Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DmcsQO_MqsBD5IyQI5TM85DzcHQ.roa
File: DmcsQO_MqsBD5IyQI5TM85DzcHQ.roa (raw, json)
Hash identifier: +G94vzPyikwtGL+BY2B/aToKLwHnEq88+CrkX9OHWTE=
Subject key identifier: 0E:67:2C:40:EF:CC:AA:C0:43:E4:8C:90:23:94:CC:F3:90:F3:70:74
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018F520D91C542216F64622FDA520484101B
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DmcsQO_MqsBD5IyQI5TM85DzcHQ.roa
Signing time: Tue 07 May 2024 07:56:11 +0000
ROA not before: Tue 07 May 2024 07:56:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8342
IP address blocks: 45.151.60.0/24 maxlen: 24
81.17.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:0d:91:c5:42:21:6f:64:62:2f:da:52:04:84:10:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: May 7 07:56:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e672c40efccaac043e48c902394ccf390f37074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:28:e1:67:e0:5c:d2:dd:c9:e5:ed:83:64:
9a:07:38:fa:57:a8:50:36:a7:88:09:c9:1b:38:9a:
44:39:d2:b9:47:44:94:bc:ac:79:df:63:23:6b:3a:
da:c8:52:a4:09:54:c2:d0:62:98:78:1a:63:67:17:
d7:6a:9e:cf:b5:86:b9:fe:1d:dc:e0:ad:cd:2f:a4:
87:62:64:89:79:8b:76:43:b5:f6:28:9b:2a:1e:a7:
b8:6b:5a:7f:75:dc:c9:0a:46:e6:0f:fe:c8:81:8f:
b1:88:40:cb:3d:28:df:da:62:7f:ab:c8:0f:2f:7b:
8c:a1:0f:00:a2:5e:c3:fd:ab:60:72:38:11:94:e4:
34:76:44:80:9f:c2:b1:25:2b:ac:61:35:a7:00:9c:
c8:6e:09:7b:ef:0f:0f:d4:d1:66:a3:3a:b9:ac:45:
b8:41:81:1b:9d:d7:4b:c9:12:91:3d:b3:fc:78:c0:
c8:49:c5:dc:1b:9b:39:74:89:71:91:cb:89:89:73:
82:66:03:1f:ee:da:ba:b7:68:66:75:da:48:1a:fe:
88:ba:43:cc:d8:2b:14:0e:b7:fd:a6:f5:fa:81:75:
1d:c7:bc:09:d6:f8:db:1a:b2:f3:ee:d0:09:1b:2d:
ae:3a:13:a7:46:43:36:e0:0b:2b:18:18:be:9f:d7:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:2C:40:EF:CC:AA:C0:43:E4:8C:90:23:94:CC:F3:90:F3:70:74
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DmcsQO_MqsBD5IyQI5TM85DzcHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.60.0/24
81.17.158.0/24
Signature Algorithm: sha256WithRSAEncryption
80:23:93:d9:4c:e3:1a:83:16:59:9e:60:2e:47:30:3b:10:e1:
ff:8f:ea:9d:63:fd:6e:0b:bf:21:39:59:7d:7d:ac:da:a3:0e:
fe:bb:55:85:6c:d2:dc:fe:13:b1:90:cb:9b:80:28:df:4f:e8:
7f:4c:ce:a2:dc:d9:43:af:eb:23:1b:c6:b4:70:9e:ef:c2:0d:
74:b6:88:fa:a8:e8:50:72:f4:3c:f8:59:ab:b4:15:ef:11:32:
4b:4e:dc:5e:d9:21:c8:f3:e8:fc:89:57:00:62:b5:7a:dd:b0:
c8:26:01:d0:1a:c4:e4:c1:25:98:2e:84:98:43:11:a6:33:c0:
86:51:3d:1d:4f:81:2f:83:e8:ea:29:93:2f:63:fd:0f:ed:35:
03:74:96:3d:a6:83:f9:2b:d7:80:b0:d6:0a:e7:e3:ed:6b:98:
40:b4:e1:53:bc:c1:9e:04:e8:c7:88:72:53:2f:34:b5:18:cb:
81:30:a7:5a:6e:4e:6c:3a:17:99:1f:08:1c:82:ba:1f:c0:b0:
ca:c6:61:da:44:37:84:4b:c9:ef:6c:e6:45:65:0a:e1:06:8b:
b9:2f:d6:0e:ba:b5:e4:6a:36:d7:ac:42:41:4f:c9:8b:c1:7c:
82:0d:5d:19:19:1c:23:a5:c5:9f:98:13:00:91:3a:13:1b:05:
df:5e:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:28:59 2024 by rpki-client on console-fra.rpki-client.org