Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/M2krjNDysXiJ9Kes_fGHgQSAM8o.roa
File: M2krjNDysXiJ9Kes_fGHgQSAM8o.roa (raw, json)
Hash identifier: ofsenekqw5pWlj6OquITw6/3qxK73grtzB8WwDLVoO0=
Subject key identifier: 33:69:2B:8C:D0:F2:B1:78:89:F4:A7:AC:FD:F1:87:81:04:80:33:CA
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 018CC9BBB9A45C34944B7772FA25A74A6E8A
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/M2krjNDysXiJ9Kes_fGHgQSAM8o.roa
Signing time: Tue 02 Jan 2024 10:32:52 +0000
ROA not before: Tue 02 Jan 2024 10:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209090
IP address blocks: 80.67.186.0/24 maxlen: 24
2001:913:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b9:a4:5c:34:94:4b:77:72:fa:25:a7:4a:6e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 10:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33692b8cd0f2b17889f4a7acfdf18781048033ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:eb:db:5b:b1:6d:bc:10:a6:a8:a8:16:c4:
b3:a8:28:99:83:00:9e:b5:b4:fd:15:4e:09:2d:e4:
db:6b:be:7a:d8:81:18:99:fd:f1:93:95:c0:fc:73:
27:80:e2:52:7f:a8:af:9d:dc:f9:19:18:ee:6f:4b:
76:e8:61:19:50:09:6f:e8:07:f0:7d:8d:f5:96:f0:
4a:d1:eb:7e:61:0d:b4:21:76:41:29:72:b5:52:bd:
4b:8a:fb:e8:ee:8a:0d:54:44:ce:74:08:d3:ee:91:
3b:a6:47:f9:35:40:00:13:31:38:a6:f1:07:ec:5c:
23:6c:0b:f4:3e:18:14:20:0f:d0:d5:25:33:da:d1:
2a:80:33:38:f7:09:38:47:6a:dc:76:72:09:db:15:
79:0e:e9:42:c6:ce:c6:59:2e:12:7c:df:a2:6f:f9:
aa:b9:b0:f3:14:7c:fd:d9:79:56:23:94:2a:ec:81:
68:80:0a:2a:09:03:7c:35:c1:2e:78:30:e8:ac:8d:
71:8e:e1:25:f9:f4:3f:8c:f0:df:a4:06:79:ff:d5:
e1:0c:ab:58:ae:97:31:8b:9c:85:bf:3e:42:af:d7:
ba:ff:5f:88:a9:2f:a6:64:09:92:5f:65:7b:97:59:
48:97:93:c5:f6:6f:83:f7:96:78:85:5c:76:89:82:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:2B:8C:D0:F2:B1:78:89:F4:A7:AC:FD:F1:87:81:04:80:33:CA
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/M2krjNDysXiJ9Kes_fGHgQSAM8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.186.0/24
IPv6:
2001:913:5000::/36
Signature Algorithm: sha256WithRSAEncryption
6a:dd:d1:c3:8a:57:b6:24:94:4c:5b:24:d8:d2:54:34:16:f3:
08:b4:47:a4:50:33:15:78:0e:16:9b:93:8c:b9:80:89:a2:b8:
a8:21:65:1c:41:29:43:d5:e4:90:d9:f6:97:6f:de:a6:6f:26:
27:43:fa:cf:13:6d:ec:e5:7a:b8:d3:7c:d8:ad:63:fa:e5:a8:
9f:87:73:ff:6b:b8:24:c3:65:47:c5:67:42:46:63:12:cc:5d:
81:ce:a1:f5:ef:3b:6a:0e:51:53:b7:2c:c4:04:1f:51:2c:a5:
5b:5a:5c:93:26:65:d3:c2:cf:ae:f4:44:58:58:85:b1:fd:99:
4f:cc:22:07:44:cd:86:b7:67:68:22:5f:ad:fd:e3:33:7f:0e:
5f:df:78:4e:3b:e0:cb:78:ee:ec:23:c9:f1:37:df:98:ad:c6:
e6:31:05:fd:8f:a0:10:3d:25:22:99:d1:f9:84:59:48:cf:88:
b1:27:48:3f:6d:b7:fc:3b:2c:c7:07:73:36:f5:70:b4:8d:00:
d0:d4:0c:03:cd:09:a3:78:9b:36:9d:31:af:a7:8e:52:5b:e5:
a7:85:c1:87:81:42:39:9a:7b:68:47:73:78:49:96:e2:57:04:
35:1a:f5:26:f5:19:63:63:3d:3e:c3:f0:60:ca:f6:cd:f1:5a:
fa:57:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:05:34 2024 by rpki-client on console-ams.rpki-client.org