Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Dgy-BL-YF-BSyfOIMeYK0lfU4Cw.roa
File: Dgy-BL-YF-BSyfOIMeYK0lfU4Cw.roa (raw, json)
Hash identifier: aHWfbWuOXMm6C8je6aRX26uJvf3r65u7iSDRZ6+SnHQ=
Subject key identifier: 0E:0C:BE:04:BF:98:17:E0:52:C9:F3:88:31:E6:0A:D2:57:D4:E0:2C
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D27CE5D9EAB06582F6D7C2F4778D4
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Dgy-BL-YF-BSyfOIMeYK0lfU4Cw.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139216
IP address blocks: 2a0e:aa07:f0d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:27:ce:5d:9e:ab:06:58:2f:6d:7c:2f:47:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0cbe04bf9817e052c9f38831e60ad257d4e02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:ce:e3:b2:87:af:00:63:b5:5d:bb:48:22:
3e:c0:cf:36:03:d2:ba:32:5a:85:b4:1a:58:c5:4f:
93:7e:2c:cb:25:f9:e3:e6:95:75:2c:bf:7b:ab:7a:
2b:01:13:47:1d:e1:10:97:7e:b2:a6:77:45:f7:a7:
db:ef:8c:03:af:30:66:4f:ca:f6:23:f5:66:ef:68:
85:26:d8:93:de:f3:5b:e4:35:cb:c7:82:50:49:f1:
bb:85:e7:42:d8:65:7f:6f:f1:77:8b:28:5c:af:e6:
1d:ab:a4:49:c8:b8:af:35:03:2a:eb:0f:a3:b5:e5:
c8:56:bc:b4:f8:f5:e7:12:c7:8d:12:89:16:a8:e6:
aa:74:f2:c1:d9:9f:93:62:51:f4:a7:6f:e9:b3:1b:
34:a1:17:51:5c:2b:3e:6a:f9:0a:9a:1b:c6:52:11:
b2:b7:1e:fd:a8:42:d5:39:e5:02:52:a4:53:c6:ad:
71:8c:c4:72:66:47:83:0e:22:38:ad:de:2a:ca:94:
f0:d8:5c:88:37:2a:37:c9:fb:77:6f:7b:ef:9f:e1:
58:8c:07:6b:5d:92:b5:e0:77:38:6f:45:a8:5f:78:
5e:07:76:1c:10:d1:b2:f2:bb:34:d4:50:e8:ac:d5:
e8:c5:49:7e:9b:8f:df:e6:9a:8e:d9:7b:02:1f:69:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:BE:04:BF:98:17:E0:52:C9:F3:88:31:E6:0A:D2:57:D4:E0:2C
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Dgy-BL-YF-BSyfOIMeYK0lfU4Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f0d0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:59:f1:e2:d2:ee:49:38:05:e4:77:a7:43:b5:0b:ab:7e:e2:
98:cf:3e:0a:ba:75:4a:8d:48:20:eb:c8:7c:1f:40:ab:10:b8:
71:e2:c1:9a:50:b3:e5:05:5a:e5:4b:e1:6b:72:c2:44:5e:31:
eb:00:f5:b9:9f:7e:1c:b4:d3:10:97:76:83:c7:f8:26:b1:39:
2f:f5:4a:17:5a:1e:ee:ac:70:9d:2c:19:55:64:c5:e5:8e:89:
4b:86:2e:ad:50:2d:39:a4:b7:15:3c:5e:d5:0d:0f:a3:5b:4f:
f3:12:74:0b:52:fc:19:ca:16:d7:c1:89:c2:7b:81:79:d9:dc:
4a:63:88:3f:09:ac:dd:9c:6a:43:c1:b1:50:af:53:02:5a:0e:
3b:e0:5d:12:8f:9d:1d:c0:ff:a2:2b:5e:13:db:39:18:3f:c0:
25:47:44:cb:d8:b0:d2:86:50:5a:75:ee:7c:be:9c:96:b5:70:
fb:c9:a0:09:76:2e:76:f0:e1:c2:eb:53:9c:d1:fd:79:4d:3c:
e3:d3:48:de:48:27:e8:f3:ff:7c:e0:8c:c2:dd:f3:42:ab:a5:
99:97:49:cb:8d:05:25:f2:2c:6f:bf:53:47:c1:6e:c7:e5:b5:
f2:6c:e9:b8:28:6f:51:a1:40:7c:48:38:bd:17:a5:a6:06:ee:
a3:ef:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:18:40 2024 by rpki-client on console-ams.rpki-client.org