Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/DtrLhY0ruG-JUa-r8j0oLSSo95Y.roa
File: DtrLhY0ruG-JUa-r8j0oLSSo95Y.roa (raw, json)
Hash identifier: Y1euoqRmoOD5HkZ1WfjTdlz9g8GNe/DpgO8EsQVD9Xk=
Subject key identifier: 0E:DA:CB:85:8D:2B:B8:6F:89:51:AF:AB:F2:3D:28:2D:24:A8:F7:96
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018CC26D1A36CD9AABDED2E006A1BC9C197A
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/DtrLhY0ruG-JUa-r8j0oLSSo95Y.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21416
IP address blocks: 62.76.253.0/24 maxlen: 24
212.193.104.0/24 maxlen: 24
212.193.105.0/24 maxlen: 24
212.193.112.0/24 maxlen: 24
212.193.109.0/24 maxlen: 24
212.193.108.0/24 maxlen: 24
212.193.111.0/24 maxlen: 24
212.193.110.0/24 maxlen: 24
212.193.106.0/24 maxlen: 24
212.193.107.0/24 maxlen: 24
212.193.113.0/24 maxlen: 24
212.193.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1a:36:cd:9a:ab:de:d2:e0:06:a1:bc:9c:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0edacb858d2bb86f8951afabf23d282d24a8f796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:d3:23:44:f7:e4:69:94:7c:2a:f8:02:c2:
20:35:dd:0e:5d:d3:25:49:3c:a2:cd:64:14:03:ee:
0f:49:6c:fe:23:d8:54:2b:93:f7:a1:6d:94:24:32:
21:08:0c:50:9e:67:5f:09:02:57:66:be:1e:ac:93:
a2:90:2c:b4:5e:e4:13:2d:2a:3f:64:4f:4e:65:40:
e2:8d:ef:98:7d:02:f6:67:65:97:49:b1:98:97:b9:
75:da:15:cf:19:25:34:d1:41:95:6a:9a:5a:b0:9e:
61:e3:51:a0:07:65:52:4c:93:0b:41:85:27:91:d3:
0a:09:5a:70:49:6e:9c:e8:ae:c3:4c:7c:fd:fa:3f:
90:34:f2:b1:13:30:5b:c2:2a:1e:9c:f6:d4:5a:03:
c7:78:8e:7a:5e:44:7a:11:f1:03:01:ef:ec:51:3b:
b2:2b:05:e9:cc:71:8f:f2:15:b8:9b:54:d2:8c:6e:
f0:84:82:5b:bf:fe:fb:0b:14:49:8b:f9:06:1e:51:
c1:06:51:e4:5c:11:1f:76:2e:ae:9a:47:25:71:f6:
0c:3b:6d:bd:e7:3c:4e:fb:34:40:df:7c:cb:05:99:
82:3d:a1:a7:bf:37:0e:5d:fb:19:07:03:47:77:b6:
1b:a8:4b:00:5b:3c:a4:b1:a0:a6:a7:68:e6:87:5f:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:CB:85:8D:2B:B8:6F:89:51:AF:AB:F2:3D:28:2D:24:A8:F7:96
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/DtrLhY0ruG-JUa-r8j0oLSSo95Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.253.0/24
212.193.104.0-212.193.114.255
Signature Algorithm: sha256WithRSAEncryption
cd:72:52:3c:f4:c3:09:2f:44:3c:70:e1:57:ec:97:87:9a:30:
47:fd:0c:d6:f0:d9:f9:db:6e:01:f9:63:db:9f:6f:43:7a:1b:
c8:44:65:e7:f4:e9:40:54:e2:b1:c4:21:2c:97:16:c9:02:dd:
80:f3:3c:10:82:49:6b:56:eb:cc:ff:26:b1:3e:ce:4a:d4:17:
cd:7c:3e:ba:94:36:cc:20:2c:02:d2:1b:51:92:9f:80:85:b4:
dc:e8:ec:87:1b:ba:bb:8e:21:17:27:b2:6a:6c:52:a7:dc:0a:
25:a7:b1:e3:00:5b:cd:2f:6f:d9:19:11:15:52:eb:0d:6b:f6:
85:85:36:ef:f1:12:6b:df:de:49:54:69:b1:96:c4:0d:e3:e0:
17:58:19:33:e4:05:6a:f8:2f:91:c5:d7:14:45:d7:6b:4a:76:
d6:85:ed:71:a0:ba:59:20:56:aa:30:cf:0c:09:5b:96:b8:17:
cf:f5:f3:dd:67:9c:9c:bc:3a:da:9c:a8:ad:00:9b:36:02:04:
94:ea:0a:7a:38:90:77:e9:d5:63:df:9b:66:64:c1:14:1f:20:
5c:65:47:af:f0:ef:75:3e:3a:3b:d4:7c:54:07:ce:05:4d:23:
02:96:8c:23:ff:53:bb:5d:16:f3:68:7a:c7:54:ad:0e:63:98:
cb:4c:70:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 22 08:03:18 2024 by rpki-client on console-ams.rpki-client.org