Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/7jlk6DFx6zzLFMshUVQFSCNh1gk.roa
File: 7jlk6DFx6zzLFMshUVQFSCNh1gk.roa (raw, json)
Hash identifier: mvNRCoHNOlcbKeKo6B3KLXjDEaqvaRZkX6K1KmoMMHc=
Subject key identifier: EE:39:64:E8:31:71:EB:3C:CB:14:CB:21:51:54:05:48:23:61:D6:09
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CC86F518A60CEC0AB7E9D1713D7C5BFFA
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/7jlk6DFx6zzLFMshUVQFSCNh1gk.roa
Signing time: Tue 02 Jan 2024 04:29:47 +0000
ROA not before: Tue 02 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35029
IP address blocks: 80.66.77.0/24 maxlen: 24
80.66.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:51:8a:60:ce:c0:ab:7e:9d:17:13:d7:c5:bf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee3964e83171eb3ccb14cb21515405482361d609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:2f:9d:44:79:fa:16:fc:ac:46:24:5f:0b:
85:9b:cb:87:97:f0:90:6c:48:f2:59:0c:a9:89:9b:
95:41:14:8f:d0:51:d8:4c:c2:1e:22:ff:02:0c:08:
ea:82:91:e3:7a:d9:e7:b9:ca:4a:75:a7:34:be:04:
5a:31:c1:ad:c6:cf:28:81:e8:30:1f:1b:4e:3c:a1:
4b:c6:1d:9b:cf:6e:a4:aa:d7:25:ae:ff:28:db:d8:
a7:e9:8b:a4:c2:6b:02:3b:27:19:0f:ac:ad:29:2d:
65:61:cc:00:d7:e4:0b:eb:18:88:81:4a:87:26:3a:
88:d8:3a:0a:e2:7e:7a:6e:63:5d:4b:b4:b7:9f:d1:
cd:5b:a8:2d:08:6c:f0:7c:c5:19:47:6f:91:f4:2d:
ea:dd:c5:7c:f9:a7:d5:19:d2:d2:c4:d8:7f:6f:13:
83:c4:77:65:78:08:33:45:82:9e:3b:62:39:2d:79:
55:b5:60:e9:1f:26:51:5d:f9:58:e0:ab:16:c7:25:
21:57:bb:0e:ae:1c:e9:07:98:f1:d1:ed:15:cc:d7:
c8:84:56:78:ea:93:9a:cb:a3:69:58:54:ab:0d:fa:
05:44:81:8e:51:13:81:32:08:ab:16:e4:23:39:f8:
af:85:b3:1c:f6:3f:3d:13:28:84:c2:cf:be:b5:52:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:64:E8:31:71:EB:3C:CB:14:CB:21:51:54:05:48:23:61:D6:09
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/7jlk6DFx6zzLFMshUVQFSCNh1gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.75.0/24
80.66.77.0/24
Signature Algorithm: sha256WithRSAEncryption
75:66:be:d2:9b:2a:79:07:4b:25:a1:22:d7:a3:a3:15:38:17:
cf:b0:4d:c9:31:c1:84:74:d5:7a:26:6e:b3:fe:38:fe:e2:c7:
0e:c8:92:dc:00:9d:31:89:ab:1a:1b:c5:98:69:76:dd:c2:08:
bb:7b:f5:62:81:e6:3d:93:14:72:4e:31:4b:8b:cc:a5:dd:5e:
9e:62:8b:94:47:62:b9:f3:99:9d:d4:98:6f:0b:38:29:a5:00:
df:4a:b8:69:15:c7:ad:a9:e4:53:3d:8d:4b:1b:36:a6:db:1f:
e5:c9:75:db:62:6d:17:e4:f8:aa:a5:a0:85:0f:06:e8:2b:03:
17:49:4c:c8:9c:9f:02:3a:3d:91:f1:5e:98:3b:b7:de:08:f7:
e8:28:a2:50:5a:6a:88:23:f9:67:14:c9:0b:5a:f3:dd:75:23:
d7:e2:31:b5:81:1a:b6:5b:be:80:5e:a5:51:4e:c2:e4:f5:97:
6f:db:82:9f:82:eb:c6:d6:2f:5d:19:d7:fc:7f:d0:ec:c4:93:
27:ee:26:40:ab:4d:94:71:58:e0:c4:47:d8:7a:f9:1a:28:26:
86:e3:20:95:d7:ce:3d:f9:20:ec:ca:6c:a3:d0:0d:43:e6:5e:
c8:7f:8b:74:8d:cc:44:30:58:16:1c:be:f4:cd:91:90:cd:1f:
c3:ba:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:22:21 2024 by rpki-client on console-ams.rpki-client.org