Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/dIODXwXdlL_cZ-b_u62XlGwFB8s.roa
File: dIODXwXdlL_cZ-b_u62XlGwFB8s.roa (raw, json)
Hash identifier: qMBF9eY8LsisO3rrs3XR1O4i3ojjfdAp3idouv6lxzE=
Subject key identifier: 74:83:83:5F:05:DD:94:BF:DC:67:E6:FF:BB:AD:97:94:6C:05:07:CB
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 018CC6B914E71B51443C3AE3EAE90BB43D52
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/dIODXwXdlL_cZ-b_u62XlGwFB8s.roa
Signing time: Mon 01 Jan 2024 20:31:07 +0000
ROA not before: Mon 01 Jan 2024 20:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39078
IP address blocks: 217.68.32.0/20 maxlen: 20
81.25.80.0/21 maxlen: 21
2a06:3640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:14:e7:1b:51:44:3c:3a:e3:ea:e9:0b:b4:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Jan 1 20:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7483835f05dd94bfdc67e6ffbbad97946c0507cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:de:85:03:c0:7b:0f:74:10:1b:41:db:49:
04:43:c2:bb:ea:3b:f1:f9:6f:e9:c0:fd:11:65:3f:
33:a9:7a:81:26:11:55:fa:ff:f7:f9:07:18:a8:f6:
02:17:9c:c8:d6:af:e1:c6:3c:2d:27:0e:ee:ff:52:
19:92:1a:c1:6e:35:e9:c4:f4:bc:2a:d5:d1:5f:c5:
c1:13:5b:dd:d7:63:7c:95:cd:00:43:2f:42:de:ab:
fe:2f:c7:76:be:7d:5b:a8:67:8e:ff:c9:ad:1b:dd:
f4:c5:21:c6:12:7d:44:7b:5d:f7:ab:14:78:e2:5f:
25:32:92:2f:1a:57:a4:b9:42:c1:cf:b5:6c:d6:87:
64:70:6a:f2:6f:79:c1:0d:c0:dd:df:4c:bb:8e:bd:
80:0b:2d:8d:64:5c:6b:ce:cb:a9:e3:31:73:46:ca:
f1:10:16:c3:f1:d3:9a:5b:20:7b:61:8c:9f:5b:4f:
2b:86:d3:24:9e:1d:00:ab:f8:44:98:7e:0c:ee:89:
01:2e:71:93:f8:16:56:31:9e:2b:62:cc:58:82:fd:
13:da:ad:5c:f3:e0:c0:0d:70:b6:be:f0:93:7b:8d:
6b:e5:ae:f1:e7:6f:27:fd:89:7f:46:eb:41:24:b1:
c5:01:6c:0e:1b:c6:cf:61:05:e0:e8:fb:06:cb:6e:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:83:83:5F:05:DD:94:BF:DC:67:E6:FF:BB:AD:97:94:6C:05:07:CB
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/dIODXwXdlL_cZ-b_u62XlGwFB8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.80.0/21
217.68.32.0/20
IPv6:
2a06:3640::/29
Signature Algorithm: sha256WithRSAEncryption
a0:af:b9:c8:75:6c:50:45:a1:b8:51:44:99:c0:04:c0:55:54:
50:6d:85:86:59:34:9b:bc:42:08:10:1d:de:75:b0:4c:60:40:
57:57:80:ad:97:15:da:1a:d4:0e:14:f0:e5:49:dc:1e:35:be:
6b:f0:a7:48:64:71:ee:1b:ec:73:0c:ac:ab:b8:f3:5c:c5:37:
2b:b9:c2:85:79:65:3f:7a:b6:87:8f:0a:74:d1:5e:46:d6:fa:
4a:65:13:a7:65:91:9c:86:d7:37:b7:ad:4e:fa:73:fe:33:45:
72:a7:0b:39:0e:aa:85:6b:74:8b:d8:73:8f:c3:fc:61:4b:fd:
f1:7f:fa:0a:15:39:9a:dc:da:0b:9f:6c:f5:07:1b:27:08:84:
a8:8a:9c:3c:64:c7:67:f2:d1:c9:7b:08:5a:4a:21:07:7b:bd:
ff:de:fe:b4:3e:95:40:69:95:2c:eb:8a:c9:b6:bd:27:c2:00:
a9:c2:33:24:da:20:d7:25:d7:6e:a1:d0:75:89:6e:4d:7a:8e:
96:43:bd:05:56:81:b6:21:94:4d:e5:fe:36:57:58:78:75:69:
ed:5c:66:91:ab:20:9d:2d:3e:2e:5b:27:3c:c1:9c:ab:59:12:
f3:ca:34:dc:75:66:41:ed:4c:eb:41:2e:d6:4e:32:63:9e:bc:
e5:46:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:19 2024 by rpki-client on console-ams.rpki-client.org