Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/DoG1fShvDU_rOfaAr7hbTQ1GPZg.roa
File: DoG1fShvDU_rOfaAr7hbTQ1GPZg.roa (raw, json)
Hash identifier: tgbwGKOmTn7gywVYh/TgvWZ0hxqq3SYqI2r25gAbBSE=
Subject key identifier: 0E:81:B5:7D:28:6F:0D:4F:EB:39:F6:80:AF:B8:5B:4D:0D:46:3D:98
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 018CC5001777EFF862EECDFD6215B9DCCB0F
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/DoG1fShvDU_rOfaAr7hbTQ1GPZg.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209162
IP address blocks: 178.239.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:17:77:ef:f8:62:ee:cd:fd:62:15:b9:dc:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e81b57d286f0d4feb39f680afb85b4d0d463d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:87:a3:24:e6:f6:e1:99:5a:7a:bf:73:64:
06:85:ab:d0:7b:7b:03:26:b4:7c:bc:fc:52:ce:12:
fc:6a:32:01:37:32:73:d0:0d:51:dc:9c:0c:f9:09:
5e:d1:10:06:1d:40:1f:ae:ad:39:d3:c7:12:f0:df:
e5:ed:26:94:f6:c3:09:4c:5c:6e:63:cd:5e:0c:ad:
bd:7f:76:d9:1b:fe:47:20:b5:60:c5:11:34:49:7e:
96:21:14:33:ba:3b:e6:34:b5:05:55:33:de:94:5c:
a7:6f:2d:a9:07:c9:b2:a7:7f:61:9d:72:f2:05:c4:
93:5b:fb:f8:ce:fa:72:4e:7a:88:64:c6:ca:30:aa:
e7:df:c4:76:d6:3d:f0:9f:0b:8f:3d:06:88:be:0c:
49:29:07:41:b8:df:4e:98:46:c9:86:e7:fe:d8:95:
90:b6:e4:3f:40:0d:07:46:84:b8:59:1b:65:c1:1a:
56:d6:7c:01:f1:fa:2c:51:92:2a:ec:ff:83:9b:89:
04:2c:d5:b0:81:0f:ae:c1:5e:4c:8b:68:66:21:55:
b2:e2:41:6c:e9:e3:66:24:97:00:14:35:cf:94:ca:
d7:9c:ac:ca:60:15:ab:fb:d8:74:62:b5:b4:1d:48:
04:b0:7c:eb:ea:9a:80:f8:2a:c9:ee:e9:02:21:c5:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:B5:7D:28:6F:0D:4F:EB:39:F6:80:AF:B8:5B:4D:0D:46:3D:98
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/DoG1fShvDU_rOfaAr7hbTQ1GPZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.24.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a0:c7:ab:de:10:52:eb:f1:fc:5e:a7:32:87:c1:32:8e:3e:
1c:21:50:18:33:77:70:58:80:ac:1f:78:c9:3b:b4:73:98:1a:
86:9c:1b:4d:75:95:c8:f0:62:5c:f8:47:5f:6b:44:69:60:18:
64:95:e3:ed:f1:6a:28:2a:1e:30:16:95:8d:12:d2:7a:16:4f:
61:5b:7e:44:2a:15:e7:af:a4:0e:fa:a7:b2:e2:f9:d7:26:96:
6b:af:c7:b3:db:2b:8b:50:4c:79:ac:f2:05:f1:72:8a:a1:51:
fa:15:01:c2:da:56:f5:87:80:07:a9:8d:3a:8f:a8:87:35:51:
98:df:53:3c:72:6b:5f:09:aa:18:e6:fa:5d:80:4b:f2:49:e5:
e9:1f:79:69:a8:a0:ee:fe:07:79:19:f7:1e:60:bc:13:ec:1f:
55:c6:6e:c5:5b:8e:43:43:21:4a:9d:87:5d:34:c1:b7:5f:e4:
9b:b9:c5:c0:09:96:0a:3f:a8:49:63:b1:21:fb:74:dd:a2:13:
e8:fc:7c:03:8a:1c:06:8d:22:3d:51:9a:ec:bd:27:9f:3b:cf:
08:03:b1:f5:60:e6:c0:f7:d5:38:d6:08:5e:a3:0f:ba:3b:6b:
e0:e5:a1:f8:21:45:14:f2:57:50:b9:4d:43:a2:8a:0d:cf:09:
84:1a:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:49:53 2024 by rpki-client on console-fra.rpki-client.org