Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/dgo2Bo5xfvUtvecRZOOBIXY94-Q.roa
File: dgo2Bo5xfvUtvecRZOOBIXY94-Q.roa (raw, json)
Hash identifier: uVhSQbehsTB2B/eM7hJpM7b3VC21dPnDix/7zG65XoM=
Subject key identifier: 76:0A:36:06:8E:71:7E:F5:2D:BD:E7:11:64:E3:81:21:76:3D:E3:E4
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019256A6411D36BE9A5644AD154D9DD314DB
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/dgo2Bo5xfvUtvecRZOOBIXY94-Q.roa
Signing time: Fri 04 Oct 2024 08:29:49 +0000
ROA not before: Fri 04 Oct 2024 08:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 212.81.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:a6:41:1d:36:be:9a:56:44:ad:15:4d:9d:d3:14:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 4 08:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=760a36068e717ef52dbde71164e38121763de3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:56:e2:fb:53:45:97:a6:76:bf:9d:0f:56:
a7:fb:70:bd:63:aa:a4:45:58:6e:6d:f2:dc:7f:4b:
a2:bb:34:8d:12:70:b5:b4:86:e5:49:a7:12:fb:ca:
4b:73:a5:81:c6:fc:ce:58:24:1d:be:c6:0c:3b:89:
74:88:4f:25:8f:23:02:13:f0:7a:25:dd:38:3d:cb:
49:75:e5:98:be:01:81:cd:64:71:2a:b4:f4:c7:15:
a9:be:3d:bb:32:de:9a:79:0b:a4:dc:57:38:53:e4:
65:60:b6:43:99:f7:56:cd:80:a0:67:bb:a4:b0:28:
5a:c2:3d:f6:d5:46:71:18:c9:88:26:55:a3:5d:13:
40:69:5d:53:b1:0f:88:9b:66:a7:bc:c3:38:cd:8b:
a4:24:89:7d:88:10:72:ca:dd:c8:c4:f9:9a:05:3a:
39:ea:5c:76:df:3d:22:20:d1:fd:a0:ba:d2:e0:95:
36:0b:c6:be:bd:7b:72:0d:a0:84:7a:d6:61:5f:ec:
2b:31:81:0c:e0:6f:02:cd:50:62:24:77:d0:f9:ee:
db:5a:18:91:50:6f:87:4c:0b:b1:6d:40:f7:82:a4:
3d:4b:20:f6:44:b7:7c:d0:64:83:ae:df:25:ae:e5:
af:70:2c:2a:ab:9d:5f:d9:8e:a7:f7:8d:2b:94:d9:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:36:06:8E:71:7E:F5:2D:BD:E7:11:64:E3:81:21:76:3D:E3:E4
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/dgo2Bo5xfvUtvecRZOOBIXY94-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9e:c7:38:39:3d:11:eb:32:40:4d:77:74:1a:76:c2:72:f6:
2e:0c:f9:07:0f:8f:7a:2a:e5:ca:c0:d7:84:be:81:36:d7:81:
2c:dd:92:e1:d1:3b:1f:1c:11:6b:28:ba:d3:4d:de:a0:76:a2:
3c:43:45:ed:d2:9d:33:73:b5:e7:c1:1c:6c:e3:c9:0f:f4:c2:
91:db:2b:79:26:c5:10:c9:3c:b8:8e:45:3e:ef:2d:01:bf:2e:
20:6f:9c:91:cf:d2:21:43:41:9e:c4:b2:34:3e:0a:06:b1:b2:
78:67:18:c7:a4:7b:bc:c9:24:e8:e7:67:40:c1:cd:f2:1e:a9:
8d:06:50:34:f5:fb:da:85:ec:63:99:41:c7:28:a0:67:e1:eb:
7c:37:71:76:b0:1e:28:ec:8d:b0:1f:30:dd:14:1b:7e:fb:ac:
73:39:4a:d2:bd:c9:9c:38:91:da:80:88:47:0f:fc:e6:8d:83:
1f:e4:1e:34:0c:32:b0:d0:bf:7d:29:5c:86:aa:c7:d6:80:ce:
61:07:9d:83:2a:1e:f6:e3:d7:21:b4:1b:74:9f:c1:b9:75:86:
e4:87:c0:9d:70:d8:08:09:b0:ae:30:b5:e8:cc:d8:18:6a:68:
58:b0:71:db:97:70:98:5b:cf:d0:35:c6:73:ef:7f:ea:bc:68:
b1:12:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:25 2024 by rpki-client on console-fra.rpki-client.org