Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Dpd_zcSVuNlxgTB24t2HEc0bXqQ.roa
File: Dpd_zcSVuNlxgTB24t2HEc0bXqQ.roa (raw, json)
Hash identifier: YVgb4co5EzUx+s8a6CbrYmJTwEPbehGz+WDBcqAsGpE=
Subject key identifier: 0E:97:7F:CD:C4:95:B8:D9:71:81:30:76:E2:DD:87:11:CD:1B:5E:A4
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB64C1D1885DFD33A46431B9F65644
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Dpd_zcSVuNlxgTB24t2HEc0bXqQ.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56694
IP address blocks: 89.23.96.0/22 maxlen: 22
89.23.100.0/24 maxlen: 24
89.23.102.0/24 maxlen: 24
89.23.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:64:c1:d1:88:5d:fd:33:a4:64:31:b9:f6:56:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e977fcdc495b8d971813076e2dd8711cd1b5ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:fe:18:d1:fd:36:bd:cc:01:de:bd:cb:11:
73:0e:9e:6d:a8:38:c8:77:d2:8b:4c:2d:1b:6c:69:
f7:98:c2:d5:5d:a6:0d:99:ea:f1:46:c6:1e:91:d8:
8a:6f:29:9c:fe:2d:09:fe:0c:7a:9a:2a:85:c0:d7:
37:b9:05:cf:df:85:94:b1:29:eb:09:fa:fd:ae:a3:
8f:d6:37:81:61:c4:2d:34:7f:d9:5e:3d:38:82:fd:
04:f0:13:2f:9a:a5:ab:f2:cb:9a:2a:81:40:c0:c8:
f4:1f:15:b4:b5:eb:9a:c1:35:c7:a7:bc:77:55:36:
5b:5a:22:20:3f:78:6e:58:86:d4:b8:a5:cd:6c:d6:
a6:8a:a2:3f:99:00:1f:0b:4b:0e:ef:03:a8:25:e0:
f1:12:59:6a:7e:64:07:b2:dd:46:c4:cb:2d:e2:8b:
4c:1f:b3:52:d3:ad:22:79:20:89:13:a0:b6:52:c2:
ee:77:51:01:52:9f:a0:71:88:72:3c:ae:a5:2f:bc:
11:85:bd:3a:ad:91:3c:fd:bb:5d:ea:22:1d:d6:6c:
8d:c3:d7:2d:d2:ab:f7:dd:33:ed:ba:b9:35:9d:d5:
84:1e:73:24:be:1e:79:0e:9c:72:ae:50:11:52:1c:
33:e4:b7:2c:d4:44:9c:a3:46:28:7b:bb:02:0d:48:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:7F:CD:C4:95:B8:D9:71:81:30:76:E2:DD:87:11:CD:1B:5E:A4
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Dpd_zcSVuNlxgTB24t2HEc0bXqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.96.0-89.23.102.255
Signature Algorithm: sha256WithRSAEncryption
98:be:95:d2:d0:64:9b:f1:3b:9c:63:14:cf:ff:3f:37:3e:26:
3a:90:e6:31:45:74:f1:44:2f:75:8f:39:7a:3c:fa:ec:01:65:
f6:72:b3:69:40:0e:00:5e:2a:de:d1:94:e1:fa:7a:fb:9b:73:
7c:51:81:ba:a3:d9:71:9c:a8:7d:44:ef:3c:d6:d4:49:46:77:
eb:6d:ef:10:b2:7a:83:ad:47:a2:2b:58:b1:b9:00:b8:6b:69:
ff:b8:99:0f:cb:98:45:f0:1e:60:a1:3a:d8:af:10:01:ee:f5:
67:36:c9:09:d5:28:98:f2:bc:1b:85:71:2e:5d:d2:55:a2:50:
49:e2:e2:be:f1:10:b8:13:0c:fb:0f:53:dc:a6:78:97:0a:4b:
ec:76:23:3a:bb:8c:d5:c7:ea:ad:54:1b:16:81:a5:cd:86:bf:
eb:a0:80:18:f6:a1:b6:43:4d:0c:29:9b:f4:a0:14:7d:50:6a:
6a:2a:8d:d6:17:81:0c:bd:d0:c5:ac:e3:4e:3d:f7:f5:da:fa:
b4:01:23:28:c9:f4:04:b0:eb:76:bd:a8:d0:1f:bb:a7:1b:62:
b8:f9:d6:b5:68:d7:8d:69:d1:66:c5:1f:27:b7:7a:3f:cc:a8:
8e:70:e1:6c:7d:89:ea:b3:eb:d6:b2:70:ed:b5:15:22:ff:ad:
9b:7b:32:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:45:30 2024 by rpki-client on console-ams.rpki-client.org