Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/l0mIWEMTiuTDjohpAmdw9PozbKU.roa
File: l0mIWEMTiuTDjohpAmdw9PozbKU.roa (raw, json)
Hash identifier: TjQdh7qiVyMjxzlP29Y7MZZR4B1K4MI8yYqNs0Rw9GE=
Subject key identifier: 97:49:88:58:43:13:8A:E4:C3:8E:88:69:02:67:70:F4:FA:33:6C:A5
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 018EC1F748E68E48D0846053119158105C7B
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/l0mIWEMTiuTDjohpAmdw9PozbKU.roa
Signing time: Tue 09 Apr 2024 08:26:32 +0000
ROA not before: Tue 09 Apr 2024 08:26:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63017
IP address blocks: 80.91.56.0/24 maxlen: 24
80.91.57.0/24 maxlen: 24
2a02:6000:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:f7:48:e6:8e:48:d0:84:60:53:11:91:58:10:5c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: Apr 9 08:26:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9749885843138ae4c38e8869026770f4fa336ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f5:29:90:79:d0:0b:7c:85:27:de:28:db:80:
56:21:77:72:94:0b:18:8a:8a:3a:56:1a:f9:2d:6b:
44:ed:e3:95:8d:46:94:70:cc:25:bd:1f:0b:44:eb:
7c:c6:53:b5:a5:ca:6f:f9:53:07:0d:41:c5:a7:62:
71:be:c4:85:3a:55:6d:c6:71:0a:5a:11:95:27:b1:
9e:77:1b:4e:65:57:e9:82:63:6e:39:ab:96:2b:b4:
76:77:94:04:22:c9:16:9c:a9:d8:6b:48:bb:01:b4:
38:86:f3:de:c6:18:c2:86:a1:d8:17:23:34:55:10:
5d:08:b4:8b:a5:1b:77:41:18:c2:d1:95:a3:72:50:
34:02:1f:46:95:74:21:e8:94:f2:28:76:7c:cd:38:
14:44:51:04:c4:a9:72:a3:e4:f4:b2:e0:86:1d:ea:
77:af:66:e2:b1:d6:ff:b8:b4:43:93:37:37:cb:63:
f9:11:91:23:0b:f9:34:89:5e:f0:ea:97:70:20:03:
73:c7:bd:08:c6:a9:74:5c:fa:7a:37:31:59:90:f8:
b9:de:54:f7:c2:31:67:8b:98:95:e0:31:7c:9f:75:
67:92:32:88:cb:ac:ad:60:7b:5c:09:27:99:a7:22:
a7:14:ab:ae:7e:fd:61:8a:c2:3e:45:cb:55:81:8b:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:49:88:58:43:13:8A:E4:C3:8E:88:69:02:67:70:F4:FA:33:6C:A5
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/l0mIWEMTiuTDjohpAmdw9PozbKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.56.0/23
IPv6:
2a02:6000:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
51:cf:77:a5:53:58:a1:5a:7f:d3:4b:18:79:ca:07:ba:d0:3e:
5a:4a:93:7a:2a:dd:12:24:89:7a:ef:f3:d7:cc:4b:37:df:3c:
fc:22:56:45:ac:ff:57:a5:43:67:20:b6:45:11:30:ff:a1:8d:
78:84:1f:3b:b5:53:63:ea:2b:94:cc:40:63:c6:b9:c5:5d:63:
18:d6:fd:40:b8:3c:42:24:ad:b8:82:16:7c:49:dc:59:c8:9f:
7b:fb:fb:81:62:e1:97:f2:34:0f:7c:8e:ce:c7:78:03:6e:64:
53:15:c6:5e:6e:24:33:02:3e:cb:4b:f3:d0:0f:e1:22:5d:0a:
2e:d1:94:e2:bc:c2:fb:40:ec:9f:26:4f:cc:2c:23:35:e0:91:
7e:b7:4a:92:ef:c0:fb:86:ba:c8:be:d5:d8:57:b9:ba:05:0a:
c4:3b:67:c2:8a:6e:d0:5f:9f:ea:17:87:75:b8:27:f2:25:ac:
9b:0f:21:bc:94:11:cc:c5:88:a6:33:8e:0e:e9:4b:ed:b9:c0:
6c:e5:7f:e2:a6:bf:c2:43:3d:02:30:17:d9:15:b0:2d:b0:89:
9c:48:aa:e4:c4:7c:3a:08:74:49:d2:b0:7d:de:4b:45:a9:74:
ca:df:87:4a:59:17:07:f9:88:c8:7d:b8:78:47:23:30:2e:61:
fa:26:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:05 2024 by rpki-client on console-fra.rpki-client.org