Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/czhDRhDiju7vNeaB0igirjK7Ep8.roa
File: czhDRhDiju7vNeaB0igirjK7Ep8.roa (raw, json)
Hash identifier: VLGK9+O2IQCQKmT8GvEoWfqjIX/lUkEzmmXP2QWLQDU=
Subject key identifier: 73:38:43:46:10:E2:8E:EE:EF:35:E6:81:D2:28:22:AE:32:BB:12:9F
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 0190ACDFEC10F69A7283E691C10E70C5E87E
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/czhDRhDiju7vNeaB0igirjK7Ep8.roa
Signing time: Sat 13 Jul 2024 16:14:34 +0000
ROA not before: Sat 13 Jul 2024 16:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51026
IP address blocks: 80.75.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ac:df:ec:10:f6:9a:72:83:e6:91:c1:0e:70:c5:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Jul 13 16:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7338434610e28eeeef35e681d22822ae32bb129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:2a:0b:c7:8e:9f:fd:e8:4a:08:a4:10:3f:
ba:2a:e9:58:9b:c9:a5:9f:a8:5a:3d:e1:2d:6c:2e:
b4:a5:6b:9a:1c:56:8f:a6:91:4b:b1:a3:82:61:b7:
d4:ac:29:0c:04:44:4c:9f:e8:1d:4f:78:6b:a4:80:
4a:e8:ca:9c:d6:59:f4:1e:e5:8f:f3:1c:06:fe:3d:
3c:6c:4b:68:cb:06:0c:99:8a:7a:b3:93:6f:48:90:
71:59:86:0c:30:85:c1:c0:1c:fe:6b:fb:fc:67:62:
87:45:62:3f:b6:3a:7b:5b:4d:d4:81:bf:dc:ec:78:
25:1a:9c:ec:2b:fa:98:57:d6:02:db:d5:50:0e:12:
3c:a2:02:49:1c:e0:fa:54:99:95:37:8b:4b:47:60:
05:40:2f:f2:4d:46:78:d9:32:d0:b1:33:f2:67:b4:
33:f4:46:a9:07:9d:0e:61:a7:1c:7d:5d:53:29:f6:
0a:76:09:cf:48:58:42:78:e0:b4:0e:c0:aa:6d:31:
fa:a7:5c:73:56:e3:aa:a1:3e:07:34:0a:c6:db:9f:
33:45:e5:d7:9d:25:69:37:83:da:e2:98:06:c9:ff:
8e:f9:c6:39:1d:7c:93:be:07:be:33:84:9a:64:39:
d3:29:a6:86:0e:0e:df:40:c1:ec:87:3d:20:a2:33:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:38:43:46:10:E2:8E:EE:EF:35:E6:81:D2:28:22:AE:32:BB:12:9F
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/czhDRhDiju7vNeaB0igirjK7Ep8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b9:64:2c:f9:88:6b:60:c1:ff:a8:58:77:a4:da:e6:77:96:
65:50:1f:50:51:5c:e3:58:85:3a:ab:8d:c9:57:84:02:e1:03:
55:11:06:24:eb:3f:a3:fc:0c:b7:30:2d:8c:ee:f2:42:58:b0:
ac:94:4d:a9:ee:09:88:ea:ea:d7:99:fe:78:81:20:69:2d:b1:
20:0e:34:57:08:f5:9b:c8:dd:75:fe:b3:2b:36:45:ce:01:ff:
c5:46:3c:d6:c8:b0:1b:8a:73:01:85:f0:39:ca:fa:6e:5b:15:
76:04:fb:6a:40:b4:78:e3:d3:8c:ad:d8:de:3c:1d:1f:a1:fb:
35:3c:a8:3a:3d:38:3c:b5:30:2a:f7:0d:22:13:dc:7f:fe:f3:
34:31:9e:9c:10:4f:d5:ef:6f:89:c1:93:1a:f5:3c:52:d8:36:
c7:53:2a:49:a6:ae:24:21:a9:d8:3b:d4:2f:03:c7:cb:51:ad:
14:90:76:dd:a7:c0:55:94:6c:35:8f:b7:fa:55:00:ee:d4:4b:
bf:87:b8:f8:bc:f1:1a:07:0b:8b:3c:70:86:13:a5:45:03:6d:
89:32:02:0f:6c:8f:08:f8:21:fc:3a:12:f6:cd:36:67:08:c4:
39:61:03:af:aa:fc:df:56:43:a9:20:f6:37:46:48:e4:22:a5:
9f:da:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:41 2024 by rpki-client on console-fra.rpki-client.org