Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/oSYYTFE_ciuAXRx05_kpE1LbINA.roa
File: oSYYTFE_ciuAXRx05_kpE1LbINA.roa (raw, json)
Hash identifier: MQx4MLs/kGB9CF6WYARhftVFgERCXyuxQEkZQuYbc24=
Subject key identifier: A1:26:18:4C:51:3F:72:2B:80:5D:1C:74:E7:F9:29:13:52:DB:20:D0
Certificate issuer: /CN=35a1b48587c430cf3d8bfd7598c595bda1c66874
Certificate serial: 018CC94CF96FAD7E79A07877E3FF5B6DE3BA
Authority key identifier: 35:A1:B4:85:87:C4:30:CF:3D:8B:FD:75:98:C5:95:BD:A1:C6:68:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/oSYYTFE_ciuAXRx05_kpE1LbINA.roa
Signing time: Tue 02 Jan 2024 08:31:54 +0000
ROA not before: Tue 02 Jan 2024 08:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210911
IP address blocks: 80.73.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:f9:6f:ad:7e:79:a0:78:77:e3:ff:5b:6d:e3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a1b48587c430cf3d8bfd7598c595bda1c66874
Validity
Not Before: Jan 2 08:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a126184c513f722b805d1c74e7f9291352db20d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:7b:7c:d3:68:7b:83:5f:ed:c2:e7:6c:17:
4d:2d:43:e7:24:6b:9c:1a:2e:0f:fd:46:14:61:9a:
3f:97:76:8e:23:85:df:27:fe:35:b6:2c:4f:05:f2:
8c:ee:a4:c5:72:e0:fa:be:2c:cf:a0:a5:8d:56:2e:
35:b9:8d:6c:95:98:30:09:8b:b4:27:f3:28:ff:8f:
de:36:fc:1e:c3:4f:7c:da:c0:65:30:92:01:d2:9c:
5e:63:1e:40:11:d5:a6:db:04:db:e2:c5:d5:ab:04:
8f:02:c3:84:92:84:a7:47:9e:32:be:a2:10:84:26:
0e:d1:22:f4:bd:1e:f8:9e:a0:d2:6a:60:af:de:95:
37:a4:57:2e:61:20:8b:c7:da:64:b4:15:93:98:61:
b0:b3:07:57:33:a5:ac:60:49:fe:ad:0a:5f:f9:b4:
46:ef:0e:4d:1b:11:9b:c6:c8:f4:d8:94:fd:ac:65:
af:fc:88:34:25:a2:5a:7a:c1:45:53:71:13:fe:38:
dc:5c:08:af:6a:61:68:68:39:08:4a:74:27:bf:95:
2e:3d:5b:76:3c:e4:52:4b:d3:bf:52:11:f9:5d:c3:
2a:24:9f:ec:9e:ad:a1:1b:24:cf:88:85:53:a6:67:
17:f2:cb:32:61:1c:9a:af:4c:40:76:a2:22:dd:94:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:26:18:4C:51:3F:72:2B:80:5D:1C:74:E7:F9:29:13:52:DB:20:D0
X509v3 Authority Key Identifier:
keyid:35:A1:B4:85:87:C4:30:CF:3D:8B:FD:75:98:C5:95:BD:A1:C6:68:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/oSYYTFE_ciuAXRx05_kpE1LbINA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.245.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c1:84:73:bb:48:ab:81:e3:6d:0c:a6:77:05:7a:9b:0c:a4:
44:21:c5:b4:16:50:17:1a:df:2b:8c:32:e6:6f:02:a2:fa:04:
08:77:ed:ab:9b:2f:69:be:50:9f:33:60:00:76:b5:8c:3e:f6:
34:b5:b5:4f:c3:7a:cb:7f:e2:e9:49:66:7a:9e:da:66:94:2a:
d9:d7:74:59:70:dc:9d:31:72:45:1c:11:a3:9c:33:1f:b4:1c:
76:8e:4f:18:49:23:d1:e5:3c:27:6b:84:1e:4f:fe:d0:83:b8:
b4:1a:e9:41:98:eb:fa:c5:84:f1:fb:44:58:fe:98:49:e2:88:
29:e8:28:33:14:56:ee:41:9d:1a:ac:05:b1:2c:ac:73:36:93:
02:c8:67:cc:f7:7a:4f:b6:79:36:0e:4f:25:a8:8f:61:35:d2:
c3:8f:13:e4:a7:19:3e:28:f9:cd:35:14:d3:41:40:da:fb:75:
b2:b2:33:71:87:2b:b4:b7:6e:69:03:94:a2:f2:99:1a:9a:8e:
63:d4:05:28:13:bf:62:54:ef:a9:e9:48:78:26:23:8a:96:c1:
c7:8c:67:22:54:83:8b:da:8f:32:46:f1:77:34:fa:e1:bc:cd:
48:c1:d5:ce:4a:9f:15:27:65:a6:f3:ea:cd:04:f4:fe:11:5e:
e0:1b:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:19:35 2024 by rpki-client on console-ams.rpki-client.org