Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/DpuPkOQ11ZbJfCH0De67PqBQkgE.roa
File: DpuPkOQ11ZbJfCH0De67PqBQkgE.roa (raw, json)
Hash identifier: lZ4ThDyc4Uq5mpEvecG/tURQNa+MbxXZiaobEYzTZt0=
Subject key identifier: 0E:9B:8F:90:E4:35:D5:96:C9:7C:21:F4:0D:EE:BB:3E:A0:50:92:01
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 019021DC76167AEB5B23F7DD233123E6BF11
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/DpuPkOQ11ZbJfCH0De67PqBQkgE.roa
Signing time: Sun 16 Jun 2024 16:23:34 +0000
ROA not before: Sun 16 Jun 2024 16:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5421
IP address blocks: 62.44.96.0/19 maxlen: 32
2001:67c:20d0::/47 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:21:dc:76:16:7a:eb:5b:23:f7:dd:23:31:23:e6:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: Jun 16 16:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e9b8f90e435d596c97c21f40deebb3ea0509201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:df:c3:37:46:c8:3e:82:ae:e9:18:0f:2f:
9f:46:c5:99:8b:13:98:b2:f1:bd:51:cf:6a:da:a2:
04:cd:51:50:46:06:87:3a:b9:34:30:0a:e9:fa:9f:
14:0c:4c:bd:d1:8a:20:53:97:0d:e8:42:44:76:55:
7a:56:67:8d:7d:e7:c7:eb:db:66:52:72:7b:9b:0f:
69:ea:56:cd:29:98:e2:1b:2c:bc:5d:f8:9d:d8:57:
b2:3d:7b:7a:15:f4:f7:fb:5a:a1:14:05:ce:28:92:
32:2b:c2:f8:ac:ad:e0:66:a2:96:8e:a8:05:c2:e5:
32:1a:5c:1a:1b:67:59:55:0c:2c:5a:76:5f:e7:96:
16:cf:57:d3:89:d2:8e:ca:1e:05:d4:4a:41:c9:c9:
a0:a6:8e:da:b0:76:d6:99:5d:a9:c8:31:48:3a:38:
b8:f2:77:8d:cb:f7:06:6c:32:e9:4f:41:dc:6e:e3:
d2:4d:1e:0d:8d:81:ab:4b:99:3a:a3:6e:9d:a0:40:
35:36:ff:30:e2:b2:d8:f9:8e:e0:8f:64:3e:18:dc:
a3:01:b0:33:db:ee:8a:bb:94:54:d8:2b:7f:13:e2:
c8:2a:72:50:63:ab:32:5c:68:3b:c8:f3:95:d4:45:
62:ed:20:68:bc:74:49:38:ae:30:8b:d8:d9:17:ca:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9B:8F:90:E4:35:D5:96:C9:7C:21:F4:0D:EE:BB:3E:A0:50:92:01
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/DpuPkOQ11ZbJfCH0De67PqBQkgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.96.0/19
IPv6:
2001:67c:20d0::/47
Signature Algorithm: sha256WithRSAEncryption
09:b2:60:3d:37:a2:af:87:63:fd:0a:7e:b7:75:26:d2:33:49:
38:82:17:8c:25:fb:97:ec:f5:ba:03:45:94:3a:f5:41:3d:1f:
11:b1:ea:3d:d5:f6:e6:7b:36:ae:51:50:35:ae:b5:4d:a8:1e:
e8:38:87:89:f1:34:e4:92:94:81:11:42:29:6b:48:28:19:38:
e5:24:cf:0d:3f:33:56:1e:54:3b:59:09:c3:47:08:7b:a6:eb:
e3:b9:c1:fa:17:42:12:4f:ed:d4:b5:aa:78:0b:91:1d:fc:85:
00:a1:2d:67:f5:93:8b:c2:73:bb:35:3f:42:43:23:aa:6f:29:
7e:97:c3:d5:3b:b1:f5:db:05:70:3c:93:df:bf:d0:67:b6:7b:
c7:9f:b6:9f:04:51:47:9b:6d:d0:1f:db:68:33:83:0b:f8:a5:
2d:2c:9f:01:01:41:24:20:f8:d0:b8:5d:fd:0a:5d:0a:1a:90:
62:55:46:3e:37:3b:3c:15:b1:21:19:33:c4:54:1f:96:99:52:
10:33:6a:f7:63:b8:80:b8:48:b8:5d:a0:a0:ce:d9:30:d2:94:
0f:c7:aa:7d:32:10:b0:23:8e:0d:27:50:02:a8:11:94:6e:95:
97:2d:4b:d6:02:c6:5a:a6:43:10:41:e1:bc:23:ab:be:5b:83:
d8:37:e8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:27:55 2024 by rpki-client on console-ams.rpki-client.org