Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/dpdd_5ts9zRsdLfIozCimvlNDr8.roa
File: dpdd_5ts9zRsdLfIozCimvlNDr8.roa (raw, json)
Hash identifier: gJH06dX21BcYzgm78cSADbgWBh7YQMVF1RkzRWo07Hc=
Subject key identifier: 76:97:5D:FF:9B:6C:F7:34:6C:74:B7:C8:A3:30:A2:9A:F9:4D:0E:BF
Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial: 018CC7956FB7E7F15412BB78C8093D138270
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/dpdd_5ts9zRsdLfIozCimvlNDr8.roa
Signing time: Tue 02 Jan 2024 00:31:48 +0000
ROA not before: Tue 02 Jan 2024 00:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42324
IP address blocks: 194.0.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6f:b7:e7:f1:54:12:bb:78:c8:09:3d:13:82:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Validity
Not Before: Jan 2 00:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76975dff9b6cf7346c74b7c8a330a29af94d0ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:90:62:98:58:b1:3a:c2:41:ea:19:f9:30:
d6:fd:c8:59:12:a9:b9:28:29:87:5d:6e:34:a6:3d:
4f:2e:36:62:fe:7b:34:13:e0:6c:96:38:f1:2b:eb:
c8:8f:74:e8:58:dc:28:49:37:a2:1c:9b:8d:b9:42:
f7:cc:f3:4f:70:a8:a9:d3:89:5a:c7:cc:6a:8d:e2:
dd:2b:a2:d2:76:7a:87:e2:9d:4c:57:3a:bc:28:a2:
cb:53:8e:07:aa:b7:ec:e1:39:5b:2f:f0:bc:e9:a7:
6b:3a:2e:2c:d6:8e:b3:26:4d:da:08:6a:3a:e1:4c:
47:30:df:2c:ac:00:9e:05:72:fc:88:52:f6:e8:1e:
d1:f6:ea:0f:7b:45:6c:5a:8f:14:a6:41:d9:9d:cf:
3b:6f:2b:0f:c1:50:5c:41:b0:91:83:82:03:da:34:
48:b8:64:f2:b2:d7:c7:11:58:48:a7:56:e9:4e:7e:
d7:a9:fd:fa:13:e7:78:4f:21:ab:8b:6d:2b:4a:16:
84:de:f1:34:de:af:a9:bb:1d:5b:c3:58:2b:0c:1d:
ff:c4:c6:ba:f3:4a:ba:9f:ac:08:b3:90:fa:7f:0e:
61:90:aa:90:81:70:2d:bb:50:1e:68:96:a9:6a:84:
f8:54:55:b1:ed:bf:c0:45:be:9c:ae:bc:eb:50:9c:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:5D:FF:9B:6C:F7:34:6C:74:B7:C8:A3:30:A2:9A:F9:4D:0E:BF
X509v3 Authority Key Identifier:
keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/dpdd_5ts9zRsdLfIozCimvlNDr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e4:e5:b8:25:4e:9d:63:eb:02:72:e1:89:73:74:11:36:90:
0d:f6:94:6d:3a:85:05:16:00:6a:0c:2a:05:9c:b2:c7:40:3f:
52:cc:4b:4a:82:14:1b:46:26:67:8b:33:13:71:7d:63:75:41:
9e:47:a4:00:e5:fb:7c:0c:7d:9b:32:b5:9e:ef:3c:d9:2d:e9:
26:ee:44:0a:d8:43:e2:0c:5e:d1:a7:44:93:c9:6d:68:ee:65:
eb:92:a2:a6:b5:f0:b8:4f:a9:e9:cd:c8:79:63:47:45:81:42:
a5:61:ac:a5:f9:a5:d9:5a:94:8c:98:7f:f0:8b:b9:79:28:7b:
9f:65:66:0f:40:d9:72:22:d4:c3:7f:0c:f7:d8:22:1f:12:87:
7f:98:3f:62:f5:47:ab:bd:77:d6:87:ea:44:63:3c:39:b0:54:
f1:6d:89:83:a4:74:74:7e:99:72:f7:51:58:fc:cc:95:0e:ef:
fd:46:61:97:86:37:10:82:74:02:8b:d2:68:3a:11:be:38:5f:
6e:49:02:d2:8c:68:b3:c4:9f:c2:4c:32:76:ba:16:5b:d4:bd:
2d:59:08:5f:b6:23:29:df:82:f0:d7:f5:96:80:e9:2d:b0:02:
02:b2:2d:3f:d1:3f:6c:b4:1c:1d:95:42:0d:91:5b:b9:a8:b5:
69:9b:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:11:17 2024 by rpki-client on console-fra.rpki-client.org