Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/7_o-Ps49AFxd19e4Tb0RK-D9FpI.roa
File: 7_o-Ps49AFxd19e4Tb0RK-D9FpI.roa (raw, json)
Hash identifier: azFI7yHe77ylqrtMPWLCPYgb2dyEuPVl8U9Uz66ZVtM=
Subject key identifier: EF:FA:3E:3E:CE:3D:00:5C:5D:D7:D7:B8:4D:BD:11:2B:E0:FD:16:92
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 018CC9BBB7AFA1B5337181ADD616605FCC02
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/7_o-Ps49AFxd19e4Tb0RK-D9FpI.roa
Signing time: Tue 02 Jan 2024 10:32:51 +0000
ROA not before: Tue 02 Jan 2024 10:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204708
IP address blocks: 80.67.184.0/24 maxlen: 24
2001:913:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b7:af:a1:b5:33:71:81:ad:d6:16:60:5f:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=effa3e3ece3d005c5dd7d7b84dbd112be0fd1692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:c7:36:4c:68:dc:6b:3d:d5:20:eb:17:fc:
d7:d6:a5:46:d6:79:44:1b:2c:51:da:9d:44:ea:eb:
8f:fd:18:29:ec:f5:ea:15:6e:10:ee:04:3b:4c:50:
4f:ce:ca:cd:af:7f:a4:4a:1d:63:47:0b:c0:0e:fd:
50:de:84:28:86:0d:b0:52:e1:e8:d1:74:dc:7e:22:
03:81:a8:52:b6:17:70:73:a0:a3:61:81:80:b6:0b:
84:dd:40:f6:67:73:d7:f7:f5:15:30:8e:d8:5a:29:
f8:c9:a2:64:fd:44:10:83:ec:b3:92:38:21:a7:40:
08:3b:a9:3b:73:2e:66:a3:cf:3c:77:fb:74:67:a2:
1c:7d:85:72:2e:7f:40:21:a8:4c:c9:e5:fc:cd:dd:
90:e1:5a:0a:df:32:ff:79:06:4a:d9:e6:f8:b5:69:
10:83:66:71:c0:e6:69:61:bf:2a:bc:a1:8e:de:97:
da:67:0e:d0:06:c9:cf:c9:f7:a6:37:55:bd:58:2e:
6c:42:94:40:6a:86:cd:94:b9:2c:c8:40:80:70:30:
28:e9:0e:fc:89:78:9b:9f:f2:46:ea:a6:93:42:bb:
b8:fc:83:6c:1b:88:c8:72:b0:13:b3:86:a4:40:c6:
46:68:12:90:48:89:b4:27:7b:d2:b7:e0:34:0a:b2:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FA:3E:3E:CE:3D:00:5C:5D:D7:D7:B8:4D:BD:11:2B:E0:FD:16:92
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/7_o-Ps49AFxd19e4Tb0RK-D9FpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.184.0/24
IPv6:
2001:913:3000::/36
Signature Algorithm: sha256WithRSAEncryption
63:f9:e3:ba:1c:20:68:a3:a1:02:38:8d:33:14:ab:9b:9d:07:
71:c0:0a:c6:e5:c9:25:15:ec:d1:33:e0:54:95:6f:3f:ed:04:
e5:a8:3e:69:ec:90:2e:2e:40:05:58:3e:96:13:3e:42:e0:49:
44:c5:c1:5a:c6:d5:3f:ca:7e:25:d9:f0:2d:cb:88:84:7f:3f:
3d:b0:8a:bf:98:ff:b7:76:17:af:d1:11:08:7f:f4:b6:f5:71:
30:f6:46:54:20:b3:b9:07:67:53:f0:4c:d7:19:30:32:66:39:
16:75:67:d9:f4:d8:84:3b:1c:47:82:dd:52:eb:34:76:26:bb:
fe:17:f4:70:9c:6c:a1:75:07:a0:84:94:1d:e5:09:b9:dc:41:
8a:73:fa:1e:6c:b5:3a:65:29:68:f5:2d:c0:b9:51:2e:5b:44:
d1:16:22:6a:c1:8a:6f:a1:c5:64:aa:0e:73:e9:24:9b:7a:d7:
9b:f1:5c:22:2a:e1:b6:20:6d:a1:8c:f6:4a:ec:b9:02:ee:c6:
3b:23:48:f9:72:5d:f3:46:d7:b3:8b:71:7c:45:9f:3c:73:9f:
27:f3:52:2b:bd:e1:4a:b4:11:2f:42:9b:7a:10:b4:0f:8e:88:
60:b2:d1:3c:fe:1a:f4:7c:45:45:29:1c:02:40:35:ac:2f:5f:
f4:53:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:34:32 2024 by rpki-client on console-ams.rpki-client.org