Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/T7PrL0rttSSmQeB4CdKdURSh7S4.roa
File: T7PrL0rttSSmQeB4CdKdURSh7S4.roa (raw, json)
Hash identifier: SCvyQpQI8LYmmeghmn5VGQrmcAGg7L3lpGBLXRQZGR4=
Subject key identifier: 4F:B3:EB:2F:4A:ED:B5:24:A6:41:E0:78:09:D2:9D:51:14:A1:ED:2E
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 018CC727593DD1B20F4B320A34565795F937
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/T7PrL0rttSSmQeB4CdKdURSh7S4.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207286
IP address blocks: 185.80.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:59:3d:d1:b2:0f:4b:32:0a:34:56:57:95:f9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fb3eb2f4aedb524a641e07809d29d5114a1ed2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:2f:26:ad:d3:e1:bf:6f:4c:03:ec:01:43:
64:00:22:92:6d:36:cb:de:b3:db:48:b2:7d:99:6f:
f4:4c:95:98:2a:67:f7:2d:b4:f5:1b:a2:a0:fb:36:
56:03:6d:4e:28:3f:c7:6d:82:8d:f8:18:0f:5c:d5:
57:7c:12:1b:67:ae:52:ab:c4:0a:9b:35:83:e4:93:
e9:0f:84:8f:21:b6:fe:ff:7d:c3:ed:3a:f9:b0:72:
30:97:65:75:77:d6:a2:81:3c:86:78:a1:4e:8f:7a:
92:5f:fd:42:fb:7a:76:d7:81:74:20:5f:71:38:9f:
53:6f:92:0c:3c:c1:59:2f:8e:b4:9b:f1:c3:70:25:
df:16:d8:73:b0:46:d1:d7:74:25:1a:6e:95:cf:81:
d5:4e:61:64:1a:9c:82:cb:27:f3:92:f7:0c:3d:79:
0a:37:0a:ed:91:c5:e9:6d:d2:f4:62:9a:ab:61:fb:
c8:10:3e:93:da:1f:5c:0e:7a:c3:55:7a:f2:f9:aa:
2e:23:9d:73:04:b8:5f:fe:8e:a2:fe:ae:28:07:1d:
f2:f2:2b:4d:9a:d2:68:02:55:6a:7e:4f:af:aa:0c:
b0:99:36:65:80:d4:6d:7f:d9:09:f9:af:34:0d:9d:
c9:2a:03:47:e0:04:3d:68:24:b7:88:31:7b:0e:52:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B3:EB:2F:4A:ED:B5:24:A6:41:E0:78:09:D2:9D:51:14:A1:ED:2E
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/T7PrL0rttSSmQeB4CdKdURSh7S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
44:88:7f:53:68:52:7b:0d:1b:7b:fa:31:7a:b9:dc:14:fa:d9:
66:a2:b6:83:c5:ee:38:43:8f:5e:d9:b7:1b:57:bf:8f:4f:03:
bf:2d:3c:5a:75:6c:a5:5f:72:bc:b7:97:f6:7d:f3:5a:fa:3f:
ba:8e:ba:ad:fd:fc:4b:e5:63:c9:2b:60:4d:44:40:ce:44:d5:
bc:c4:41:2c:c9:29:ba:a8:ce:5c:e1:9c:6a:ae:77:d9:a6:68:
44:e7:a6:a6:fa:86:e9:6f:5f:8b:ae:ae:d5:bd:b9:83:a3:4d:
b9:02:05:31:d2:95:ce:bc:9d:99:aa:5b:7a:db:3a:79:38:d9:
e2:ed:eb:27:5f:cc:09:9d:3f:7e:f9:05:58:1b:b7:7c:5d:48:
06:3c:04:3a:05:fb:1f:18:4c:a7:b6:1f:15:7d:b8:bb:4b:1f:
c3:b2:08:1a:ea:f3:71:74:b5:5f:ef:f7:c7:c9:d1:65:60:fc:
1e:3b:47:d6:27:36:4e:14:67:0c:d7:96:34:f1:76:c6:63:69:
c7:e3:bd:ac:35:9b:ef:6b:13:51:d1:b3:99:41:a1:bd:98:0e:
76:c4:13:73:8a:3d:3b:fc:f3:f6:a9:11:73:fb:1b:1c:30:a3:
8f:9a:99:e9:07:3d:31:da:ee:4c:56:e0:a3:40:44:ca:d1:31:
77:ed:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:43:04 2024 by rpki-client on console-ams.rpki-client.org