Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/dpe417u0m2sTr0QRUtApjLVI65c.roa
File: dpe417u0m2sTr0QRUtApjLVI65c.roa (raw, json)
Hash identifier: nLjSXkWKE4cHhXo7Wlh1ow1OoYpaIcvC6mQinH6gNjg=
Subject key identifier: 76:97:B8:D7:BB:B4:9B:6B:13:AF:44:11:52:D0:29:8C:B5:48:EB:97
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 018CC64B70F4AC6C3A57D8EBD95344A13767
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/dpe417u0m2sTr0QRUtApjLVI65c.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49250
IP address blocks: 91.223.233.0/24 maxlen: 28
185.191.12.0/22 maxlen: 24
91.212.183.0/24 maxlen: 28
37.1.104.0/21 maxlen: 24
2a00:d540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:70:f4:ac:6c:3a:57:d8:eb:d9:53:44:a1:37:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7697b8d7bbb49b6b13af441152d0298cb548eb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1f:9a:c8:54:61:a8:32:31:b1:ea:41:77:3d:
2a:c3:ac:3a:68:e0:74:87:8a:d7:5a:c6:b2:0c:ae:
d7:3f:0e:d8:91:81:9e:ac:26:fd:62:03:6d:e1:80:
74:11:49:68:89:74:36:2b:05:cc:d1:3e:4b:e3:6a:
e8:20:9f:92:8c:54:49:2c:b2:54:8c:27:ef:d5:70:
69:f9:84:33:f4:6e:61:47:a1:03:76:d7:da:e2:9c:
ba:ab:0a:9b:cf:15:23:a3:ec:79:49:88:28:8f:e3:
d9:ae:7a:07:01:14:48:0b:6b:e4:36:ff:22:dd:74:
aa:ee:84:de:d2:f5:0d:58:60:6e:e1:bf:ec:bf:5a:
65:f7:16:32:cd:6c:39:83:44:02:6f:ab:6f:e8:3b:
85:c1:06:52:ca:96:43:ff:88:db:55:28:78:20:70:
68:61:10:e5:55:de:6b:b4:c5:7a:a9:fc:8e:db:f6:
94:34:62:b3:84:de:fa:b4:35:03:5e:48:2a:d7:4f:
3d:d4:4b:e5:a7:59:cd:5b:d8:fd:f0:04:a9:5b:5a:
59:2c:7c:5b:b0:07:c6:7b:37:43:47:8d:9e:f1:6d:
eb:34:ee:ef:7c:1c:58:5e:46:9b:62:98:99:49:48:
81:2b:18:9b:30:5a:56:66:4a:2b:d6:4b:56:04:55:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:B8:D7:BB:B4:9B:6B:13:AF:44:11:52:D0:29:8C:B5:48:EB:97
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/dpe417u0m2sTr0QRUtApjLVI65c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.104.0/21
91.212.183.0/24
91.223.233.0/24
185.191.12.0/22
IPv6:
2a00:d540::/29
Signature Algorithm: sha256WithRSAEncryption
95:8a:1b:fe:5d:3d:c7:e4:c6:fc:ea:e7:2c:93:a7:f4:76:2b:
76:32:60:7e:e0:54:b6:60:8b:a5:40:db:93:01:fb:bc:5b:e8:
85:c5:9b:24:5f:4c:87:9e:d4:7f:db:11:52:ec:8a:d4:27:46:
cd:d2:8b:24:19:7c:0a:96:2a:92:4d:35:60:b3:91:34:78:d1:
e5:29:ee:a5:43:9b:90:46:97:49:0a:66:57:48:97:6d:84:d7:
0f:af:5d:74:46:f9:41:57:e2:8a:13:5a:d0:45:a3:54:b7:52:
a2:d3:9f:dc:fd:fa:3d:b0:8a:f8:f0:a1:4f:d2:72:15:92:fa:
a3:87:ec:cf:ad:8b:0e:bd:2a:0d:85:c4:c2:0e:f7:c9:56:15:
8a:25:45:e6:c5:e8:0d:2c:5e:45:29:57:a8:34:02:81:00:55:
35:7d:87:88:6a:65:37:a3:e0:ce:4f:44:c5:96:eb:fb:0b:72:
cc:4e:b3:af:8f:8b:66:a0:5a:a6:66:02:6a:41:20:5b:ce:a6:
2d:56:ab:fe:cb:55:a2:d4:b5:1f:30:10:28:b8:a9:61:0a:49:
79:57:40:f1:88:5c:81:66:c5:76:a2:ce:63:7f:b6:20:c7:56:
32:49:0f:51:d8:58:e5:e4:fd:cb:b4:24:ff:89:0f:27:64:0b:
70:84:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:01 2024 by rpki-client on console-ams.rpki-client.org