Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/o5Uj1-8kPb9sYJkD78AE-ApWA_E.roa
File: o5Uj1-8kPb9sYJkD78AE-ApWA_E.roa (raw, json)
Hash identifier: LqPFTmtQmAkQu2Wf2Yxmz/XojSrU3TGUXlm/Bb5e5iM=
Subject key identifier: A3:95:23:D7:EF:24:3D:BF:6C:60:99:03:EF:C0:04:F8:0A:56:03:F1
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 018CCA2A6AF1C3F42A651EFB5D92B8C57356
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/o5Uj1-8kPb9sYJkD78AE-ApWA_E.roa
Signing time: Tue 02 Jan 2024 12:33:46 +0000
ROA not before: Tue 02 Jan 2024 12:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57277
IP address blocks: 80.92.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 07:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6a:f1:c3:f4:2a:65:1e:fb:5d:92:b8:c5:73:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 2 12:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a39523d7ef243dbf6c609903efc004f80a5603f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:47:9c:27:46:f8:a9:6d:ee:56:5e:dd:ea:
33:36:3e:e8:3d:0e:af:e3:67:63:60:41:c2:55:de:
3c:b3:8f:bb:98:57:97:74:0a:a8:0c:77:92:d1:18:
f4:d7:5c:ec:49:1a:37:50:c8:3b:fb:6b:a7:38:34:
8d:f7:fa:ca:ad:fb:3e:a8:fe:c6:ca:cf:b6:20:a5:
30:61:da:51:20:9c:e6:cb:bb:32:f4:60:44:16:06:
51:4c:9a:e0:8f:f9:25:bd:74:0e:5e:50:3d:21:5d:
1b:3e:7c:15:9c:4f:34:71:df:8f:cf:d7:76:a7:41:
d5:6f:20:0e:ae:d4:90:9b:ba:74:7b:2d:02:00:dd:
f0:21:20:de:d8:3b:aa:86:0f:08:d5:6e:71:20:b9:
69:62:5f:b8:ee:7d:54:5b:f9:1e:e6:6f:9d:b3:cd:
93:52:25:72:b2:49:49:1f:72:77:3e:25:7c:39:bc:
44:d2:1b:ea:99:65:4a:a1:3b:f9:23:f0:a3:81:75:
06:0a:e7:c1:12:c0:b7:38:82:94:7b:0d:d6:4d:35:
e7:65:64:20:1f:2f:7d:bc:da:16:32:d8:b9:a1:9b:
3a:69:ac:27:4f:3c:a9:c4:cf:02:07:85:f8:67:f6:
66:2f:f0:60:53:3e:d7:c1:02:a9:e3:c9:31:0f:a0:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:95:23:D7:EF:24:3D:BF:6C:60:99:03:EF:C0:04:F8:0A:56:03:F1
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/o5Uj1-8kPb9sYJkD78AE-ApWA_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
91:56:b0:79:5a:b2:b9:be:5f:d8:64:36:47:c7:d4:05:fb:4b:
13:f1:6c:1d:6d:95:db:6a:5d:6c:f7:1c:18:ea:60:76:d0:53:
56:d9:65:5d:f8:7c:1f:c2:60:59:64:ca:50:85:a0:2e:df:63:
76:71:f8:ff:3c:7d:bc:59:3b:da:1e:cd:91:ef:c4:10:67:27:
bd:d5:4a:c7:9b:8c:06:6d:ab:55:df:3d:19:2a:c7:b9:36:26:
30:58:81:f5:ca:50:86:83:fb:9e:5c:86:16:48:a2:08:e5:9a:
4e:cc:f7:b3:45:f3:59:ed:a9:7f:9c:46:13:d3:9c:a9:07:92:
c8:98:28:d7:dc:8d:58:5d:ec:fb:aa:1e:83:01:56:85:c5:c6:
e5:57:76:79:4f:15:d9:d7:72:8d:51:59:ad:45:60:7a:aa:ba:
f4:13:d0:ef:e7:86:0b:33:56:20:db:3f:81:3c:45:e1:3a:87:
24:7a:43:3b:2b:c4:e3:91:1e:78:3f:09:d2:d9:8a:6e:9f:f1:
94:3c:5a:56:6f:ff:04:15:f6:f1:3a:40:62:bd:bc:1c:c1:53:
19:ba:6d:eb:24:9f:a6:8d:bc:e5:0e:21:88:f5:68:93:b5:6b:
99:41:44:23:b5:ca:47:f9:75:3a:37:11:55:8d:0d:2b:4b:39:
b3:26:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:37:30 2024 by rpki-client on console-ams.rpki-client.org