Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/96m76A1_RL0BHG7hT6iiSV27lNA.roa
File: 96m76A1_RL0BHG7hT6iiSV27lNA.roa (raw, json)
Hash identifier: 5rw2kI0f8MPXCS7g1A9vmZ0CSX4aKDAhvrIbv8I2loI=
Subject key identifier: F7:A9:BB:E8:0D:7F:44:BD:01:1C:6E:E1:4F:A8:A2:49:5D:BB:94:D0
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 018CC9BBB6B55EEEA1E88173E99F62C89EC3
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/96m76A1_RL0BHG7hT6iiSV27lNA.roa
Signing time: Tue 02 Jan 2024 10:32:51 +0000
ROA not before: Tue 02 Jan 2024 10:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204059
IP address blocks: 80.67.181.0/24 maxlen: 24
80.67.191.0/24 maxlen: 24
2001:913:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b6:b5:5e:ee:a1:e8:81:73:e9:9f:62:c8:9e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7a9bbe80d7f44bd011c6ee14fa8a2495dbb94d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:47:ad:b0:42:6d:f7:91:83:ca:3a:75:42:
af:16:78:ac:1a:85:ad:aa:12:8d:20:76:03:52:f2:
e6:cf:3f:ab:6b:f5:11:0b:cf:47:0d:42:0a:ad:15:
eb:26:7f:b1:e4:fb:9d:1e:36:c0:7a:4b:b3:f5:20:
9f:42:6d:d8:cd:0d:76:b7:e0:da:e5:fa:71:37:4a:
dc:d4:2b:b6:ad:0a:35:bd:97:f3:a0:4c:80:fb:7b:
d5:e1:18:ea:d0:dc:39:0f:cd:38:87:97:20:bb:7a:
b5:a4:79:f4:df:d9:ea:01:a2:a9:76:a3:93:fe:68:
f2:ac:6e:53:16:e2:04:63:a2:61:5e:47:f3:aa:90:
7f:a2:7e:a9:3d:4b:66:bc:b7:03:78:a8:34:ec:8f:
93:91:7a:a0:59:f5:b8:28:29:e2:4d:00:97:25:e1:
06:a8:45:a9:81:fc:e7:5c:14:4e:46:e5:29:2c:64:
9e:53:ad:76:f0:59:8c:f9:2a:61:af:90:0f:63:75:
ac:28:70:5e:8e:54:b8:9e:b2:d4:13:8f:2a:26:d2:
89:36:3d:4c:ba:95:2a:fd:43:4f:d8:63:0c:16:03:
41:fb:9b:b2:87:d8:cd:17:3a:27:a8:cf:c9:8b:c7:
d5:52:f1:b3:9f:75:7b:23:00:aa:4c:02:28:9f:5c:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A9:BB:E8:0D:7F:44:BD:01:1C:6E:E1:4F:A8:A2:49:5D:BB:94:D0
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/96m76A1_RL0BHG7hT6iiSV27lNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.181.0/24
80.67.191.0/24
IPv6:
2001:913:1000::/36
Signature Algorithm: sha256WithRSAEncryption
c0:fa:30:76:cf:2d:1d:7b:ae:1b:46:fd:0c:a6:34:53:d5:c6:
0d:ce:fd:9f:8c:15:93:d2:60:6f:47:33:e0:3c:b1:28:49:80:
28:b0:dd:79:81:4a:3d:92:fc:b2:be:8c:21:1d:d4:6b:17:d2:
6c:08:12:f3:41:c6:c2:d5:81:25:2b:c5:86:0b:fe:f2:98:12:
9d:29:18:7d:14:44:9e:97:f9:6c:9e:47:2b:00:e7:4e:bb:2e:
16:a5:45:40:bb:e2:89:92:d4:97:77:46:3c:ac:9e:f9:9b:6b:
bb:2c:eb:f0:58:ab:d0:3c:2b:cd:2f:40:97:0e:48:02:93:a9:
04:0b:c8:77:4d:90:51:9b:fb:ac:f8:b0:8b:e7:50:df:b0:ec:
cd:7f:c1:bc:e2:5b:f7:3d:eb:00:d0:24:f4:0a:02:73:5f:54:
ee:23:9c:24:14:0f:27:8e:09:87:96:fa:31:e3:2c:af:f6:4e:
33:ac:4f:2d:95:e0:46:73:63:0f:49:90:c0:92:46:80:93:dd:
49:07:63:43:6f:eb:c2:52:13:a0:4f:36:cf:01:2f:ab:84:89:
e1:a0:87:a7:1b:6c:60:63:76:28:79:00:09:85:da:5a:da:e5:
63:0e:1a:02:79:eb:12:f0:d0:30:cc:a1:25:37:dd:6b:50:5f:
e1:31:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:53:13 2024 by rpki-client on console-fra.rpki-client.org