Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa
File: DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa (raw, json)
Hash identifier: euXi3UViF66MqzyupePQsifTfFOqVL8uuwagK96jRAE=
Subject key identifier: 0D:14:15:CD:68:88:BE:68:86:12:EF:7C:2A:A6:BA:37:80:9A:21:BF
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01933398F416C99C8C1966AB61FD10198A6A
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa
Signing time: Sat 16 Nov 2024 06:11:22 +0000
ROA not before: Sat 16 Nov 2024 06:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209596
IP address blocks: 109.162.240.0/21 maxlen: 21
213.207.224.0/21 maxlen: 21
213.207.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:33:98:f4:16:c9:9c:8c:19:66:ab:61:fd:10:19:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Nov 16 06:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d1415cd6888be688612ef7c2aa6ba37809a21bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:ff:0c:b1:ec:65:3a:c6:99:2b:e0:ce:56:
36:54:2f:84:b2:d5:d6:cf:be:19:60:aa:38:7f:cc:
9e:67:fc:0c:1e:7e:e6:45:de:e6:59:1b:74:bc:7c:
70:58:7d:ed:45:c6:bd:99:18:19:dc:c5:e6:c2:b3:
89:db:d1:88:9d:94:ef:3b:a5:56:a6:39:06:64:f3:
ff:ef:28:38:ee:44:6d:53:3c:97:09:fc:ff:23:55:
41:9a:ff:7f:8b:2f:b2:c3:12:8b:48:92:6c:5c:f1:
54:90:ce:7e:e0:93:d5:8e:6d:9e:3e:34:1a:71:f4:
9a:92:da:20:57:9e:fc:e4:2b:d9:74:d2:c5:11:13:
41:a8:d2:87:a2:24:f7:c1:54:70:f1:37:b1:0a:32:
d6:c5:e7:42:d7:64:0d:7b:d2:f0:af:f7:7b:4e:d6:
4f:d9:3e:1c:00:ef:25:be:48:24:ea:53:fd:00:6a:
0f:8e:a5:d2:c4:0b:84:65:38:c5:3d:c6:ba:54:ca:
57:a5:ea:9a:49:2c:4c:f7:77:15:7d:ae:20:29:d7:
5a:8f:1b:78:a5:48:f8:0a:c9:fa:28:a5:28:07:9e:
f9:85:7c:21:32:c1:ca:97:62:4f:bf:12:fe:de:71:
20:62:63:f4:54:5a:4c:ba:90:93:32:99:e8:4b:af:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:14:15:CD:68:88:BE:68:86:12:EF:7C:2A:A6:BA:37:80:9A:21:BF
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/DRQVzWiIvmiGEu98Kqa6N4CaIb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.240.0/21
213.207.224.0/20
Signature Algorithm: sha256WithRSAEncryption
99:0f:d3:3a:8f:8c:57:15:24:d7:e2:3d:21:0f:be:63:ae:ab:
c5:aa:45:6a:dc:34:d2:b7:79:9d:93:13:4e:ae:df:c0:b2:44:
7c:bd:8a:63:dd:05:de:6b:d5:df:c4:29:4d:09:35:1e:01:2a:
32:22:10:2d:70:6f:fa:b8:fb:29:23:93:02:7d:8f:d4:71:63:
61:cc:05:03:4a:7e:47:c5:ae:8a:53:9a:29:21:d5:5e:98:18:
ed:13:15:6c:f6:57:e7:e1:ff:5c:04:0a:d2:9f:bb:48:71:e3:
4b:10:13:8e:55:a2:06:f7:bb:10:9e:68:4d:66:34:b6:08:78:
d7:1b:54:91:78:0f:ea:54:a0:5d:1d:96:2d:cd:a3:13:6d:6a:
d5:44:4e:0e:f9:a1:6c:ba:33:40:6d:35:6d:a3:83:a6:fb:b8:
90:cb:68:7f:57:35:bd:06:11:00:0c:5f:5d:b8:eb:c3:86:74:
ef:fc:57:59:9a:18:39:cd:ed:9f:8d:39:44:71:d0:8c:ae:0e:
df:73:1b:cd:2b:d3:d3:4f:70:85:1d:86:12:97:dd:7e:4b:31:
cd:30:3f:87:c9:4e:af:03:86:1d:c2:40:5b:3e:4f:29:50:93:
80:93:50:d8:c7:29:3d:a9:de:27:05:58:4a:75:d6:84:40:41:
06:67:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:28 2024 by rpki-client on console-ams.rpki-client.org