Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/2fGkZt3FKN6UVte92B72bTLxyLo.roa
File: 2fGkZt3FKN6UVte92B72bTLxyLo.roa (raw, json)
Hash identifier: +Z7+mMDc04LTJ9DeIPGjiUNwMS0Z1jjEZOt8ZGT3CDc=
Subject key identifier: D9:F1:A4:66:DD:C5:28:DE:94:56:D7:BD:D8:1E:F6:6D:32:F1:C8:BA
Certificate issuer: /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial: 018CC9BC4822CFE8CF876349AA22FCFA7DDD
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/2fGkZt3FKN6UVte92B72bTLxyLo.roa
Signing time: Tue 02 Jan 2024 10:33:28 +0000
ROA not before: Tue 02 Jan 2024 10:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39392
IP address blocks: 185.80.30.0/24 maxlen: 24
2a10:3900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:48:22:cf:e8:cf:87:63:49:aa:22:fc:fa:7d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9f1a466ddc528de9456d7bdd81ef66d32f1c8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:50:86:97:2f:96:7d:e8:78:ad:0b:c2:5d:
59:25:61:29:1a:2e:b4:dc:6f:53:fc:66:c7:68:2f:
52:5c:f2:e6:bc:5f:a4:8c:d6:ad:48:48:76:1a:15:
04:54:06:5b:cc:19:de:53:e3:e3:2c:48:fb:62:c0:
68:15:e3:5b:17:ae:4f:ac:7b:78:6c:87:76:b6:a6:
f4:e2:49:1f:e8:16:41:94:a9:b1:f2:d2:2e:8d:b7:
42:89:60:e8:8b:05:e2:98:ed:26:6d:79:92:d2:e5:
4a:16:54:fc:fa:96:b9:65:b8:f8:20:51:23:88:ec:
83:f3:71:c1:b1:7d:02:07:24:7f:32:de:58:da:68:
6d:3f:6e:ed:cc:83:f1:50:23:5f:3a:e4:9c:a6:67:
08:3b:d0:5d:9d:8d:d0:4b:d9:4b:78:f8:1b:28:e8:
90:34:92:02:c8:55:94:2f:e9:35:7a:b4:69:a1:f8:
6d:59:bb:20:cd:4d:81:86:11:8c:02:95:d7:f9:67:
03:71:e5:8b:e2:39:57:05:25:fa:24:53:06:76:8f:
f2:65:4c:eb:97:ca:c1:50:07:8e:3b:cc:4e:6a:70:
3c:cf:bd:87:8b:7e:1e:cb:68:b2:48:c2:5d:42:9a:
be:33:5d:65:1b:8a:1f:26:0a:05:b7:2f:43:fc:99:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:A4:66:DD:C5:28:DE:94:56:D7:BD:D8:1E:F6:6D:32:F1:C8:BA
X509v3 Authority Key Identifier:
keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/2fGkZt3FKN6UVte92B72bTLxyLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.30.0/24
IPv6:
2a10:3900::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d0:45:af:ed:bb:a8:58:5e:ea:cf:32:53:fe:51:7e:85:89:
6e:45:1e:a6:5f:51:50:7f:b5:ca:f5:0c:0c:67:f0:88:b3:b2:
38:fe:b2:5e:0a:63:0e:5d:79:d4:b7:dd:ec:9c:12:fb:34:a1:
d8:19:7f:8e:fb:e4:21:67:3f:c6:cc:24:d2:b9:7a:f7:0a:fe:
e0:6a:09:a2:a2:59:bd:a5:c7:62:83:34:1f:4f:0f:d2:a4:99:
9c:6a:a2:73:7f:1a:81:be:a8:b7:d6:23:ca:fd:63:33:2a:b2:
92:b3:20:df:60:32:3a:41:e0:96:07:40:b6:62:33:2e:d0:35:
90:53:c9:e2:4b:a4:e0:7d:01:fe:c1:5c:51:93:aa:51:89:d2:
7f:d3:2e:ac:0f:5a:d1:19:03:d9:c9:fa:e3:af:5c:ab:a1:8e:
8a:ef:e5:b2:2c:72:6e:43:84:91:c2:84:16:e1:2f:6e:b2:df:
4d:90:ab:e1:68:6f:d7:3e:fd:02:2b:d0:54:41:a0:e2:55:d0:
d8:1b:3d:07:e6:0b:01:89:3b:cb:9c:4d:b3:4c:8c:4e:e3:a1:
a0:37:99:93:76:cf:27:16:9f:32:18:bf:24:a6:da:9a:d2:ca:
f0:9c:4f:ce:b9:a7:fc:1f:71:c9:06:a8:8b:6d:0e:9e:05:c1:
2d:f7:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:21 2024 by rpki-client on console-ams.rpki-client.org