Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/DR-HuXEICOc7JGgtKLOnnWgFkyI.roa
File: DR-HuXEICOc7JGgtKLOnnWgFkyI.roa (raw, json)
Hash identifier: z62iSeKbYQECpTNixoU8sU83ED/EDF4AIfgDNk0fryc=
Subject key identifier: 0D:1F:87:B9:71:08:08:E7:3B:24:68:2D:28:B3:A7:9D:68:05:93:22
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB3AEDB7654610DFE28D455C55081
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/DR-HuXEICOc7JGgtKLOnnWgFkyI.roa
Signing time: Mon 01 Jan 2024 16:30:24 +0000
ROA not before: Mon 01 Jan 2024 16:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199611
IP address blocks: 194.140.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b3:ae:db:76:54:61:0d:fe:28:d4:55:c5:50:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d1f87b9710808e73b24682d28b3a79d68059322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:ef:a5:7f:c8:64:af:c8:91:10:5e:ab:8d:
d1:22:53:c2:e1:d9:82:29:27:8e:3e:04:e1:d0:9c:
03:ab:19:df:c1:8d:91:59:b9:39:f0:cd:bb:be:c0:
7c:49:67:4f:1b:f7:a5:1b:dc:4f:50:59:c6:a6:aa:
75:a2:62:19:4c:e1:49:29:98:5d:f5:7c:dc:d8:21:
f2:c0:f7:87:b5:a8:de:1e:1e:a6:fc:d3:c5:21:e1:
a8:d5:d0:6b:f6:52:ef:ce:27:a9:f5:7b:c0:3b:66:
54:3e:8e:ba:fe:97:7c:2f:2b:b8:09:3b:6e:58:08:
62:08:46:c9:98:ce:19:c2:bc:2e:8e:75:f3:16:af:
46:d8:7a:09:6a:38:ca:bf:96:fb:5c:dd:4f:c2:65:
c2:2b:42:75:bb:a0:8c:e3:41:11:8c:b3:dd:b7:77:
b3:e7:2e:c2:3d:11:29:2d:c1:87:10:d0:bb:66:29:
ee:7d:5e:1a:4e:7c:5a:dd:95:ae:6f:88:71:db:06:
cf:b2:5c:c5:6d:a1:ff:cb:6f:f6:b6:96:8a:f1:4f:
14:12:9d:27:64:dd:8e:15:b4:b5:83:1f:4b:93:20:
94:74:8f:3c:11:2c:aa:a9:8e:1c:ec:59:97:e1:70:
e1:83:b7:3e:19:6c:ab:da:ed:1a:f1:1e:c4:8c:65:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:87:B9:71:08:08:E7:3B:24:68:2D:28:B3:A7:9D:68:05:93:22
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/DR-HuXEICOc7JGgtKLOnnWgFkyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.135.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1d:b5:a7:14:10:5d:54:80:88:3c:e0:01:f5:ec:65:49:15:
40:20:a6:0d:da:71:cd:75:2b:67:b3:05:2c:1b:b1:d7:39:af:
24:51:e5:01:55:0b:07:c3:77:d1:06:65:56:7b:80:e0:82:d6:
e6:2e:19:00:e3:55:2b:9c:46:9a:e1:b9:c6:76:a1:21:5e:f2:
bb:61:e9:8d:62:00:5c:d8:9f:fa:17:1a:ff:50:84:60:3e:ae:
81:bc:ec:3b:59:6e:fc:87:08:29:f5:dd:2a:ed:9e:24:a0:2e:
ce:aa:ab:89:39:02:2a:7a:0f:2a:d8:40:15:97:51:ea:1a:14:
c0:98:74:19:ac:96:bc:d2:84:6f:81:b4:af:77:b8:cd:ab:b5:
5f:c5:e2:88:09:fe:2a:2f:97:3f:75:b4:6e:ec:e3:35:5e:ca:
13:13:90:01:f6:b2:01:f8:91:b3:98:1b:34:99:d9:ca:59:75:
9f:05:a4:7a:a1:d5:f5:67:c1:eb:ec:12:5e:30:23:07:26:16:
51:95:17:c8:ce:4a:56:2e:90:f1:38:fe:22:8c:c1:39:e4:5a:
e8:a3:5b:42:2d:3b:14:3d:ae:90:26:fd:5b:cb:16:fb:63:f3:
57:3d:b9:8f:16:17:70:d7:be:be:6c:6c:a5:3e:5f:01:72:1d:
2f:7a:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:21:23 2024 by rpki-client on console-ams.rpki-client.org