Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7f_wj6utXgFR2_PLNwzeZe2vXc4.roa
File: 7f_wj6utXgFR2_PLNwzeZe2vXc4.roa (raw, json)
Hash identifier: sHSYriCdZg1kv3jGe0Xswscr+j52tBqIPLYHl9OSbko=
Subject key identifier: ED:FF:F0:8F:AB:AD:5E:01:51:DB:F3:CB:37:0C:DE:65:ED:AF:5D:CE
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 018CCA2A39C04157AAD89835B0E698BB707A
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7f_wj6utXgFR2_PLNwzeZe2vXc4.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60845
IP address blocks: 80.190.115.0/24 maxlen: 24
80.190.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:39:c0:41:57:aa:d8:98:35:b0:e6:98:bb:70:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edfff08fabad5e0151dbf3cb370cde65edaf5dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c8:fc:bf:32:26:93:4a:35:1b:20:fb:bc:bc:
56:02:58:6d:f5:f5:d1:34:8d:53:e8:47:1e:32:93:
81:47:5f:ff:4d:a9:ba:43:8a:6e:6b:85:96:de:ac:
06:8c:9a:15:32:1a:57:59:5c:cb:bb:c5:bd:c2:39:
1f:5e:51:cd:63:89:53:0c:46:9e:68:46:82:c1:87:
96:16:e0:9e:ce:84:79:c6:72:87:48:bd:e4:d6:a0:
95:c7:fe:c7:e8:5a:23:54:2e:8c:7e:c8:0f:88:df:
c3:5a:e5:0b:00:e5:34:07:a1:86:ae:6d:22:d8:c7:
b1:2a:92:19:13:0a:28:5b:60:5d:72:0c:b4:fa:44:
76:45:22:fd:84:61:2f:cb:f2:68:3c:b8:db:04:4c:
aa:57:57:54:ff:e6:31:8c:87:bc:31:fc:e5:37:cf:
5a:b2:8c:9d:8f:82:e1:88:88:83:ca:b9:e8:ce:7d:
d7:78:04:b4:e6:bb:e6:ff:bb:7b:56:1b:79:9c:3d:
19:55:ec:b3:d1:8c:15:9a:20:12:66:61:c7:3f:16:
15:4b:f1:88:a3:be:ed:55:39:14:25:e6:c3:1a:0f:
6e:33:57:1a:88:45:33:b8:15:ca:12:97:1a:e8:c5:
2d:2a:af:34:c9:f2:b7:ab:b4:e9:42:c5:d7:8c:0a:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:F0:8F:AB:AD:5E:01:51:DB:F3:CB:37:0C:DE:65:ED:AF:5D:CE
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7f_wj6utXgFR2_PLNwzeZe2vXc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.190.115.0/24
80.190.122.0/24
Signature Algorithm: sha256WithRSAEncryption
37:91:fd:3a:30:fa:2d:15:84:67:e2:1a:d6:8b:ba:0e:70:c4:
fd:b4:7b:93:f9:99:09:a6:eb:e1:e9:0e:2a:82:20:cf:90:ea:
04:ff:71:cb:86:15:7e:92:e0:3d:54:d2:e9:ab:d3:5a:af:2c:
20:00:e9:e8:57:1e:50:4a:66:71:c3:09:5a:82:88:17:7a:82:
e6:d4:ec:af:16:c8:d2:18:8c:14:21:d6:ce:f6:84:8c:39:52:
0e:e4:a0:d6:bf:26:fb:91:bc:ab:e8:e8:f0:af:9d:ba:2d:ab:
0b:d4:bd:e5:bc:bb:77:f1:37:e8:69:e7:3a:5b:5d:9e:0e:af:
d2:3d:7c:08:5b:b5:49:85:69:de:4c:ed:72:31:11:63:c7:29:
35:08:52:47:97:d7:36:20:db:19:32:e5:8f:5f:cb:3b:97:53:
71:1f:05:f6:10:b9:60:83:62:ba:73:cd:4f:27:10:33:72:e8:
9c:b1:be:08:e4:62:f5:1c:db:ce:04:2f:82:e8:6f:f8:7c:d1:
31:09:ec:2e:48:b2:70:21:5d:93:fa:95:55:b2:4f:75:03:a0:
ef:13:3c:03:86:17:9c:5a:cf:a1:3d:9b:44:45:06:74:a1:5d:
69:1b:4c:1f:9a:8e:21:2a:8e:39:37:97:f9:9f:4d:74:97:9e:
8e:45:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:09 2024 by rpki-client on console-ams.rpki-client.org