Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DmGl1o3y--QpvM2JYZxCZXyUl9c.roa
File: DmGl1o3y--QpvM2JYZxCZXyUl9c.roa (raw, json)
Hash identifier: U4795RAqvIyAlmiHzZN/055kwF+NPQNJXn78Pi8cDpA=
Subject key identifier: 0E:61:A5:D6:8D:F2:FB:E4:29:BC:CD:89:61:9C:42:65:7C:94:97:D7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018DD7AF5499C177BAE725BF4192152F32BB
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DmGl1o3y--QpvM2JYZxCZXyUl9c.roa
Signing time: Fri 23 Feb 2024 20:36:48 +0000
ROA not before: Fri 23 Feb 2024 20:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48925
IP address blocks: 45.8.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d7:af:54:99:c1:77:ba:e7:25:bf:41:92:15:2f:32:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 23 20:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e61a5d68df2fbe429bccd89619c42657c9497d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:dd:cb:fe:59:c9:ca:50:11:4e:86:1a:1b:
45:c6:bf:12:d4:bf:e2:bf:ce:34:66:8c:74:4f:e3:
47:f0:00:40:4d:e5:d0:9e:53:07:9c:a0:2c:ff:b0:
b9:9d:6a:70:5c:5d:eb:80:97:ef:71:bb:55:68:9f:
06:ab:22:81:a8:02:f4:2c:79:7e:09:55:5f:03:ab:
b2:22:ce:87:a6:7c:01:2f:be:6c:19:78:5f:54:b9:
3d:09:34:d7:0a:6b:db:be:6c:7e:66:03:83:73:e0:
ce:a8:9c:aa:b0:f3:ef:c0:a2:4a:70:a8:62:41:61:
71:bc:8c:f0:7a:da:fe:b7:c9:50:76:f1:75:ca:0a:
29:9f:14:25:71:15:ab:b3:30:c6:f6:e4:3f:ca:26:
ad:65:22:f8:b9:14:9e:9d:47:89:2c:c3:02:7b:f2:
93:c4:ca:94:9b:84:b2:69:5c:fb:1f:0a:c6:91:89:
35:20:0b:01:11:70:1d:87:62:bb:2e:43:6a:c4:db:
6e:7d:bf:0d:a0:92:4d:c0:11:2d:2c:9b:da:7e:ce:
c3:aa:bd:52:f8:5e:35:fe:b2:7f:22:a6:e3:d8:9c:
e0:c5:9e:8a:12:fd:c0:3a:77:b4:43:07:7c:9f:55:
b9:6b:ae:f1:48:78:5d:67:7f:92:93:82:e4:8d:e1:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:A5:D6:8D:F2:FB:E4:29:BC:CD:89:61:9C:42:65:7C:94:97:D7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DmGl1o3y--QpvM2JYZxCZXyUl9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
97:60:7f:fd:db:f3:3b:d4:14:c7:a2:4a:8c:70:f2:fb:96:8b:
08:40:56:d0:22:f7:35:43:de:d1:d5:ab:04:6e:34:09:b0:11:
01:ad:ba:8f:e4:3b:c8:9a:0e:83:9a:21:be:99:22:20:ce:fc:
85:ed:d6:cc:10:6e:fa:69:36:03:c0:bb:e4:f3:2f:94:11:82:
1f:99:76:ef:6d:ca:4b:e5:74:42:69:f7:38:9f:bc:6f:85:d2:
b1:7c:e5:b3:0f:b5:5c:6e:54:a3:69:29:5a:6d:0c:be:61:55:
4e:c8:24:d6:9b:4e:68:84:f3:39:3c:d2:74:28:ef:e4:21:4a:
3c:a4:fd:0f:8c:99:be:7f:e4:d0:6f:6c:3e:43:b4:0c:cc:dd:
c9:bd:34:c9:27:3f:bc:a9:42:8d:f1:e2:4d:b1:b3:7a:2c:88:
95:16:32:54:7d:dc:84:d5:d8:be:97:3d:f2:2b:2c:94:82:1d:
6b:3e:4b:cf:4a:d0:44:be:e1:7f:87:18:c8:d0:f3:a8:c8:ce:
94:41:c6:f4:f9:12:9d:d6:fc:7f:84:d7:4b:32:6f:78:65:c5:
8a:08:5e:c5:a1:df:09:07:bb:31:e0:db:51:38:1b:9d:b1:07:
36:27:85:8c:6f:40:30:f5:8d:b6:5c:17:17:ad:15:77:f6:df:
3b:e9:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:04:47 2024 by rpki-client on console-ams.rpki-client.org