Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/DKOICLD02iXpcA9vZFXQGySsTb4.roa
File: DKOICLD02iXpcA9vZFXQGySsTb4.roa (raw, json)
Hash identifier: B6+UClmsWdKQ3kl7FvMtYqJ1C1yzsvrn7+d4dqkZL9A=
Subject key identifier: 0C:A3:88:08:B0:F4:DA:25:E9:70:0F:6F:64:55:D0:1B:24:AC:4D:BE
Certificate issuer: /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial: 018CC64AF05ED086232E9CC80AE6483BEB9B
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/DKOICLD02iXpcA9vZFXQGySsTb4.roa
Signing time: Mon 01 Jan 2024 18:30:49 +0000
ROA not before: Mon 01 Jan 2024 18:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.163.152.0/24 maxlen: 24
185.163.153.0/24 maxlen: 24
185.163.155.0/24 maxlen: 24
185.163.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f0:5e:d0:86:23:2e:9c:c8:0a:e6:48:3b:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ca38808b0f4da25e9700f6f6455d01b24ac4dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:a4:17:ec:8c:77:03:76:b9:a2:e2:06:e6:
a4:c8:78:fb:22:2e:ab:67:51:a1:1e:0e:da:46:67:
ca:89:1b:b6:2f:ac:a9:63:a0:17:02:77:f9:57:cf:
00:b2:37:bc:da:e3:bc:bc:ca:92:40:3d:6a:91:06:
5c:b1:09:18:10:73:d5:15:c0:45:c7:17:9b:c8:b6:
92:b6:e9:f2:3a:e4:bb:4d:30:98:23:1c:40:aa:c6:
52:03:7a:85:1f:95:68:63:a7:a9:f4:5e:13:16:80:
ee:22:c2:32:d1:68:63:ee:af:9c:fb:25:76:79:17:
7b:ab:53:20:28:03:d0:5f:9d:1d:11:0b:3a:31:fa:
ff:3e:04:a9:ff:09:fa:9d:df:8f:a8:9e:d7:08:40:
c3:1d:c4:d6:c4:6e:fb:be:ea:22:24:5a:d6:88:50:
06:72:6c:b9:00:88:ca:bb:af:8e:d0:32:0e:51:39:
0e:f5:05:60:eb:e4:41:35:f9:6f:3a:af:6a:47:5d:
d5:13:42:9a:33:72:93:ee:73:c7:fa:ca:c8:88:38:
76:83:8f:1e:ea:cc:0b:fd:ee:49:4b:83:b3:87:77:
ef:39:4d:6c:a1:a8:b6:ed:0e:63:ed:60:5f:75:87:
7c:21:73:52:ac:bf:00:c3:cc:44:47:41:6c:83:ea:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A3:88:08:B0:F4:DA:25:E9:70:0F:6F:64:55:D0:1B:24:AC:4D:BE
X509v3 Authority Key Identifier:
keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/DKOICLD02iXpcA9vZFXQGySsTb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.152.0/22
Signature Algorithm: sha256WithRSAEncryption
40:46:a0:9c:3c:aa:c5:a4:1b:42:41:05:53:4e:d7:39:e9:1b:
11:8c:48:c6:09:98:30:41:fb:1e:35:47:83:32:68:e9:3d:7e:
31:9c:e8:80:8c:9c:56:f2:8e:89:4e:06:d2:e1:fe:47:22:5b:
84:db:3d:26:9f:3f:e6:96:47:29:23:5a:6d:1f:3c:90:9f:05:
13:36:d0:93:87:81:92:76:03:49:60:38:ef:e3:f8:eb:b2:e6:
68:60:7f:76:fe:f7:0c:d2:c9:99:96:8c:05:e2:43:bc:ec:c7:
2c:73:cb:14:62:cb:37:c4:80:96:bb:64:a4:cf:80:59:ba:24:
38:75:c9:c7:1c:91:68:57:4d:09:4d:57:52:ea:41:6f:b3:a8:
8c:c1:88:64:d8:56:94:47:b4:0c:9a:87:4e:20:2a:06:90:79:
1b:82:74:c8:0c:bf:3c:87:f9:70:9b:9e:e4:3b:22:5a:27:78:
6d:23:9e:3b:98:8c:f6:8f:af:18:e4:0e:a9:fc:f2:99:bf:99:
c0:26:23:d7:4c:57:7e:22:4c:29:4b:37:10:b4:c9:c3:5d:5c:
dc:e4:53:97:6e:f7:30:93:3c:11:ea:92:ba:2e:f4:b8:3b:5f:
4c:93:ec:43:1c:98:53:36:db:56:f7:91:a5:29:c0:f2:eb:0a:
bb:f1:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:18:29 2024 by rpki-client on console-ams.rpki-client.org