Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/Dd8bDgkGBMfYelW5gr3DOleDkGQ.roa
File: Dd8bDgkGBMfYelW5gr3DOleDkGQ.roa (raw, json)
Hash identifier: yACpJFGtiBTKUWxclXA8OUwLY3Nxf71AeJ4gQWwDDk0=
Subject key identifier: 0D:DF:1B:0E:09:06:04:C7:D8:7A:55:B9:82:BD:C3:3A:57:83:90:64
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 018CC725ADDE0C8A18AAE9F4E3C610DE2BB5
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/Dd8bDgkGBMfYelW5gr3DOleDkGQ.roa
Signing time: Mon 01 Jan 2024 22:29:44 +0000
ROA not before: Mon 01 Jan 2024 22:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197423
IP address blocks: 109.245.56.0/24 maxlen: 24
109.245.55.0/24 maxlen: 24
109.245.57.0/24 maxlen: 24
109.245.63.0/24 maxlen: 24
109.245.62.0/24 maxlen: 24
109.245.61.0/24 maxlen: 24
109.106.226.0/24 maxlen: 24
109.106.229.0/24 maxlen: 24
109.245.216.0/24 maxlen: 24
109.106.233.0/24 maxlen: 24
109.106.230.0/24 maxlen: 24
109.106.237.0/24 maxlen: 24
109.106.236.0/24 maxlen: 24
109.106.235.0/24 maxlen: 24
109.106.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:ad:de:0c:8a:18:aa:e9:f4:e3:c6:10:de:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Jan 1 22:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ddf1b0e090604c7d87a55b982bdc33a57839064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:16:2e:0d:90:cb:64:97:fb:c9:1a:2e:5d:
39:e8:04:3b:b0:11:f8:96:f7:e8:85:88:c3:af:c5:
a1:d0:93:fb:70:bf:4b:d0:a3:55:b9:36:68:50:e3:
3b:f5:b6:a1:46:28:2c:0b:e5:d9:8a:4d:56:34:6d:
f1:1a:b3:55:02:6f:de:f2:81:14:eb:c4:24:5a:b4:
f7:ff:c1:04:ec:77:9e:c4:a5:78:97:59:77:1b:88:
4f:6e:6f:e5:bf:e6:e4:93:5b:56:12:30:8c:31:d2:
a7:c0:5e:26:67:a5:b8:4f:69:b8:fe:63:32:c3:90:
6a:94:74:6a:cc:e9:a0:77:3e:83:31:97:aa:97:bf:
a8:5a:4f:bd:a5:6c:ef:95:d6:cf:0a:8e:35:e6:cd:
e1:ef:54:a6:42:8c:16:37:e1:01:29:7e:cf:6f:00:
1f:16:81:7f:2a:6c:57:04:8b:03:5b:9b:59:0e:61:
3c:cb:12:35:d4:55:ac:60:be:6e:2f:bd:ea:e4:65:
50:f5:e5:88:33:9c:26:4f:06:f6:e3:b4:87:8a:d3:
0a:02:ef:22:14:0e:c1:88:de:f6:61:90:e8:e8:4d:
aa:a5:43:2c:bf:14:8f:da:7b:5b:cc:36:0a:a9:8d:
6a:0d:38:fc:de:3d:11:8d:e5:42:39:10:da:32:a4:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DF:1B:0E:09:06:04:C7:D8:7A:55:B9:82:BD:C3:3A:57:83:90:64
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/Dd8bDgkGBMfYelW5gr3DOleDkGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.226.0/24
109.106.229.0-109.106.230.255
109.106.233.0-109.106.237.255
109.245.55.0-109.245.57.255
109.245.61.0-109.245.63.255
109.245.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d3:86:80:5f:98:f1:e6:51:34:9c:6f:3b:e3:68:95:81:a6:
0e:a0:f7:ed:55:91:95:46:0a:23:2d:8c:81:96:7e:82:f6:5f:
9b:ba:5e:10:bb:02:94:8e:82:a3:9f:53:11:85:de:c0:4d:d3:
a3:b6:c5:64:fa:14:e2:6b:fd:5e:d3:48:4c:28:85:33:af:de:
99:9f:83:6c:1b:af:9e:32:70:86:5a:2f:6d:ae:9b:73:93:8c:
b8:03:30:f8:29:a0:66:5d:1b:a9:a7:00:89:c4:bc:b2:0e:32:
d9:2c:0a:02:fd:e8:13:c9:50:9c:0a:20:86:d4:9b:7e:7b:81:
2e:ba:54:f0:91:99:d3:b2:d2:0f:e7:63:ec:50:73:cf:24:e4:
c3:6c:da:6d:85:bb:f7:71:86:0a:b1:7f:9c:7e:5c:c3:8d:34:
81:ee:68:af:91:b9:3c:dc:b4:5a:20:0e:df:c0:e9:d1:59:ea:
8c:a7:9a:a3:83:e2:ff:44:f3:f4:fc:94:54:85:39:b1:e8:aa:
de:61:19:9c:94:85:e0:92:82:ef:37:2d:97:26:21:c1:5b:56:
4a:a0:e6:72:f2:09:53:f7:fc:9d:c2:47:3d:16:ac:30:1b:cb:
0c:a2:31:34:9f:11:96:c7:76:b3:c9:a1:ef:1f:ec:34:b0:1b:
de:db:a4:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:34 2024 by rpki-client on console-ams.rpki-client.org