Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/WrzpUoFIFug1-KmFj4vQtntCWvM.roa
File: WrzpUoFIFug1-KmFj4vQtntCWvM.roa (raw, json)
Hash identifier: DA8Jiflg0gzddhInXQXT8IjqwU6HZZJyTe5oWHxyLNk=
Subject key identifier: 5A:BC:E9:52:81:48:16:E8:35:F8:A9:85:8F:8B:D0:B6:7B:42:5A:F3
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01916F1F892CFCBA35313A75DEC2B4D2141C
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/WrzpUoFIFug1-KmFj4vQtntCWvM.roa
Signing time: Tue 20 Aug 2024 09:30:23 +0000
ROA not before: Tue 20 Aug 2024 09:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.194.0/24 maxlen: 24
80.93.195.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:1f:89:2c:fc:ba:35:31:3a:75:de:c2:b4:d2:14:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 20 09:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5abce952814816e835f8a9858f8bd0b67b425af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:6b:5c:7f:0d:e4:9f:3e:ba:0b:69:aa:6b:
0b:3c:4c:3b:ab:24:e5:f5:b3:a7:8c:4a:ba:d0:fa:
bc:f5:15:bc:e4:22:84:6b:5f:86:c0:2a:8c:9b:37:
0e:83:5c:38:a3:c7:7a:00:1c:f6:9f:ba:78:76:64:
95:1d:29:00:1a:56:8f:b8:83:68:5f:2c:fd:6d:17:
66:63:dd:3f:04:ef:7e:56:4c:c4:f1:63:eb:ed:1b:
d5:38:c6:1c:55:6c:02:34:de:b7:d4:05:a2:13:5f:
b3:b2:a1:20:fa:42:73:df:67:6a:ee:6f:dd:76:aa:
ed:d8:e4:ea:15:50:74:f5:6b:2a:f9:b8:5f:4b:84:
10:94:15:80:62:73:6e:14:f2:3c:70:d6:e9:28:bc:
43:1e:06:ea:65:33:64:0b:1b:fe:84:34:d7:52:e5:
57:33:33:7a:61:f9:f2:20:f5:a5:e9:90:60:86:0a:
a1:c3:d7:d3:63:22:10:21:8c:fe:d8:a4:f0:e8:d4:
fa:ad:81:77:58:f4:b4:bb:8c:da:3a:37:c0:74:4c:
dc:fd:4d:25:06:70:b1:1e:4e:c7:50:e3:67:17:aa:
e7:13:af:4e:c8:be:08:2f:9d:d1:bc:28:ea:2b:bb:
6d:c5:c4:b4:59:89:82:6a:30:02:f2:99:b9:f9:e3:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:E9:52:81:48:16:E8:35:F8:A9:85:8F:8B:D0:B6:7B:42:5A:F3
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/WrzpUoFIFug1-KmFj4vQtntCWvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.194.0-80.93.196.255
80.93.201.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e5:90:b6:cc:78:a2:5a:ce:7e:41:f8:b0:20:a9:cd:73:e3:
ca:82:48:9c:54:46:e8:f7:eb:b3:77:a9:8d:36:48:8f:1d:ec:
54:35:43:c1:bc:a6:d8:33:ea:f5:e4:5b:5d:16:dc:28:d1:a7:
19:94:85:2c:0b:e0:c4:1e:b1:cd:b8:a1:23:16:e0:30:3b:60:
4c:93:20:db:80:10:a2:c3:14:f7:05:7f:4c:71:6f:a6:86:a8:
e8:ab:b3:5a:3d:f8:6d:9c:be:fa:d0:e2:8f:e7:ff:97:29:97:
13:97:9c:62:89:e8:58:c9:75:88:47:4c:2d:97:2a:11:69:0d:
de:20:0d:55:63:c0:70:aa:3d:14:c7:b5:ca:f4:fe:7a:e4:fe:
9a:43:d3:65:fb:b9:78:6a:b0:91:c3:78:03:72:a0:9f:ba:7f:
29:6f:48:ff:d1:80:14:6b:92:dc:7a:1e:9c:5a:6d:1c:92:1d:
77:f5:7d:c4:e8:c9:c2:8c:cf:c0:9b:8a:a4:8a:b0:45:04:1a:
8d:79:5a:7b:99:af:2d:c9:c0:ea:a1:06:63:ab:d1:66:8d:85:
55:21:df:29:ad:a2:93:55:88:55:5d:9e:c8:6e:17:12:3f:45:
ba:e1:1b:2a:2e:19:db:3e:02:1a:d8:5d:77:af:c3:78:25:bb:
46:ac:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:31:22 2024 by rpki-client on console-fra.rpki-client.org