:47:f9:7f:f4:5f:5d:ab:b5:bb:b8:21:95:
83:2d:22:dd:7a:99:cf:a3:87:3f:f0:56:16:ab:56:a0:80:c5:
a6:55:23:ce:c0:0c:a6:35:53:1a:38:76:d9:b2:de:9d:17:86:
7f:cd:ad:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:02:11 2024 by rpki-client on console-ams.rpki-client.org