Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/Sol_9Q7HEfPn8O9kUeL5Xysha9U.roa
File: Sol_9Q7HEfPn8O9kUeL5Xysha9U.roa (raw, json)
Hash identifier: AhucB7RSso5PIxImEO4SYuAtimazL05rFG6sPzJvGn8=
Subject key identifier: 4A:89:7F:F5:0E:C7:11:F3:E7:F0:EF:64:51:E2:F9:5F:2B:21:6B:D5
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 018CC5DC103374B0338A8B8927D438CE6DCD
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/Sol_9Q7HEfPn8O9kUeL5Xysha9U.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43096
IP address blocks: 80.83.90.0/24 maxlen: 24
185.61.236.0/24 maxlen: 24
185.61.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:10:33:74:b0:33:8a:8b:89:27:d4:38:ce:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a897ff50ec711f3e7f0ef6451e2f95f2b216bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:92:36:50:f2:b9:90:18:1b:29:47:6c:4e:
1e:f8:c5:21:95:67:8a:e6:55:a2:89:1d:ef:00:26:
0d:62:9e:ae:ef:b4:76:ae:3d:a5:05:25:d7:59:85:
75:46:df:12:54:f2:56:77:c0:47:93:1a:0d:e7:c1:
38:0b:a8:2c:dd:52:1f:7d:c3:cc:7b:4d:e3:ca:02:
08:b1:f9:b0:f4:01:60:05:ea:d5:62:f0:a1:cf:52:
ed:0e:76:b9:a2:10:b2:49:4b:b5:cb:96:b4:7e:ce:
69:e2:f3:a3:24:85:dd:41:cf:9e:5a:9a:68:83:c6:
36:61:2f:d5:0a:fd:07:39:3d:e5:27:9e:da:ca:a3:
bb:56:3d:17:1d:2d:bd:80:a3:a8:f4:a1:e6:73:5d:
ce:74:fe:8b:2a:35:a1:7b:ce:1c:01:77:84:b6:74:
e1:0f:89:d0:0a:a2:c0:6b:ca:81:f1:d7:08:13:fd:
3d:23:a5:a8:f2:da:e7:ea:7e:35:fa:46:4c:50:17:
9f:2f:8e:21:c4:42:10:90:7c:bd:3c:a9:45:1a:c6:
17:f8:9a:2f:03:b4:ea:ba:17:fd:5c:4b:73:ee:b2:
a5:0e:53:92:37:53:57:b6:f4:70:16:80:4b:68:32:
b5:c3:21:fd:00:92:be:5a:18:7f:7c:4c:3e:f9:6a:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:7F:F5:0E:C7:11:F3:E7:F0:EF:64:51:E2:F9:5F:2B:21:6B:D5
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/Sol_9Q7HEfPn8O9kUeL5Xysha9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.90.0/24
185.61.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:a8:03:ef:dc:8f:04:6c:02:d3:99:02:13:2c:ff:33:df:4c:
a1:b2:e6:10:2a:8f:3f:69:16:81:10:19:86:61:22:eb:3e:1c:
da:71:89:a7:fd:15:3d:88:97:36:ae:50:e6:da:63:91:f2:20:
b3:c1:4f:de:6a:4c:68:c7:80:04:7f:c1:d1:da:4a:62:a5:25:
77:54:55:2c:9e:e4:8b:9e:9f:3b:16:d1:c9:50:70:13:cc:d8:
08:9d:55:9b:40:32:e8:ff:6b:00:24:47:cc:24:9e:4c:09:ab:
48:10:53:f2:b0:2e:12:73:bb:81:fa:84:8f:99:a5:38:f3:32:
09:60:5e:8d:be:cb:f6:8a:d2:3e:fd:8e:ed:90:5a:79:51:3c:
9f:02:76:06:ec:d8:aa:bb:13:4f:4b:64:f9:56:ba:c0:08:ab:
8e:31:e5:7f:64:59:50:9a:3c:ca:47:28:d5:e6:9f:55:be:5d:
6d:00:74:fc:b8:f5:e6:c5:b0:3b:a3:50:8f:99:c8:7b:7e:de:
32:ac:04:72:a5:f8:23:be:78:6c:29:54:82:86:ca:76:2a:c6:
e9:e0:6d:56:0a:b3:6a:02:ec:60:60:74:7f:8d:cf:28:2e:0a:
61:22:a1:09:a7:51:63:30:29:2a:c0:90:d5:f4:65:61:d7:ee:
2c:a0:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:50:05 2024 by rpki-client on console-ams.rpki-client.org