Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/DunjairTKuXQjriYWwUsOIoDBJ0.roa
File: DunjairTKuXQjriYWwUsOIoDBJ0.roa (raw, json)
Hash identifier: 8kr7XvJTpZrXAhRYadgXFJE1IUqSB49pZbXIXstym1U=
Subject key identifier: 0E:E9:E3:6A:2A:D3:2A:E5:D0:8E:B8:98:5B:05:2C:38:8A:03:04:9D
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018D313939A7FDDD3306B45A8015B3D94BFE
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/DunjairTKuXQjriYWwUsOIoDBJ0.roa
Signing time: Mon 22 Jan 2024 12:50:50 +0000
ROA not before: Mon 22 Jan 2024 12:50:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212193
IP address blocks: 188.132.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:39:39:a7:fd:dd:33:06:b4:5a:80:15:b3:d9:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 22 12:50:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee9e36a2ad32ae5d08eb8985b052c388a03049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:d0:ac:cf:ff:2a:4a:b6:ed:12:7d:f7:21:
af:8f:48:c1:30:57:d9:03:fd:94:92:1e:f1:c8:b8:
85:50:6a:94:1e:7b:8a:a7:49:20:b9:ed:22:6b:23:
04:1e:92:ed:cb:10:e8:ed:94:73:2d:37:d6:3b:83:
a1:22:d8:65:b0:2a:e1:43:b6:fa:34:51:a5:2e:0a:
bf:e1:56:e6:be:0c:37:57:ec:c8:2b:5c:c7:bc:b6:
b4:5d:6d:dd:c6:0a:1e:e3:1c:9a:14:57:74:f8:e3:
58:1e:82:8c:b8:df:f4:ab:4b:3f:c0:17:43:66:53:
4d:e1:64:68:98:ac:07:d7:40:12:bf:9d:04:f5:e4:
c8:32:3e:88:ec:6f:40:f5:98:cc:3f:69:22:c0:2e:
29:fa:4f:95:49:8a:25:84:60:7f:ff:4b:f0:24:9d:
19:47:cf:77:33:6b:e1:6b:ce:19:96:5c:db:5d:25:
1f:0e:c2:57:c5:47:e5:7d:71:4b:7e:a0:6c:e7:44:
c7:b9:d7:e9:59:a8:9a:fe:d9:19:c2:8b:44:ff:be:
af:32:a6:aa:58:89:10:6d:fe:e6:9d:f4:1f:1e:b2:
d9:5e:18:94:4c:87:d2:1c:85:b3:d3:3c:2b:d4:fd:
d2:50:8a:78:e5:1e:ae:01:57:05:d1:97:0b:68:84:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E9:E3:6A:2A:D3:2A:E5:D0:8E:B8:98:5B:05:2C:38:8A:03:04:9D
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/DunjairTKuXQjriYWwUsOIoDBJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:9f:7b:8e:00:b8:c2:d5:18:09:23:e9:e6:ac:42:27:9d:ea:
40:fc:48:f4:b5:af:92:f0:31:77:30:58:8a:c2:7d:df:42:3b:
69:fa:10:a8:18:6f:56:72:a8:b8:96:5a:82:e3:48:ac:31:79:
55:97:f5:42:87:79:19:da:88:64:96:42:db:45:8a:10:25:72:
29:39:fd:e7:7f:ba:a3:29:29:bb:5c:22:01:e3:0e:36:d3:a8:
ba:42:ff:48:22:e2:7f:75:20:e8:86:ba:97:88:08:c3:ce:8b:
f7:91:46:00:77:b7:59:bf:da:c9:5d:c9:00:c2:56:69:0b:d9:
9d:1c:ac:0e:7c:14:1d:df:e6:75:4a:da:a1:68:01:e1:3b:ad:
4c:5a:49:ce:3a:af:d9:1c:be:c5:fb:e5:86:fe:6f:f9:98:70:
3d:29:a1:6b:d0:f6:e8:f8:bb:bf:d0:f7:dd:5a:3e:da:9f:fd:
d6:6b:c9:48:6c:32:38:88:97:2d:14:f6:4f:6e:4f:48:de:ea:
bf:d3:3a:ed:32:c8:ce:3e:ce:af:a3:39:f0:e7:06:b7:69:c2:
e5:f5:a2:a0:c7:5f:69:14:ac:bb:f1:c3:fa:07:d4:3e:bf:f6:
81:4e:aa:bd:c2:ae:3c:ef:53:77:bc:2a:3a:4b:77:61:81:d9:
e8:88:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:22:35 2024 by rpki-client on console-ams.rpki-client.org