Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/DZCOI-ES2QF_93ycDxCnUyPKRrw.roa
File: DZCOI-ES2QF_93ycDxCnUyPKRrw.roa (raw, json)
Hash identifier: f0KqmdId8kLa0ODHLSp2dBvZuCm7X/Ykmno/K/VSwj8=
Subject key identifier: 0D:90:8E:23:E1:12:D9:01:7F:F7:7C:9C:0F:10:A7:53:23:CA:46:BC
Certificate issuer: /CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
Certificate serial: 018CC64B421C4021BB32EAB1A7632CB26F8A
Authority key identifier: 2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/DZCOI-ES2QF_93ycDxCnUyPKRrw.roa
Signing time: Mon 01 Jan 2024 18:31:09 +0000
ROA not before: Mon 01 Jan 2024 18:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48348
IP address blocks: 185.86.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:42:1c:40:21:bb:32:ea:b1:a7:63:2c:b2:6f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d908e23e112d9017ff77c9c0f10a75323ca46bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:0d:cf:9c:17:dd:6c:d5:bf:c7:98:63:f2:
46:68:2c:0d:97:93:06:80:07:cb:b4:50:ca:b8:7b:
5a:bc:f4:c9:d6:49:84:6d:97:0d:a8:64:ed:94:ae:
01:a3:6b:7e:c3:92:ee:e5:42:68:87:b5:b3:7a:98:
79:7f:c8:14:e4:9e:d6:67:d9:3e:65:2c:b9:01:ed:
fb:ef:34:2c:02:8e:10:99:df:18:df:14:05:d6:56:
58:59:69:22:15:96:35:a0:28:9f:4d:65:10:00:4f:
18:1e:06:49:b5:cb:44:12:9a:cf:b5:fe:f5:e8:c2:
e9:61:78:25:e6:84:10:3d:04:3d:bf:c6:0a:e8:26:
ce:66:18:ef:86:af:fd:8e:9f:3b:88:05:bb:45:74:
b6:55:80:0d:db:60:3c:fc:02:d7:d6:51:6f:64:67:
04:91:68:77:af:53:9a:17:37:d2:22:e5:47:2b:83:
57:0d:95:b9:a0:87:da:0c:1e:8d:fd:38:11:ab:53:
d4:02:e6:3f:3e:9e:83:70:63:40:07:60:24:97:16:
96:a6:72:2b:a5:34:c2:28:06:91:c5:5e:d5:84:d6:
82:5b:57:fa:96:3b:79:ff:08:88:75:bb:46:df:b4:
45:9a:1a:a9:77:73:2c:a5:d9:79:12:90:2f:45:98:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:8E:23:E1:12:D9:01:7F:F7:7C:9C:0F:10:A7:53:23:CA:46:BC
X509v3 Authority Key Identifier:
keyid:2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/DZCOI-ES2QF_93ycDxCnUyPKRrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.248.0/22
Signature Algorithm: sha256WithRSAEncryption
45:b7:40:f0:47:78:44:cf:77:5e:d4:d6:b0:57:ba:ad:8e:da:
1f:2e:f7:14:54:9d:77:3b:84:1c:8e:93:e4:83:a0:98:35:67:
7e:50:fc:b4:71:d3:06:7c:f3:7d:1e:3e:73:fc:54:f5:08:dc:
41:ca:c7:ed:66:c4:d9:4e:62:94:94:07:a6:1d:ca:d5:93:2e:
41:98:82:c3:c4:6a:72:a1:8e:52:fc:40:55:ba:f8:ac:12:50:
3d:9b:36:46:8d:5a:28:66:50:f5:53:67:8e:0e:55:5d:fd:aa:
93:41:d9:2b:d0:ff:7d:fd:d1:d8:4b:a8:19:fb:77:21:30:bf:
5f:f3:87:d4:5d:b7:53:81:68:0e:6d:4e:af:f6:78:10:cc:53:
9c:f8:9c:f2:a7:6e:d8:f7:fa:04:05:d2:a2:e7:38:73:57:a1:
92:b6:f0:fc:66:5b:36:73:ae:b2:ca:15:05:c1:3f:19:de:76:
86:ca:33:7d:73:aa:06:a3:0e:0a:57:56:1d:84:ca:aa:58:18:
64:b8:54:6e:30:ae:4b:5d:9f:5a:af:e2:89:be:7d:49:76:3f:
34:fd:5b:dc:51:e9:9d:b2:e2:6b:e5:e9:b1:c6:68:40:b2:9d:
69:a4:aa:e3:38:3e:5e:86:c1:fe:75:8c:81:84:a5:a1:ff:ef:
d9:3b:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:32:03 2024 by rpki-client on console-ams.rpki-client.org