Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/dxl-0gbMPDf3zltjiiweTP0Goi4.roa
File: dxl-0gbMPDf3zltjiiweTP0Goi4.roa (raw, json)
Hash identifier: MI4mk9WGh8z8PwodWTdm1yU5QOLHQEM7Rkr2judbt4A=
Subject key identifier: 77:19:7E:D2:06:CC:3C:37:F7:CE:5B:63:8A:2C:1E:4C:FD:06:A2:2E
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 018DB22CE0966210DB46030165F29F51E14C
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/dxl-0gbMPDf3zltjiiweTP0Goi4.roa
Signing time: Fri 16 Feb 2024 13:48:21 +0000
ROA not before: Fri 16 Feb 2024 13:48:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 92.60.74.0/24 maxlen: 24
92.60.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:2c:e0:96:62:10:db:46:03:01:65:f2:9f:51:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Feb 16 13:48:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77197ed206cc3c37f7ce5b638a2c1e4cfd06a22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:62:69:7e:34:1f:c3:38:8f:95:08:e0:42:
6a:0a:d3:39:b5:b9:51:88:3f:14:8a:17:b0:fd:ff:
0f:f2:b8:13:a5:0c:86:4a:d3:5a:c4:53:e5:12:d9:
32:48:54:b6:49:e4:61:8e:92:e1:28:48:2b:65:66:
dc:f0:e0:07:44:2e:ad:f2:b3:38:f5:28:ce:02:a2:
6e:26:f0:ef:5e:3f:b0:5f:2c:65:4e:1d:c1:b0:7c:
b0:93:d7:ef:5f:2d:fb:92:29:82:bd:49:4e:62:f1:
80:c6:af:cf:5d:91:1a:b9:d4:5e:7d:d3:1d:88:19:
18:91:db:e1:dc:d0:a6:21:37:85:b5:c2:32:e3:b3:
57:f3:3f:58:02:d6:0d:cc:5a:0f:3a:5f:09:ca:4d:
fa:12:9d:51:1e:b9:a6:40:b5:af:f0:f9:04:f0:9e:
3f:0d:c9:47:5f:2b:31:f0:10:44:ca:74:dc:dd:90:
75:77:c6:4a:d7:1f:75:ea:37:60:e0:97:02:31:c9:
67:86:97:2a:a9:fb:9b:3b:66:cb:59:16:94:0a:37:
43:9d:83:c4:83:30:22:4c:d3:e7:d1:41:37:64:ed:
1e:ad:62:b5:95:87:9c:58:3b:95:0d:fc:53:0a:18:
59:2d:6b:b1:39:6d:2c:fd:7b:91:e8:61:14:18:4c:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:7E:D2:06:CC:3C:37:F7:CE:5B:63:8A:2C:1E:4C:FD:06:A2:2E
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/dxl-0gbMPDf3zltjiiweTP0Goi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.74.0/23
Signature Algorithm: sha256WithRSAEncryption
62:85:b6:ef:5c:0b:3d:96:83:2a:bb:81:ca:53:e6:c6:ad:0d:
87:56:12:ac:ec:69:65:a6:c0:89:96:03:74:2e:00:b4:69:41:
e9:ff:f0:42:3f:df:c2:b4:00:59:74:33:52:ba:a5:66:bd:f9:
5a:75:1b:b5:55:48:e3:da:93:65:aa:5f:c8:f2:b4:51:35:d6:
b5:b5:58:c7:04:82:f3:0d:1f:08:26:b5:cb:28:66:12:f4:83:
fd:9b:40:34:4c:66:de:72:b9:81:56:95:5c:58:a2:c7:c7:e2:
f0:49:17:23:1e:b2:17:91:0b:36:38:a6:ec:f4:c3:fd:83:dd:
a7:f2:98:73:43:3b:32:c7:45:62:93:64:c7:28:26:6a:cb:df:
28:4c:18:d2:90:28:e3:be:50:ef:20:bb:c1:b1:f2:1e:28:20:
9d:17:60:18:47:46:35:d4:8c:e2:03:c9:b0:83:dc:4c:27:b1:
b4:2d:08:19:7c:a7:56:2d:d1:b1:88:24:42:05:5e:36:74:14:
02:4d:41:f9:2a:31:1a:7e:2f:d2:11:82:d0:b4:2c:bc:42:dd:
f7:58:a2:5d:52:0e:6e:75:54:07:56:a2:3a:f4:76:fb:18:d3:
05:89:c7:ad:09:ef:a2:e2:9d:31:4e:94:f7:cf:78:30:69:c0:
f0:5c:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:45:35 2024 by rpki-client on console-fra.rpki-client.org