Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DLoy_RvPM79jsBHZuYzMrBPhh34.roa
File: DLoy_RvPM79jsBHZuYzMrBPhh34.roa (raw, json)
Hash identifier: LFzLDj8f7nL8sZ5l/LaOYyQv2bQCG2uSoBsA5LLtrJA=
Subject key identifier: 0C:BA:32:FD:1B:CF:33:BF:63:B0:11:D9:B9:8C:CC:AC:13:E1:87:7E
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0191D73BD7264BAEA57A2B4DF211BC515B00
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DLoy_RvPM79jsBHZuYzMrBPhh34.roa
Signing time: Mon 09 Sep 2024 14:41:48 +0000
ROA not before: Mon 09 Sep 2024 14:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142561
IP address blocks: 45.140.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:3b:d7:26:4b:ae:a5:7a:2b:4d:f2:11:bc:51:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Sep 9 14:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cba32fd1bcf33bf63b011d9b98cccac13e1877e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:92:86:40:26:55:74:8b:1d:d4:4d:fd:2e:
1b:92:b5:d1:6a:cc:3a:59:d0:d1:6e:cf:6a:6e:28:
28:ff:8b:1f:43:06:d3:65:4b:cc:69:fe:7f:5d:c4:
81:58:2d:fb:53:58:92:17:e2:0b:c9:fd:5d:87:16:
ac:74:f9:e1:6b:11:6c:95:1a:ee:bc:53:99:9b:91:
6f:cb:26:b2:ba:97:c7:11:58:fd:6d:ab:a2:f5:1e:
c2:27:6a:87:f9:1a:d2:89:60:05:41:35:6c:75:3e:
e1:0a:bb:e2:80:da:56:a5:06:cc:87:0c:de:3e:e1:
45:fb:7b:4b:7d:e7:5a:91:9b:9a:11:26:d4:6a:64:
44:da:e3:2b:76:cd:dd:7d:ca:d3:83:ef:0b:32:06:
b9:2a:10:58:05:e2:93:fa:97:fc:bd:d7:39:6f:73:
2a:4a:6a:de:fd:e1:28:83:ee:27:a7:61:07:f6:3c:
c5:58:96:c8:41:7b:c5:eb:ef:16:16:f3:5a:83:ae:
f4:ef:d7:8b:f3:4b:a3:a3:a4:e4:4b:8a:18:94:60:
ea:70:8b:b1:77:92:7d:95:6d:11:e7:c5:45:d6:f6:
1f:cf:57:74:72:78:65:93:72:d6:e6:b1:67:03:c3:
1b:60:62:4c:db:0e:46:33:94:38:09:83:ea:54:fa:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:32:FD:1B:CF:33:BF:63:B0:11:D9:B9:8C:CC:AC:13:E1:87:7E
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DLoy_RvPM79jsBHZuYzMrBPhh34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.194.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f5:d4:97:38:79:b3:e3:fd:b9:e6:5f:aa:f9:ec:ba:f3:05:
bb:89:20:de:45:08:22:cd:ea:be:51:7a:40:8f:81:a4:f3:69:
f8:28:27:23:e9:a9:99:8a:08:1c:42:d9:83:27:6b:a6:c6:83:
a6:6d:d6:19:b9:eb:d0:24:5d:39:db:3a:ab:d9:69:8e:c7:ab:
36:4d:37:49:7d:72:60:57:75:13:27:f3:12:f0:66:54:70:f5:
6c:15:46:c2:4e:e9:68:77:73:21:00:04:77:9a:77:56:e1:53:
14:48:26:a9:7b:b1:99:d5:2e:eb:96:3a:c5:ff:83:46:b6:e6:
0c:ba:0e:5f:6c:78:8e:63:2c:e6:7f:ce:8d:32:04:da:53:85:
df:2e:ee:0a:2e:53:cc:74:5a:39:a7:fc:85:00:e3:23:82:6e:
25:2e:72:ac:68:18:b1:56:02:8f:a7:2c:7f:8f:27:ef:69:e6:
19:91:0e:e7:66:8b:df:24:b4:81:0d:02:50:f5:21:58:e2:84:
98:f4:92:e0:7d:95:27:77:e1:6b:2d:c4:8a:43:a8:fe:5f:0f:
e6:34:f8:33:75:6e:06:15:b3:ff:d6:b7:fe:a1:36:8f:5b:2c:
29:04:13:10:a8:98:07:16:36:73:39:07:6c:36:f2:30:2f:0a:
da:cc:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:17 2024 by rpki-client on console-ams.rpki-client.org