Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DlUOnhJe_rOqAcCBiJHsQtDSDsM.roa
File: DlUOnhJe_rOqAcCBiJHsQtDSDsM.roa (raw, json)
Hash identifier: R1qdujdy84WU5p0VDeM4M/93PsJqMuay97cuqNLfkDc=
Subject key identifier: 0E:55:0E:9E:12:5E:FE:B3:AA:01:C0:81:88:91:EC:42:D0:D2:0E:C3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F144E05D53B7920B9363AF417DA9F217F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DlUOnhJe_rOqAcCBiJHsQtDSDsM.roa
Signing time: Thu 25 Apr 2024 08:10:08 +0000
ROA not before: Thu 25 Apr 2024 08:10:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 103.114.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:4e:05:d5:3b:79:20:b9:36:3a:f4:17:da:9f:21:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 25 08:10:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e550e9e125efeb3aa01c0818891ec42d0d20ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:ee:e6:06:32:73:01:19:ba:9e:10:fa:42:
b8:42:f2:4f:a9:f5:cb:29:d4:02:bf:88:72:ec:8a:
8a:80:a2:56:5f:27:68:9b:4a:cd:64:ca:fb:c8:c4:
6c:1c:09:55:c9:a8:95:e3:5f:79:d1:4e:79:71:e6:
f7:ba:64:97:6f:a6:f6:21:54:84:26:c7:0b:8d:04:
dc:b8:f4:b5:d6:bc:a6:06:16:40:18:67:26:02:ce:
3f:69:b6:6f:ab:57:9c:54:50:68:f6:3b:1f:21:08:
83:12:f2:e1:74:ba:7e:73:39:a3:9d:ae:04:27:8b:
65:ba:27:4c:52:d9:18:ec:08:c4:14:8b:3a:3b:bf:
57:8b:78:88:7c:31:b0:e8:93:78:10:b1:4b:a5:8a:
1c:1f:6c:64:ff:54:7c:fd:e5:b0:8f:b4:7c:66:fa:
1a:27:69:7c:bf:ed:a5:a6:1e:70:16:f0:e3:8a:78:
d5:b2:5a:ab:1b:67:c0:48:0a:c1:b6:78:ae:c8:33:
e3:f6:73:50:a3:d3:79:b9:56:50:02:5b:f1:1a:fd:
e8:fc:ca:39:cd:f3:89:8f:c8:0d:64:be:92:f5:fd:
00:e4:ef:bf:1c:a3:4e:83:05:dc:92:5a:af:00:51:
ee:34:1d:42:8b:90:72:e4:1c:84:70:7a:db:21:8b:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:55:0E:9E:12:5E:FE:B3:AA:01:C0:81:88:91:EC:42:D0:D2:0E:C3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DlUOnhJe_rOqAcCBiJHsQtDSDsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
03:f7:da:d2:9f:fe:be:3f:bd:90:86:24:99:34:99:97:e8:b5:
2d:02:1f:89:e2:3f:3a:1e:bb:e4:b4:72:1a:c1:15:8a:88:0b:
a4:7b:70:b4:ad:a8:9b:03:c9:93:c3:ae:31:09:e2:12:d7:18:
b0:fe:3f:f9:ef:3d:13:bf:a2:1e:39:68:30:c3:18:98:12:d8:
ba:7a:9b:3d:d5:ca:e7:a4:a8:cf:a5:b2:47:34:7d:a6:1c:76:
37:a3:aa:b3:51:62:97:23:8c:7c:9a:0c:bd:55:d1:11:f4:8e:
12:9f:c7:d7:02:ff:32:26:49:24:b0:44:0e:d9:af:4b:54:5a:
26:eb:d8:91:71:86:a5:95:a8:a3:fb:84:63:8b:d8:f9:9a:c3:
2a:d9:fd:1b:32:a7:7d:8a:4c:19:2f:b2:e8:14:6f:a8:21:e1:
ec:9b:8f:71:97:25:25:cf:ce:48:b2:19:5f:1b:3e:7c:6f:e3:
cc:bb:9d:fd:7a:88:78:c0:89:9e:9b:74:4c:4c:b4:07:30:c1:
10:b6:c6:37:73:53:c3:ef:39:dc:e1:70:fd:4e:6a:91:89:71:
31:aa:28:7f:77:d9:b0:d1:ab:8d:93:c0:85:8d:64:c0:f3:58:
17:83:f1:cc:b0:44:15:a0:a9:d8:aa:d9:6c:b4:a0:42:14:53:
e6:43:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:27:18 2024 by rpki-client on console-fra.rpki-client.org