Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/gp5s9rvRBsNzZqPOW_qWv19iF7c.roa
File: gp5s9rvRBsNzZqPOW_qWv19iF7c.roa (raw, json)
Hash identifier: i9qtaov9zyJWJdtT0W/jqTHnaQ9Hq2NUyUndFJfUARA=
Subject key identifier: 82:9E:6C:F6:BB:D1:06:C3:73:66:A3:CE:5B:FA:96:BF:5F:62:17:B7
Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial: 018CC8DE6E0921930AB6BD40769A0E6F46A0
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/gp5s9rvRBsNzZqPOW_qWv19iF7c.roa
Signing time: Tue 02 Jan 2024 06:31:09 +0000
ROA not before: Tue 02 Jan 2024 06:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30742
IP address blocks: 80.245.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6e:09:21:93:0a:b6:bd:40:76:9a:0e:6f:46:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Validity
Not Before: Jan 2 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829e6cf6bbd106c37366a3ce5bfa96bf5f6217b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:e8:48:fc:2f:20:2e:7e:0b:89:12:78:d6:
b9:dd:d6:64:13:04:a2:8d:b7:a3:a5:e0:4b:ba:93:
4c:1a:f1:db:c9:98:86:49:d0:9e:67:4c:8c:54:04:
21:ec:3d:15:7b:1f:b4:6e:2b:9d:45:9a:59:f9:b4:
81:11:70:89:8e:10:96:b7:4f:15:a6:08:a2:9c:48:
2c:b2:c5:a4:22:20:e0:c8:b6:46:23:ad:0f:88:91:
66:15:ce:8f:83:8e:d3:62:48:5a:b1:6c:8a:b5:f7:
18:6f:f9:6b:28:f1:16:5c:a7:f5:c3:43:86:d4:0f:
e4:cf:67:db:0d:74:5a:78:88:29:1a:89:c8:a9:47:
e0:16:0d:88:8c:44:cb:bb:5a:ce:c5:c6:f2:bc:7c:
33:88:76:48:a5:be:b8:17:4c:32:e6:fa:92:d4:01:
d3:8e:67:21:5e:2f:ba:e3:90:50:9c:af:04:5a:86:
bf:b2:3b:d1:81:52:c9:54:4f:37:4c:74:6b:41:65:
bc:df:11:bb:ff:1a:26:3d:95:e3:73:08:88:70:a7:
fa:e6:85:9d:91:c6:57:eb:59:3c:b8:c5:77:af:8f:
06:ea:50:3b:97:a0:97:19:c9:a6:9f:07:68:84:b7:
7a:b5:56:59:c9:e1:de:67:bc:ac:11:8f:41:e9:4f:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:6C:F6:BB:D1:06:C3:73:66:A3:CE:5B:FA:96:BF:5F:62:17:B7
X509v3 Authority Key Identifier:
keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/gp5s9rvRBsNzZqPOW_qWv19iF7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:45:a6:0d:9e:a9:7f:d9:38:2e:c7:d2:7f:ae:26:2c:5c:aa:
e6:9a:6c:01:9e:d2:77:89:09:35:2e:29:74:0d:e1:f3:e3:f9:
14:22:ca:6a:b1:f1:37:79:52:9e:e4:a0:dd:da:bd:b1:98:b7:
9d:f9:47:4c:33:2a:58:66:0d:2f:8e:61:0b:a9:c4:a9:c8:e6:
87:04:49:5d:68:86:36:a9:10:58:3e:d7:b4:81:d5:93:bd:c6:
2d:f5:e1:b8:3d:9c:5d:a5:a5:68:27:49:5d:e1:5b:c4:d1:c2:
25:ba:3f:af:34:2a:a3:98:2b:a5:2c:1a:7b:82:15:da:5c:42:
27:50:cd:4e:d6:4d:ac:72:91:38:0b:f9:ef:8e:4e:32:14:bb:
1f:74:19:e2:a4:dd:9f:d0:e9:d8:4b:d8:ef:81:1d:60:04:d3:
44:b0:1d:35:82:e2:51:e2:35:8a:83:6b:0f:e2:65:76:c1:92:
ab:98:dd:18:85:0e:d8:fb:30:55:6b:90:48:2a:10:a3:2d:77:
23:dc:a2:00:c5:56:17:dc:6a:d4:e5:79:fe:66:ba:19:a2:c1:
30:ac:1d:5f:34:49:f3:ec:94:14:37:97:53:75:05:f4:69:f8:
b2:15:87:f7:35:fe:b3:5f:76:b4:4b:7c:6e:3b:33:4b:36:9d:
25:a7:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:37:24 2024 by rpki-client on console-fra.rpki-client.org