Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/DXTOCd-eNAHp3G2b9Ne-ZcQ0Bz8.roa
File: DXTOCd-eNAHp3G2b9Ne-ZcQ0Bz8.roa (raw, json)
Hash identifier: hPnTrii3GZr4nYhnn+9Oo5HSJzLlbXpSqvCREbFqfFU=
Subject key identifier: 0D:74:CE:09:DF:9E:34:01:E9:DC:6D:9B:F4:D7:BE:65:C4:34:07:3F
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 019016453D10D55A75C9656EDB07BF8326F1
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/DXTOCd-eNAHp3G2b9Ne-ZcQ0Bz8.roa
Signing time: Fri 14 Jun 2024 10:22:34 +0000
ROA not before: Fri 14 Jun 2024 10:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:45:3d:10:d5:5a:75:c9:65:6e:db:07:bf:83:26:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jun 14 10:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d74ce09df9e3401e9dc6d9bf4d7be65c434073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:69:60:81:4a:3f:c2:a0:80:9e:0b:d2:e8:
78:13:53:bb:e6:42:ff:d5:20:3b:af:76:9a:22:80:
da:f6:05:64:09:11:70:aa:de:eb:2f:9e:9c:a0:82:
67:4f:6d:17:91:cd:e2:39:8d:e9:94:c9:6a:7b:6a:
0c:cd:a7:5c:81:90:bc:0f:5a:a2:bb:4a:b3:7e:19:
7b:0f:c2:27:c3:65:23:ab:ee:f8:8f:ef:4f:26:9e:
b7:c4:e9:43:11:02:61:b7:1a:80:d7:46:a1:d4:e0:
60:92:06:bd:29:6d:24:fa:18:16:22:0d:9c:f1:9f:
fc:40:b9:11:44:c4:62:84:a4:5f:ca:25:f2:83:12:
3f:bb:14:f7:70:47:51:15:ae:31:36:1f:39:52:34:
c3:f9:33:f7:c2:89:45:f9:3b:2d:bc:7c:5d:70:cd:
4c:d4:34:9c:35:01:8e:0c:40:9e:d6:fb:6f:73:99:
6c:e4:22:86:6c:a1:f7:5c:65:de:7e:f2:0b:3c:b5:
e6:fe:6c:79:b0:b3:23:a8:36:55:c4:76:35:d8:44:
bf:2c:d7:ee:ee:3e:04:55:0b:8d:6e:dd:f8:80:07:
02:ba:5e:27:89:79:67:73:bb:5e:39:b6:0b:3f:f3:
83:fd:1d:25:0f:c0:0a:5d:73:15:c6:d3:77:91:9f:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:CE:09:DF:9E:34:01:E9:DC:6D:9B:F4:D7:BE:65:C4:34:07:3F
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/DXTOCd-eNAHp3G2b9Ne-ZcQ0Bz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9d:40:99:f4:de:c8:e7:02:99:7a:41:ae:7f:17:0a:14:2f:
75:ec:80:a4:d0:82:ab:90:84:fd:fe:99:83:e8:fa:94:8a:a3:
f6:f4:59:d1:95:89:cf:20:70:ab:44:43:44:30:7b:ac:25:4e:
64:9e:ee:dc:6a:bc:17:f3:3b:e1:c1:8d:b9:5f:29:e2:2c:04:
9c:9c:bf:96:64:62:b9:b7:b2:f5:fe:3f:34:76:96:41:28:24:
c2:43:0e:1b:75:28:3b:c6:c9:5b:81:f9:e7:28:f2:5d:b6:cc:
3a:6c:b8:c3:e1:4b:63:38:b1:22:f2:ff:65:6e:9e:73:77:3b:
bd:9f:51:66:78:09:55:da:1e:6d:ba:39:f5:c9:1b:03:75:dd:
3b:14:27:4a:47:1b:0e:8f:c6:fb:a8:10:b9:e1:83:bf:b6:b7:
64:f6:79:4f:88:45:14:58:c3:a4:5f:0c:11:47:31:f0:d9:6a:
0a:3a:6c:2f:ef:72:b5:80:1d:6e:be:e5:5f:a5:d0:39:cd:ca:
56:f3:16:53:5f:37:40:8b:f0:7a:c8:97:71:00:49:b9:57:b9:
39:93:65:14:a5:87:00:07:4b:9e:42:f6:26:58:1d:b8:da:c1:
90:41:cc:9c:6e:ce:a0:db:81:05:ec:8c:19:d7:f2:ab:16:26:
ef:78:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:23:06 2024 by rpki-client on console-fra.rpki-client.org