Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/DJKIX8OArb_EQyp0Nsht2sLfhno.roa
File: DJKIX8OArb_EQyp0Nsht2sLfhno.roa (raw, json)
Hash identifier: VrbYy5857zVa9impPczmb1/I/rp4CNsgJwZn5HsptrY=
Subject key identifier: 0C:92:88:5F:C3:80:AD:BF:C4:43:2A:74:36:C8:6D:DA:C2:DF:86:7A
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0192F29544D7827BE8D9FE199612D7F99659
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/DJKIX8OArb_EQyp0Nsht2sLfhno.roa
Signing time: Sun 03 Nov 2024 15:12:01 +0000
ROA not before: Sun 03 Nov 2024 15:12:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8070
IP address blocks: 51.54.0.0/15 maxlen: 15
62.10.0.0/15 maxlen: 15
194.41.16.0/24 maxlen: 24
194.41.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f2:95:44:d7:82:7b:e8:d9:fe:19:96:12:d7:f9:96:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Nov 3 15:12:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c92885fc380adbfc4432a7436c86ddac2df867a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:b3:11:9e:32:27:d6:0b:e0:8a:fc:c9:59:
98:30:33:34:3c:53:03:73:f2:f9:30:3d:08:fc:d8:
4e:7a:96:9b:ef:7c:09:6c:d7:33:e0:24:81:48:3f:
7e:51:b0:11:6b:ac:bf:a0:d4:ec:cf:26:78:cb:59:
a4:a6:59:9f:2a:2d:c9:ce:21:5e:71:45:cd:4f:0e:
27:d8:ab:3f:99:d7:c6:28:2d:2b:4f:3c:24:15:fb:
36:8e:aa:39:e0:fb:37:f4:8a:ad:39:39:93:72:10:
9d:5d:86:11:bc:18:7f:a4:17:5e:71:cc:70:db:50:
7c:4a:ce:56:eb:e0:84:04:9a:13:6b:b6:85:5e:57:
44:b0:51:f6:07:16:8c:5c:ef:ff:06:fd:2d:bf:65:
f4:2c:b0:dd:17:a2:22:fd:51:6f:d7:f1:0d:c6:2d:
02:b0:42:3c:b5:dd:2d:9c:92:ed:58:25:6b:8e:c1:
0b:79:90:42:6e:4f:1c:9c:f1:62:2b:fa:96:c0:20:
b9:a7:36:d1:a3:7e:6c:e4:d0:76:85:2b:a7:d1:e2:
08:2a:df:b4:c0:4d:45:70:a4:2d:d2:71:2e:07:1f:
52:74:73:e0:36:78:7d:eb:87:7b:1a:ae:a6:4f:5b:
21:00:3e:7e:df:67:c3:b1:54:9b:19:28:a0:33:50:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:92:88:5F:C3:80:AD:BF:C4:43:2A:74:36:C8:6D:DA:C2:DF:86:7A
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/DJKIX8OArb_EQyp0Nsht2sLfhno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.54.0.0/15
62.10.0.0/15
194.41.16.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:e8:39:1f:a6:f8:6a:a9:dc:ba:a5:1b:e9:5d:eb:f4:a1:7a:
cb:7b:59:61:c0:23:15:ce:b3:06:2f:f9:70:7f:b5:ef:1c:c6:
2f:9d:04:14:96:2a:5c:81:3f:ad:d8:c2:65:e4:86:ea:e7:21:
03:18:f8:92:e7:c5:77:e0:11:25:c1:f0:22:c2:65:b8:64:25:
3f:ab:cd:6e:cc:b2:9f:f4:7a:e5:cd:4c:c2:5e:58:e4:a8:27:
0d:a6:5a:7f:03:bb:16:89:d0:8b:bd:75:21:86:81:3d:e5:20:
63:78:77:b0:35:9d:85:1e:63:6b:97:3a:60:dc:85:64:12:32:
4a:df:3f:9b:72:23:31:f5:1f:b5:27:d8:9f:6e:41:f3:7d:26:
a4:18:0f:78:c6:6f:4c:00:88:b6:cb:c1:61:ce:a1:54:af:4c:
e5:25:1a:c8:48:b4:6e:d6:86:59:c6:61:81:97:4e:bf:6f:16:
8c:97:29:b6:0a:dc:4a:6c:b7:3d:2b:74:9e:6d:bf:8a:f3:df:
e4:2f:8a:34:1a:c9:8d:6f:5c:1c:36:ad:f2:41:7e:f1:ea:54:
8e:62:e4:79:55:7d:2d:fc:ca:29:9f:bc:1e:19:f9:ee:d9:dc:
68:5a:30:c2:bf:7c:3b:e2:1c:84:c7:19:b5:32:66:f7:31:8a:
59:f2:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:45:53 2024 by rpki-client on console-ams.rpki-client.org