Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/eQRdF5ywX9n6Sg4oxuQx3ZTVP2M.roa
File: eQRdF5ywX9n6Sg4oxuQx3ZTVP2M.roa (raw, json)
Hash identifier: N2vyV0tC5VrdNjdK2i5g/3hsPnd4s7k02Wnch18D8vk=
Subject key identifier: 79:04:5D:17:9C:B0:5F:D9:FA:4A:0E:28:C6:E4:31:DD:94:D5:3F:63
Certificate issuer: /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial: 018CC6B92A9F6E54126B462C70F38CAF45EF
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/eQRdF5ywX9n6Sg4oxuQx3ZTVP2M.roa
Signing time: Mon 01 Jan 2024 20:31:12 +0000
ROA not before: Mon 01 Jan 2024 20:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30960
IP address blocks: 80.76.132.0/23 maxlen: 23
80.76.128.0/22 maxlen: 22
80.76.136.0/23 maxlen: 23
80.76.138.0/23 maxlen: 23
80.76.134.0/23 maxlen: 23
80.76.140.0/22 maxlen: 22
193.27.236.0/22 maxlen: 22
193.27.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2a:9f:6e:54:12:6b:46:2c:70:f3:8c:af:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Validity
Not Before: Jan 1 20:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79045d179cb05fd9fa4a0e28c6e431dd94d53f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:d5:70:77:aa:8a:1d:d8:97:47:cc:aa:3f:
c0:19:69:ce:34:41:89:31:e4:9f:8e:b5:3d:7a:c4:
29:86:46:b6:e6:a5:77:73:48:88:60:dd:1a:69:f2:
4b:4c:3c:95:c0:00:e7:3b:a6:d3:4a:c7:eb:ad:05:
22:1b:65:20:75:0b:7b:93:5b:05:af:f5:a7:94:58:
07:4f:42:68:95:02:69:65:81:3a:4f:76:22:d0:4b:
a2:d5:65:a9:ed:9f:b1:cc:78:0c:90:c0:a2:d0:08:
35:fc:7a:0b:09:a7:39:82:b9:dc:2e:35:98:b0:5f:
36:10:d5:77:7d:12:1a:08:2b:71:a3:f0:6f:e3:24:
0f:60:ce:c3:83:21:b3:9e:18:5f:18:00:88:2f:ce:
ef:bb:eb:99:ff:f9:da:c2:3d:7e:e0:86:21:4d:d4:
ba:5b:04:c3:e4:b0:5b:20:5b:7a:0b:46:02:be:a4:
e7:6e:39:e4:16:c2:cb:35:b5:a6:83:ff:b4:89:d3:
60:c4:5a:5e:ec:7f:26:d5:86:61:5e:c5:e3:21:c7:
72:03:90:a2:bf:21:31:8f:c5:a7:1d:43:18:ad:2e:
75:5d:85:7a:fc:d7:a4:f6:38:63:7b:29:35:17:71:
00:38:e5:f8:78:c0:5e:b3:63:17:42:16:14:e1:84:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:5D:17:9C:B0:5F:D9:FA:4A:0E:28:C6:E4:31:DD:94:D5:3F:63
X509v3 Authority Key Identifier:
keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/eQRdF5ywX9n6Sg4oxuQx3ZTVP2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.128.0/20
193.27.236.0-193.27.241.255
Signature Algorithm: sha256WithRSAEncryption
48:e4:d7:85:ed:f3:b5:f1:93:06:05:79:03:71:64:88:58:a6:
62:24:58:9c:b1:b4:33:6c:7b:f3:2f:44:39:dc:e1:26:8a:cc:
a6:49:4a:ff:ce:10:28:d9:de:c7:97:a4:c8:39:20:ed:8b:1a:
b4:14:ae:6e:58:07:a1:17:40:b7:5b:4d:94:4d:6f:64:2b:c4:
15:50:1b:68:9f:a6:5f:8d:8f:26:ff:5e:d2:99:0d:ee:ab:9d:
23:f1:9f:c7:2b:43:1e:45:8c:ab:67:53:80:45:22:0f:67:ca:
49:fd:b7:6e:0a:a3:9e:ac:f7:51:51:8b:80:79:ae:59:1e:4a:
5c:f7:f9:60:ab:73:39:b7:a6:36:1c:65:9a:92:ec:d2:ec:cc:
33:3f:af:0d:48:bd:13:00:4c:72:c9:95:9e:e1:0f:85:1a:fe:
c2:5b:78:ba:dd:a5:4d:29:87:d5:19:2a:0c:d0:cc:7c:89:1c:
dc:56:e5:19:20:ed:ae:4c:de:f1:61:9d:7a:c0:b1:2a:b4:d0:
d0:b1:c3:6a:27:6e:cf:4b:fc:cf:48:a6:4b:a2:08:f4:68:f3:
2c:ba:68:b1:2d:c8:ed:80:e6:fd:4f:19:77:79:55:68:e5:31:
e2:5f:c7:4a:6b:b4:7d:99:2f:5d:5c:2f:f5:f9:8a:a5:e3:96:
6b:35:ae:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:26:25 2024 by rpki-client on console-ams.rpki-client.org