Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_iLsGDYnDrK5ZDNap5TxpV7Z6w0.roa
File: _iLsGDYnDrK5ZDNap5TxpV7Z6w0.roa (raw, json)
Hash identifier: 2LRfHH76Dj9xe1TDcQeKdKI9aObmt+mdp8jdC14fMzM=
Subject key identifier: FE:22:EC:18:36:27:0E:B2:B9:64:33:5A:A7:94:F1:A5:5E:D9:EB:0D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01915010BD420C29CDC42B01F6BC0B4BBDDD
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_iLsGDYnDrK5ZDNap5TxpV7Z6w0.roa
Signing time: Wed 14 Aug 2024 08:45:59 +0000
ROA not before: Wed 14 Aug 2024 08:45:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203305
IP address blocks: 80.96.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:10:bd:42:0c:29:cd:c4:2b:01:f6:bc:0b:4b:bd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 14 08:45:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe22ec1836270eb2b964335aa794f1a55ed9eb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:b7:47:ec:75:27:b1:3e:f4:fd:0c:c4:39:
34:c7:59:ea:59:e1:01:80:ee:bc:e3:49:be:6b:c1:
e9:00:5e:af:64:02:db:78:cd:36:c8:c1:95:47:95:
4f:00:7a:68:87:ed:b7:4f:ed:66:7c:f3:8b:48:d6:
d6:01:db:03:f6:1c:ee:b5:8e:3e:94:af:4e:86:b0:
39:6a:f1:af:64:3c:0d:b0:4a:b1:de:21:60:5d:cd:
8a:7a:ec:42:1e:87:cf:a4:a7:98:93:2a:2d:6b:8d:
b4:b9:16:72:d0:1d:cb:18:e6:5f:a9:63:1b:db:0b:
31:e7:5a:39:9e:22:35:fd:cd:73:b3:55:0e:d0:a7:
22:70:de:3f:f2:43:f5:fa:87:e6:d9:82:bd:c9:58:
dc:4c:d2:b6:4d:e9:b4:ff:14:1c:55:69:c9:e4:b9:
c1:c2:dd:63:8c:ef:9a:5b:e9:73:1f:f8:09:af:70:
ac:33:9b:cf:cf:15:74:19:1f:b2:57:40:4c:63:f3:
8f:66:fa:32:00:3e:7b:60:55:32:76:47:77:18:53:
01:00:13:d4:77:ed:84:a5:67:b7:cc:dd:93:c5:40:
0c:20:56:69:5b:ba:10:f4:bd:62:9a:b4:8a:67:c4:
94:5b:d0:63:fc:1c:3c:e7:26:ca:1a:58:1f:47:d8:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:22:EC:18:36:27:0E:B2:B9:64:33:5A:A7:94:F1:A5:5E:D9:EB:0D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_iLsGDYnDrK5ZDNap5TxpV7Z6w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:94:d1:be:73:0c:e0:19:82:9b:fe:2d:ec:bb:c7:d0:47:d0:
4a:20:b6:af:c2:34:e9:8c:b1:0a:5a:49:f9:0f:a3:78:0d:a7:
22:e7:79:4d:f3:5f:77:0b:1a:01:8c:2d:83:02:33:7b:2d:f4:
fe:5e:95:c9:a5:74:b8:84:c2:31:20:35:8a:ca:f3:0a:60:8c:
96:4c:55:56:10:09:54:e1:ed:ba:1b:03:5b:07:c4:f9:b4:fd:
03:0b:c1:50:fd:af:3f:19:b1:23:2c:74:c9:14:f3:c7:c2:14:
a6:8f:c9:7f:7d:81:a2:3d:2f:9c:35:01:c5:5b:de:d5:27:9e:
e4:7a:03:d1:1c:c0:6e:41:91:33:e2:f5:9d:b3:b2:9b:5b:34:
8b:57:80:d1:d5:a7:ee:bf:c0:65:7d:ab:00:c7:2a:92:6c:34:
3c:e9:17:1b:03:81:74:15:1f:ca:d5:fb:23:37:ee:98:dc:93:
22:d3:9f:8f:3d:ad:69:48:87:78:f2:69:52:79:e0:a3:c4:69:
2e:7d:33:09:23:4a:80:90:86:3e:37:0e:6f:ef:ff:71:6b:c3:
85:b0:26:0f:6e:7d:17:af:82:57:df:88:73:b8:b6:12:23:aa:
f9:92:16:4c:d4:9d:07:3e:0f:80:a0:ad:d2:f0:2e:fa:f7:69:
9b:03:8a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:26 2024 by rpki-client on console-fra.rpki-client.org