Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/io3oWFLFcE18lhokaWMUKOaMeWM.roa
File: io3oWFLFcE18lhokaWMUKOaMeWM.roa (raw, json)
Hash identifier: hC1liZ4zdbzKgsvg1C7alyZvEaXycuVKKq2V70Ue4Ls=
Subject key identifier: 8A:8D:E8:58:52:C5:70:4D:7C:96:1A:24:69:63:14:28:E6:8C:79:63
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018CC2DAFFF065C11F456D546FBF464CDFE1
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/io3oWFLFcE18lhokaWMUKOaMeWM.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 80.94.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ff:f0:65:c1:1f:45:6d:54:6f:bf:46:4c:df:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a8de85852c5704d7c961a2469631428e68c7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:85:e7:54:0b:85:31:c1:6a:a3:ef:73:df:
60:ca:a8:ae:95:22:12:a9:b7:11:3c:dc:00:4f:cc:
ea:77:33:4d:08:80:f4:7a:f6:f2:ae:68:6b:6c:3f:
07:ad:d4:d1:f7:79:ac:d4:99:e1:07:46:a0:26:58:
b1:f1:23:d2:e1:36:c1:0b:de:ed:b9:ab:8e:1e:6f:
ae:a4:ae:dc:5e:f6:bd:34:a8:4b:dc:eb:1c:ab:ac:
c4:7f:0c:14:b8:c0:85:98:cc:be:03:b5:47:b5:3e:
a4:98:7d:c1:4b:8d:bd:5b:b9:f2:4e:09:19:f0:a3:
5d:da:15:57:76:85:26:92:62:69:38:a8:0c:0a:4e:
e7:e1:aa:5a:f1:5f:8a:7a:bd:3a:80:1c:a8:43:4d:
bd:f5:0e:56:22:84:c7:ce:b0:d7:c1:a4:55:60:59:
f1:0d:06:5c:ea:dd:c0:5a:2b:d4:22:5e:5f:1d:8f:
a2:c4:04:2e:b5:88:28:98:d7:90:2f:33:7b:1a:79:
1f:d3:74:74:7e:98:7a:0b:2a:f5:1c:f1:a6:cf:a4:
d0:35:88:99:8a:78:ff:a9:6c:00:39:ec:7e:e7:fd:
cb:c0:87:2c:db:87:86:c2:24:6a:9e:21:fb:f8:36:
89:92:d1:3b:87:d7:b8:59:46:fb:37:9b:7f:26:a5:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8D:E8:58:52:C5:70:4D:7C:96:1A:24:69:63:14:28:E6:8C:79:63
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/io3oWFLFcE18lhokaWMUKOaMeWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.90.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ef:50:8e:4c:c9:d9:7a:2b:58:5d:30:a1:83:62:fa:d9:04:
ba:f7:47:52:40:78:c3:32:87:f9:45:47:20:48:86:ab:01:3e:
77:ee:04:a1:58:c5:7f:ef:84:00:2d:f3:89:fd:81:30:c4:94:
c3:a3:95:05:8f:bf:f7:ca:58:5d:ee:6d:1d:e7:1f:5a:ed:e0:
9a:fb:a3:db:75:89:b9:a9:49:dc:74:e1:44:2c:6e:b3:2c:26:
8c:5a:e7:f1:00:c5:02:a0:e5:58:d7:30:d6:c5:c2:ab:ae:cf:
5e:53:72:5d:8e:f0:39:95:88:45:02:70:59:67:8b:3e:73:25:
c1:cd:0a:e6:8d:99:7d:8d:ee:ab:38:08:e4:2e:fa:08:e8:41:
e1:70:a8:3f:ae:77:ae:24:90:60:d2:eb:19:db:31:a4:fa:e6:
b3:1a:c9:44:33:c1:1f:49:85:98:d7:0c:a8:8a:bd:89:1b:9b:
e6:53:08:39:e8:9a:74:07:cf:52:ae:f9:41:f2:a2:df:2e:d2:
0d:74:a7:a3:26:3c:5a:2f:ff:48:3c:91:98:60:de:82:6b:72:
5d:49:4d:55:c6:4f:fe:3c:7e:21:51:27:d6:10:51:4b:96:22:
fe:05:7a:80:cd:db:0a:4f:6a:b5:cc:c8:c2:db:51:fb:e3:1d:
d7:ee:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:51:23 2024 by rpki-client on console-ams.rpki-client.org