Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/XhsbQetBbzEGHkxo7AR3AdUKtsM.roa
File: XhsbQetBbzEGHkxo7AR3AdUKtsM.roa (raw, json)
Hash identifier: 77m0dJ1U8HUYlB3cbrsM5oZcE2HA59slCcakiiMWvh0=
Subject key identifier: 5E:1B:1B:41:EB:41:6F:31:06:1E:4C:68:EC:04:77:01:D5:0A:B6:C3
Certificate issuer: /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial: 018CC793770101F383AB74E10F6F3D911AEF
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/XhsbQetBbzEGHkxo7AR3AdUKtsM.roa
Signing time: Tue 02 Jan 2024 00:29:39 +0000
ROA not before: Tue 02 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16228
IP address blocks: 80.246.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:77:01:01:f3:83:ab:74:e1:0f:6f:3d:91:1a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Validity
Not Before: Jan 2 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e1b1b41eb416f31061e4c68ec047701d50ab6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:aa:42:07:8c:32:62:66:37:7d:16:df:4e:
b1:eb:81:8a:a7:be:06:45:94:66:e4:d3:70:85:32:
9e:32:4f:7c:99:cc:e5:7d:b9:bb:dd:d6:c5:b9:42:
8b:b7:cf:6c:c4:fc:0c:d3:c3:35:e8:6b:a7:71:7a:
3f:23:40:61:17:34:39:f3:63:e8:01:40:da:a3:a0:
b6:79:90:62:2e:96:d5:58:6f:b3:aa:4e:a4:0d:9f:
6f:97:2b:97:fe:0b:00:43:f1:d1:4d:e5:48:03:30:
bf:be:d6:01:d3:0f:03:66:c6:59:1d:35:1a:dc:24:
c8:37:6f:f6:14:ea:a2:9d:9c:a2:99:4c:77:56:ea:
78:ea:ca:a4:ce:6d:2d:60:70:70:7b:21:6c:e3:40:
84:ea:91:fa:de:4a:64:29:bb:de:76:16:b9:28:59:
39:f6:a0:c8:4b:1e:3a:25:b9:c1:99:0b:d0:4a:2e:
1d:8b:63:80:10:af:5e:43:d8:66:05:52:a8:b1:c7:
4f:a2:ba:72:3b:f7:cc:25:78:98:8f:76:94:a7:63:
e0:22:e2:03:ab:15:69:6a:bb:81:0f:c7:f0:a2:03:
d0:b8:c2:aa:ad:fd:be:06:30:cc:44:f7:eb:c8:cb:
89:aa:0e:4a:e5:de:28:a0:a7:d6:38:47:eb:24:d3:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:1B:41:EB:41:6F:31:06:1E:4C:68:EC:04:77:01:D5:0A:B6:C3
X509v3 Authority Key Identifier:
keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/XhsbQetBbzEGHkxo7AR3AdUKtsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.160.0/20
Signature Algorithm: sha256WithRSAEncryption
04:0c:72:be:01:4f:90:2d:5c:0c:e5:7c:73:65:89:1a:2a:38:
eb:0c:4e:2b:c4:60:7d:5a:9f:c2:4d:95:61:2c:66:4e:94:f4:
e0:d7:fc:21:03:73:e6:c5:c8:fe:7b:35:b6:5e:75:8e:be:a8:
13:e2:f7:4f:2e:47:c9:f2:60:43:72:4c:01:59:4e:f3:9f:41:
2f:7d:17:4e:e2:40:fc:9d:ef:b7:05:ea:6f:11:2b:da:2e:23:
03:4e:7a:95:a2:05:35:9d:b0:da:2f:fe:4a:26:81:09:03:01:
ce:96:16:95:54:c7:82:68:72:7e:46:e0:d5:19:f1:6a:ad:76:
30:ae:6c:b8:0a:c1:85:03:2d:d6:74:c3:79:d2:b6:d6:11:fe:
9d:1d:b8:3a:d8:86:4d:04:03:09:4b:9a:13:24:b7:e2:2b:35:
e1:b1:b3:3a:29:16:09:d6:38:c7:fd:5f:3d:64:76:71:37:43:
c1:84:aa:ce:bd:cf:2d:c8:cb:87:cd:2d:f1:2b:96:3b:e4:9b:
17:16:13:53:2a:67:06:cc:5b:db:fd:ce:53:9d:e9:f4:09:f7:
b7:2a:6c:c1:ad:95:3d:ce:ee:99:7d:f0:17:9d:f3:17:a2:4c:
a9:3a:6a:09:16:11:69:7a:4d:49:14:f5:ff:e9:c7:04:23:e6:
99:d7:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:46:37 2024 by rpki-client on console-ams.rpki-client.org