Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/92oza2U0pq6NLHbkxqdYheVymGQ.roa
File: 92oza2U0pq6NLHbkxqdYheVymGQ.roa (raw, json)
Hash identifier: LF7pjlxHdl9KhtW/30iT5tgmXy5c8rCaaVodvQLmzGE=
Subject key identifier: F7:6A:33:6B:65:34:A6:AE:8D:2C:76:E4:C6:A7:58:85:E5:72:98:64
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 018CC2DAF7D6D2599F40C4C7D26C8D55CF59
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/92oza2U0pq6NLHbkxqdYheVymGQ.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29637
IP address blocks: 217.66.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 04:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f7:d6:d2:59:9f:40:c4:c7:d2:6c:8d:55:cf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f76a336b6534a6ae8d2c76e4c6a75885e5729864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:79:72:9d:65:75:91:e2:ce:cd:41:a2:85:
44:48:be:e3:2b:b9:91:31:a5:a0:16:4a:0b:80:15:
3e:66:92:8a:f9:10:cc:72:ec:8c:e7:3c:db:0e:86:
06:22:82:b6:c9:b9:35:80:bf:0a:a9:47:ea:1a:33:
5b:74:d3:d6:a8:47:e8:c2:f0:0e:bf:09:56:38:40:
84:39:49:b4:73:ad:d9:72:d0:1a:c3:8d:06:d6:b9:
4c:c0:f2:28:72:7a:96:a3:82:d1:d6:35:48:d1:0c:
73:50:f2:22:61:65:d7:75:bb:d5:0e:17:0f:1f:d4:
2b:61:f1:8e:11:85:36:09:72:34:55:a9:a3:64:42:
82:46:ae:6d:e8:04:6d:35:3c:ed:89:3a:59:9e:02:
9b:c5:ea:00:b9:a4:16:d0:69:12:c2:10:09:5c:75:
69:11:34:c2:08:2a:4d:79:72:ec:13:f3:14:30:4f:
97:66:ff:2d:d3:e9:34:ba:db:38:45:00:9c:33:f3:
ca:ff:22:b0:46:4a:fb:6d:52:1b:2f:bc:6e:19:b7:
58:ac:e9:2d:79:ff:41:e5:c1:f3:a3:6c:2a:74:e9:
5c:ca:9a:41:48:3f:03:6d:42:2d:78:04:2f:ea:21:
5a:8c:30:a4:64:ec:3d:bd:db:f7:95:34:ad:5f:19:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6A:33:6B:65:34:A6:AE:8D:2C:76:E4:C6:A7:58:85:E5:72:98:64
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/92oza2U0pq6NLHbkxqdYheVymGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.66.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:03:16:6d:e0:c6:ee:6f:e9:7c:fa:63:01:95:35:ec:a6:0c:
e7:9e:7e:b6:02:a0:1f:09:ec:a0:1e:76:ce:c1:9b:35:90:3c:
e9:33:74:2f:53:9f:09:6e:f5:3a:71:7c:75:68:57:0a:c4:6f:
66:1c:f5:f6:e7:37:3d:f4:45:c3:d9:20:de:fb:94:a2:0c:16:
8a:e2:fa:45:94:67:4a:8a:44:81:64:89:a4:d5:25:f7:bf:d7:
ef:1f:05:77:21:24:3f:35:ca:ca:41:56:f8:c5:ff:09:34:c0:
45:b0:16:6c:08:8f:f7:02:9d:27:e8:7e:73:c5:7c:b1:7f:4c:
3c:48:dc:80:45:d5:53:69:5c:f6:5b:a2:bb:f3:7d:9b:b6:6c:
40:60:38:f1:36:d8:c6:14:84:4e:bf:b2:23:f3:78:28:c5:3a:
e8:b7:69:84:c1:21:32:a1:44:55:e6:36:f2:ed:af:27:e3:78:
65:59:2f:cb:6c:0b:0a:c5:ef:06:07:a5:6d:f6:5c:d0:f3:f2:
4c:13:9f:0d:cb:b2:dc:c8:fb:f9:76:1e:cb:b8:91:82:95:f0:
f1:c6:a4:b9:32:8f:04:aa:92:40:11:2e:c7:96:d5:9a:8c:5b:
b7:6d:3a:71:8b:cd:fa:bb:2b:56:8a:1a:21:c1:82:77:7d:92:
cd:6e:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:59:32 2024 by rpki-client on console-fra.rpki-client.org