Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/dlHaUCpB-B7G9y1FtZiCgUHTo3A.roa
File: dlHaUCpB-B7G9y1FtZiCgUHTo3A.roa (raw, json)
Hash identifier: 0VvQSaG5xHvrKFZU1CxJ/ADNxLJUQN6QpsFOu5dGejI=
Subject key identifier: 76:51:DA:50:2A:41:F8:1E:C6:F7:2D:45:B5:98:82:81:41:D3:A3:70
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 018CC64B4B1D692F5BB06CD5E1ACAC68D1BE
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/dlHaUCpB-B7G9y1FtZiCgUHTo3A.roa
Signing time: Mon 01 Jan 2024 18:31:12 +0000
ROA not before: Mon 01 Jan 2024 18:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59775
IP address blocks: 78.108.220.0/24 maxlen: 26
78.108.221.0/24 maxlen: 26
185.56.112.0/22 maxlen: 26
2a02:5260::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4b:1d:69:2f:5b:b0:6c:d5:e1:ac:ac:68:d1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Jan 1 18:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7651da502a41f81ec6f72d45b598828141d3a370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:52:a2:fc:98:20:cf:1b:1a:0d:6f:0f:51:
b4:b2:ec:b3:aa:70:5d:db:45:0f:fd:70:36:b8:ef:
87:db:a5:fc:e4:2c:e8:f4:ac:e7:3b:ce:f0:32:3f:
71:13:b7:a9:67:ea:1e:d9:68:d5:40:4d:2d:66:85:
5a:12:d5:33:46:24:ac:eb:51:e4:68:99:1e:bc:32:
bf:d4:4b:3d:ae:9f:b6:26:c3:9d:d2:bf:8d:ed:84:
84:9a:d9:da:cb:99:5c:f5:e2:8b:d9:48:e8:31:c5:
b4:9c:7e:f2:77:16:d1:7a:d3:ba:8e:f0:14:09:27:
3e:04:c1:2f:44:c3:c8:65:18:19:4f:f8:13:6f:a4:
3d:17:64:7a:d1:c7:46:61:a2:59:15:8d:24:c0:d2:
97:e1:21:30:fd:a1:a1:97:78:1b:ac:3e:0f:5e:30:
7d:ea:97:94:7f:5c:be:c0:7a:57:5a:ec:68:4f:ef:
a0:44:26:e3:1e:71:c5:82:d3:a7:f8:fa:d5:72:b1:
23:a1:b7:b1:5c:41:c7:db:9e:c4:e0:9d:a7:ef:cf:
0b:0f:02:c2:51:7d:58:69:27:6f:76:0a:15:95:85:
cb:f8:72:6c:bd:97:64:7a:b5:b1:c0:ff:38:4d:62:
a7:fd:d0:78:56:8c:ab:80:5b:c8:fa:2a:ea:e9:12:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:51:DA:50:2A:41:F8:1E:C6:F7:2D:45:B5:98:82:81:41:D3:A3:70
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/dlHaUCpB-B7G9y1FtZiCgUHTo3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.220.0/23
185.56.112.0/22
IPv6:
2a02:5260::/29
Signature Algorithm: sha256WithRSAEncryption
77:78:e1:c3:28:ff:27:c4:e4:c0:2d:e5:79:b9:a7:f8:72:48:
bd:22:7f:15:02:b1:08:ce:ae:4f:48:1b:09:51:1a:2d:fa:42:
8c:26:06:d8:61:f7:a8:fc:d6:ab:b4:19:14:8b:c3:37:4a:ed:
b0:c8:42:de:37:a9:30:7c:56:1d:9f:b2:5b:2f:55:2d:24:f7:
21:4e:cd:6e:47:78:4e:d8:86:3b:bf:22:b1:f2:ff:a1:e5:df:
ca:39:fd:68:3b:c6:9b:01:87:fb:3e:c1:16:bf:4a:aa:b6:5f:
ef:0a:6c:3c:98:d3:26:3d:c1:27:ce:8b:0d:d3:38:15:2a:eb:
cd:d6:7f:76:1b:60:a6:4d:0a:31:84:7b:5f:50:b0:f6:06:dc:
69:89:09:8a:e2:7d:9e:94:c7:a9:9a:95:d7:27:4d:0f:ab:f8:
57:4e:da:a9:f9:b4:0b:da:50:a9:33:9c:79:06:03:c8:a0:8d:
8b:2a:49:cf:e4:88:33:70:17:97:92:c8:ad:42:84:19:44:29:
eb:dd:09:a7:ef:a5:df:eb:05:c5:91:e7:5e:d8:0c:2a:b0:58:
1b:36:3a:cb:da:9d:ff:3b:e8:ad:9a:9e:3f:71:90:4a:ba:49:
4b:c4:bf:70:d9:b2:93:bc:be:e9:d4:70:b6:ad:1c:50:5d:5f:
28:db:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:16 2024 by rpki-client on console-fra.rpki-client.org