Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/DGmqsOX1Nv5GoaEbq4HkpmK3eFk.roa
File: DGmqsOX1Nv5GoaEbq4HkpmK3eFk.roa (raw, json)
Hash identifier: Ou4i32BACHOGHN9CZeTUzBt3SSsk+Cvub6zwEIVCMpc=
Subject key identifier: 0C:69:AA:B0:E5:F5:36:FE:46:A1:A1:1B:AB:81:E4:A6:62:B7:78:59
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 018CC49351E80E3A50284F61FC22203A8293
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/DGmqsOX1Nv5GoaEbq4HkpmK3eFk.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43477
IP address blocks: 91.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:51:e8:0e:3a:50:28:4f:61:fc:22:20:3a:82:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c69aab0e5f536fe46a1a11bab81e4a662b77859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:03:c9:c3:0a:56:88:86:bf:09:af:d7:6f:
c5:96:56:f0:38:74:db:f7:ad:24:74:ba:0d:c2:33:
e5:67:5e:80:bd:2d:56:a6:23:df:36:4a:17:87:96:
50:c8:59:12:4b:18:60:66:05:2f:0f:52:a7:16:71:
af:af:c5:23:79:e4:da:b6:d7:fe:9e:3b:98:e3:23:
95:94:9c:95:8d:14:79:f6:4a:01:63:1b:83:93:bc:
ca:aa:b8:52:40:09:eb:e5:3a:33:64:a3:94:f2:0d:
6a:05:df:f5:ea:68:f0:fe:3b:e1:0b:58:3f:69:db:
b6:97:57:b1:cf:3f:43:e9:80:02:d7:87:4b:eb:44:
93:ee:03:e6:b1:2b:ff:bb:c4:a8:45:b8:44:4f:e7:
30:cf:67:95:a6:9a:9c:5f:34:b8:52:5a:e0:a0:a9:
d9:cc:6b:a1:f1:c4:8e:5c:bf:a7:fa:87:9a:44:9f:
66:80:0e:05:e5:2d:bd:81:9c:63:24:0d:dc:1d:f7:
72:0f:b4:09:d6:e4:9c:76:85:56:4f:47:3a:29:42:
dc:dc:8d:44:63:d5:ab:6e:c8:1c:9e:ac:c1:3b:6f:
a9:29:c2:1a:04:43:57:59:0b:29:c9:96:3a:ef:fe:
fd:2f:bb:0b:0a:f9:dc:b4:4a:07:4a:df:47:ef:ae:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:69:AA:B0:E5:F5:36:FE:46:A1:A1:1B:AB:81:E4:A6:62:B7:78:59
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/DGmqsOX1Nv5GoaEbq4HkpmK3eFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cf:fe:80:3c:3e:99:39:2d:12:44:e4:e0:2c:04:4f:ce:48:
4b:bc:e0:6a:ad:d3:ab:63:50:2a:28:ae:27:d1:7d:55:35:9d:
5f:e2:d7:b4:a5:ed:73:00:c0:06:78:16:a5:10:b0:06:da:10:
d3:41:b4:d5:f0:78:86:f4:9a:5e:06:f5:8c:80:95:20:ad:aa:
c1:8e:6e:8c:4a:7e:a8:de:0b:88:7f:2d:3e:e5:3c:2d:88:81:
aa:d2:f1:7f:91:ac:f3:28:2f:f1:f5:5f:16:9e:ae:15:78:aa:
98:e1:99:67:de:50:9e:18:8c:fa:70:ad:67:27:ff:e2:1b:b8:
8a:ea:58:18:05:83:14:03:38:a7:77:dd:a1:fa:07:2f:1c:18:
32:56:51:61:01:b1:39:8f:ba:9c:5a:c3:bf:75:f0:ad:83:31:
08:8a:d1:60:31:79:a8:60:97:8a:16:13:60:76:e5:16:8b:cf:
4c:3f:d5:4f:3a:95:6a:75:44:d2:a7:18:fb:1d:57:90:f9:97:
c9:49:c3:4f:cd:9e:2f:9d:e4:81:c6:f9:71:88:ce:93:9e:19:
d8:be:f5:3a:cf:6d:42:cc:83:3a:ba:83:e1:e6:e3:2f:49:15:
2d:92:39:a1:34:88:e2:fc:c7:bc:ba:48:59:98:17:80:22:42:
a5:f3:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:14:57 2024 by rpki-client on console-fra.rpki-client.org