Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/o_e5mDNvNFNSvU9_N1pnKlFq6Kk.roa
File: o_e5mDNvNFNSvU9_N1pnKlFq6Kk.roa (raw, json)
Hash identifier: HjiT9z3uGSWx2CLwseNbAWhnI1Bjva4rLBxn6PYwcKM=
Subject key identifier: A3:F7:B9:98:33:6F:34:53:52:BD:4F:7F:37:5A:67:2A:51:6A:E8:A9
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 018F9F62D203EE2C06C5B80AED3D974F564F
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/o_e5mDNvNFNSvU9_N1pnKlFq6Kk.roa
Signing time: Wed 22 May 2024 08:20:04 +0000
ROA not before: Wed 22 May 2024 08:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30848
IP address blocks: 80.91.58.0/23 maxlen: 24
80.91.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:62:d2:03:ee:2c:06:c5:b8:0a:ed:3d:97:4f:56:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: May 22 08:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3f7b998336f345352bd4f7f375a672a516ae8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:b8:46:a7:31:1e:ba:18:75:d9:6a:39:05:
8f:62:a5:ca:4e:df:8d:8e:4e:ef:be:77:1f:31:a4:
2d:58:77:ca:72:c1:64:7d:f9:38:ac:32:e0:ca:b2:
ee:a6:c4:8f:60:fc:bd:36:25:14:aa:0f:aa:60:ca:
8e:6b:bd:17:f0:0a:f3:55:a9:33:0e:a4:21:1a:ee:
5b:da:64:e7:9d:30:18:79:65:7a:e6:78:2a:ff:ba:
8b:e6:cc:fa:24:6f:83:ea:2d:43:1a:28:ce:dc:8d:
43:5c:21:34:0d:00:af:3b:ff:6d:1b:85:55:a3:1e:
51:be:cb:ce:b1:e8:0f:d6:c0:e7:15:2b:88:6d:77:
de:d7:b1:67:89:6f:7a:ae:dd:78:ab:70:22:1e:9e:
a0:16:96:78:69:ea:1b:e0:61:b3:a1:78:ca:2c:91:
d8:28:62:af:8f:86:a9:07:64:fe:ef:01:63:b1:40:
a9:da:16:4c:f4:06:90:24:74:ac:67:51:b9:99:03:
e7:00:20:6d:eb:92:46:58:01:27:dd:98:ef:dd:46:
3c:3e:d1:32:a1:ff:66:79:87:e0:af:41:b0:a1:fc:
5f:59:47:ff:0f:30:2b:59:96:3b:0c:f9:ab:f8:a6:
9a:ed:3f:0c:69:60:f8:71:da:63:e3:c3:8c:9d:bb:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F7:B9:98:33:6F:34:53:52:BD:4F:7F:37:5A:67:2A:51:6A:E8:A9
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/o_e5mDNvNFNSvU9_N1pnKlFq6Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.58.0/23
80.91.62.0/23
Signature Algorithm: sha256WithRSAEncryption
38:f8:83:05:bb:37:60:f9:29:76:40:eb:10:b1:74:cb:91:33:
22:69:54:81:91:53:f2:65:b6:37:60:8d:ea:cf:d9:10:4a:e2:
7f:18:f6:4a:33:bd:90:94:fb:a9:58:8c:9b:55:f4:9e:38:db:
68:56:d5:15:e3:df:a0:df:31:87:80:d7:1b:fe:95:84:ac:71:
c7:fe:7d:e3:47:49:1b:ec:1b:f8:67:a6:f0:67:c3:82:16:4f:
59:12:e4:fd:a0:74:36:89:bc:21:02:31:20:8d:9c:6f:3b:07:
19:c1:76:7b:cd:8f:95:0e:71:13:2c:1a:10:5b:8a:62:c3:c5:
c3:8f:60:eb:44:d8:23:49:e7:bf:d4:89:91:9f:c4:d3:97:df:
fe:07:0b:26:d1:ad:da:21:59:a5:2d:32:f8:7c:f4:a3:d6:07:
e4:88:7b:64:f3:bb:56:cc:b8:a3:ed:e1:3c:29:f2:61:d0:29:
3e:8a:ce:90:8d:82:26:c2:55:9b:33:9a:34:42:7f:a1:d5:fb:
6a:ce:38:ba:ea:ff:09:e2:f2:fe:38:5d:93:a3:13:e7:39:91:
3b:e2:d3:62:7a:5c:fd:ea:77:cf:5c:d7:3e:c8:7b:a4:2a:59:
2e:eb:9e:2e:19:5d:8e:a9:f7:65:aa:a7:28:8c:3a:cd:67:d4:
12:e7:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 09:43:56 2024 by rpki-client on console-fra.rpki-client.org