Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/g_Qw6EiBfGr5yvEpsRkQz6HQHJo.roa
File: g_Qw6EiBfGr5yvEpsRkQz6HQHJo.roa (raw, json)
Hash identifier: aV8BRhSR2TimtIbBfqqYgkjBsVqfUU4zlHd2P13en7U=
Subject key identifier: 83:F4:30:E8:48:81:7C:6A:F9:CA:F1:29:B1:19:10:CF:A1:D0:1C:9A
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 018CC9BBB75B0AAE04D6D3A7102E74BC2880
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/g_Qw6EiBfGr5yvEpsRkQz6HQHJo.roa
Signing time: Tue 02 Jan 2024 10:32:51 +0000
ROA not before: Tue 02 Jan 2024 10:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204092
IP address blocks: 80.67.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b7:5b:0a:ae:04:d6:d3:a7:10:2e:74:bc:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83f430e848817c6af9caf129b11910cfa1d01c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:0e:11:0b:67:63:8b:54:87:17:fd:f1:10:
55:08:92:ff:b0:0d:bf:3a:47:a0:ae:88:40:94:a0:
6e:a3:ea:ea:65:aa:1e:25:e2:3e:8d:74:28:00:e9:
17:c4:6b:06:bd:be:d0:8e:84:7f:b7:6b:04:af:71:
ed:a9:d8:ad:da:09:4d:af:2d:c1:ef:37:5f:5f:67:
02:bd:cc:3c:5c:83:45:b9:6c:7a:3c:78:87:64:8d:
65:fc:90:86:7b:ee:79:97:e4:67:f6:a0:93:5b:07:
85:b8:8c:a6:98:a8:49:50:11:41:5a:c1:1d:75:d8:
e1:66:16:22:41:f3:05:45:c3:b3:0c:52:b5:21:63:
00:bb:b6:6a:c2:81:6c:06:8f:a4:ae:ad:df:e0:25:
52:cd:db:17:a8:35:db:7b:93:7b:21:b3:36:c7:12:
e1:0a:1b:1c:ea:80:4a:16:a2:ef:1c:71:66:57:2f:
61:fb:ee:a9:e9:ce:c4:e2:4e:62:86:2e:16:68:9c:
1a:2f:c9:14:39:11:23:99:6e:34:98:03:4c:7b:de:
fc:16:fb:bd:f1:12:2a:15:61:30:a0:81:bc:83:62:
1c:17:2a:f8:a1:de:48:87:cd:f8:c4:f3:02:5d:e0:
7e:47:59:4d:44:52:08:34:93:f3:a0:ae:0a:df:8d:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:30:E8:48:81:7C:6A:F9:CA:F1:29:B1:19:10:CF:A1:D0:1C:9A
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/g_Qw6EiBfGr5yvEpsRkQz6HQHJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.190.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ec:44:3b:60:ce:c3:4f:e3:93:9b:f4:eb:e0:54:e7:af:6a:
64:59:e3:e0:b2:27:9d:2f:3d:c4:85:ef:19:41:ce:de:f2:dc:
01:66:8a:fd:87:2f:ff:b5:37:f2:72:d5:6a:a7:23:7b:c7:72:
ee:bf:43:65:17:85:2c:9f:6e:ee:8e:e1:d5:51:3e:61:d0:5e:
fb:ea:63:a8:4e:01:f1:50:8f:57:70:de:ca:aa:50:89:27:1a:
13:55:69:33:d8:5f:ae:03:9d:04:07:33:c0:39:c9:c3:96:04:
f8:89:cd:08:42:69:22:30:83:25:6e:84:fe:85:91:ce:39:96:
34:d3:f6:eb:47:21:6e:a6:c9:21:94:69:1e:54:28:5c:b1:d6:
10:ac:d4:c0:02:12:cb:73:89:b2:ee:25:ed:ef:24:9e:0c:1f:
87:96:da:e1:c9:de:e3:6d:4b:bd:2a:8e:58:74:23:41:dd:e6:
f6:55:f9:2c:e9:ab:11:6d:9c:22:a7:05:bc:a0:24:1a:68:fd:
a4:99:28:45:83:6f:35:9a:73:35:d2:81:94:35:e7:f6:6c:fe:
6f:99:37:f8:7e:34:a0:8a:c5:a9:f5:cc:07:53:70:a3:52:30:
2f:41:bf:4d:49:d9:bf:9d:10:ed:59:66:77:89:1e:17:ef:93:
d4:35:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:18 2024 by rpki-client on console-fra.rpki-client.org