Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/DZPEm0rF83VuQbgMpV-NvYc2YWo.roa
File: DZPEm0rF83VuQbgMpV-NvYc2YWo.roa (raw, json)
Hash identifier: NI3Xn4Z9BNLpkGb13nd3DFyAjmatl2YYLntqCe969+M=
Subject key identifier: 0D:93:C4:9B:4A:C5:F3:75:6E:41:B8:0C:A5:5F:8D:BD:87:36:61:6A
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 018CC8DE2B019FA0D643B876E3DFEC10BB61
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/DZPEm0rF83VuQbgMpV-NvYc2YWo.roa
Signing time: Tue 02 Jan 2024 06:30:52 +0000
ROA not before: Tue 02 Jan 2024 06:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135377
IP address blocks: 23.90.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2b:01:9f:a0:d6:43:b8:76:e3:df:ec:10:bb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 2 06:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d93c49b4ac5f3756e41b80ca55f8dbd8736616a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:da:26:04:60:2e:f6:dc:aa:d1:e5:36:94:
8f:b0:79:31:2c:56:2d:90:d2:25:b9:90:7a:69:a4:
ee:76:de:67:2a:10:40:5d:df:83:00:b8:fc:da:4c:
0a:a0:9e:2b:2c:85:f0:38:14:47:1e:a4:ee:7d:26:
fd:00:6b:2d:44:41:68:e3:9b:19:67:eb:56:da:50:
aa:65:70:42:b4:7a:02:dd:e5:2f:d6:d4:17:6a:ee:
c1:d1:e8:98:f5:39:ed:fd:3c:40:a5:6b:87:2c:00:
b8:27:7d:b3:bf:b3:fd:70:5a:0a:16:9f:fe:37:f9:
64:ed:08:f9:ad:ac:a2:87:b5:e0:2d:58:63:c3:ac:
d9:44:0a:e0:e8:5c:fd:20:4c:f7:37:50:93:c1:21:
bc:ee:3c:0c:15:e6:53:38:c2:88:76:00:49:79:8b:
66:3b:c4:08:74:f7:31:f5:4b:e3:0c:7a:4d:40:88:
ab:3b:36:f0:28:d1:24:81:a6:4a:f8:7a:16:fc:ae:
e7:d1:95:41:b6:d5:78:f1:57:8d:46:39:9c:b0:b8:
3a:1c:d1:93:3e:5c:49:93:3d:60:b0:9f:05:af:69:
42:dc:fa:81:93:1d:31:21:4e:b6:df:a5:b7:6b:f7:
28:d1:f6:08:97:de:29:91:eb:40:97:3c:93:b8:f3:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:93:C4:9B:4A:C5:F3:75:6E:41:B8:0C:A5:5F:8D:BD:87:36:61:6A
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/DZPEm0rF83VuQbgMpV-NvYc2YWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.90.156.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5a:5f:7f:cf:bf:3f:ee:d5:84:12:f5:00:4e:78:c3:70:c3:
80:c6:83:bc:cf:82:86:46:87:73:7f:db:ee:c4:6e:ed:3a:02:
25:cf:57:40:d5:98:36:99:86:2f:f0:cd:ed:38:13:61:74:35:
8d:38:ba:7f:d1:03:f5:ca:e0:9f:28:bb:fb:44:d4:63:88:07:
8c:46:22:64:89:ba:aa:0a:48:d2:15:bb:db:11:e9:2a:21:a5:
12:fd:17:32:10:1c:f8:e0:a8:48:d4:43:eb:71:c7:a7:57:0c:
6a:f2:db:0d:fa:bd:63:1c:cd:b6:39:b8:9a:07:94:b4:af:4e:
b2:75:1d:a0:03:e8:07:3b:a9:98:1f:0a:ef:2b:b5:67:58:fa:
44:92:1b:3f:76:34:00:39:de:82:41:0f:c0:84:30:5a:10:3e:
8d:86:32:ee:58:d7:b0:89:7e:f0:b8:41:cf:d2:85:19:66:e7:
b3:17:2d:fa:5a:10:8b:a9:22:9a:18:eb:9d:dc:17:6f:97:ef:
8c:98:1e:5b:4d:32:9e:8a:d5:be:ab:37:31:8c:c5:63:fa:3a:
3f:70:36:b0:de:7c:25:0d:2a:8e:8f:b1:d4:41:2b:70:ff:33:
2a:06:67:42:42:f8:6c:15:81:a2:69:7c:b2:3d:ad:9e:5c:8b:
f6:08:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:20 2024 by rpki-client on console-ams.rpki-client.org