Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1OAKPKQg7A5j9SLpV35q8GXMe0Q.roa
File: 1OAKPKQg7A5j9SLpV35q8GXMe0Q.roa (raw, json)
Hash identifier: MpMJWbiTZVhrYIMpBjHqjRWAazAWHmLjLtMYOZmExx0=
Subject key identifier: D4:E0:0A:3C:A4:20:EC:0E:63:F5:22:E9:57:7E:6A:F0:65:CC:7B:44
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018CC4933D7A8958301043C4913DE6CAC463
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1OAKPKQg7A5j9SLpV35q8GXMe0Q.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21196
IP address blocks: 80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3d:7a:89:58:30:10:43:c4:91:3d:e6:ca:c4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4e00a3ca420ec0e63f522e9577e6af065cc7b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:fe:c3:4d:3e:e5:e9:d0:ed:29:e2:f6:f1:
ec:bb:3b:c9:73:b8:e7:ac:bf:4a:7a:61:fa:76:c7:
7d:d9:5a:51:65:f1:f7:f9:dd:9e:a6:ba:3f:73:a9:
e3:13:97:b4:2a:5f:d7:4d:a1:4e:17:bc:aa:55:95:
c7:07:69:96:fc:67:3d:0e:df:6b:17:42:fd:0a:b6:
90:b2:28:d5:e2:26:8c:14:59:ba:0c:2c:ea:2e:b0:
08:4b:c3:ab:95:90:bf:c6:6f:14:1d:a4:09:35:11:
95:e6:eb:53:90:3b:aa:ca:39:d3:01:32:3a:a3:b1:
c3:5f:4a:5e:25:f5:13:e0:07:18:12:b3:72:bf:2f:
15:1b:b9:ed:d2:60:00:2c:74:0a:fa:7a:4c:28:34:
3c:de:f4:f7:30:34:4c:42:84:cb:85:57:07:b9:9b:
84:87:d7:1d:22:13:32:a2:4a:84:90:7b:79:e5:e0:
f3:ba:77:89:77:a9:39:15:f0:9c:33:40:15:fc:f9:
98:23:2b:29:07:9c:9a:e3:79:23:c0:e8:4a:cc:92:
1e:74:75:c1:19:22:db:8f:2b:5f:54:54:93:8e:b7:
65:fd:5d:7c:4f:08:00:d8:3b:37:8a:1f:16:46:9b:
59:9d:58:80:7e:07:c5:0b:39:0b:d9:b6:79:91:56:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E0:0A:3C:A4:20:EC:0E:63:F5:22:E9:57:7E:6A:F0:65:CC:7B:44
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1OAKPKQg7A5j9SLpV35q8GXMe0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.172.0/22
Signature Algorithm: sha256WithRSAEncryption
09:e3:05:8d:7d:6a:83:75:42:44:b5:16:2c:80:10:73:85:2c:
ec:32:d4:b1:ac:40:7e:6e:2d:56:b4:a1:95:f1:cf:ea:d6:2e:
f8:05:22:28:b1:8b:47:4a:13:f7:65:ed:85:4b:36:d8:a6:10:
34:b9:c1:c8:57:78:d4:54:42:3f:2c:ec:3f:3d:60:22:44:8c:
70:b9:ea:f0:f0:e8:20:3e:94:cd:40:d1:57:03:7c:b6:bd:cd:
64:4d:8c:69:bc:fb:95:1c:0d:5a:8c:bc:0c:8e:24:a7:62:a6:
b0:d8:cc:98:29:87:ae:17:20:2d:de:b9:00:f8:c6:5e:d0:f4:
9d:09:12:6b:e9:17:d6:98:85:0a:25:d7:ca:5e:e1:63:df:80:
fb:16:91:ff:70:ab:e9:bb:1b:c2:0e:17:78:e1:b5:eb:d1:aa:
1e:59:42:f2:f6:2d:e6:db:b3:63:f5:5a:9a:9c:90:74:e4:9a:
aa:44:b8:14:99:d2:55:17:58:59:c4:57:28:65:6d:34:d7:7b:
98:ed:0c:60:1b:a4:fb:f8:6a:86:0b:d5:5c:1e:a6:84:c9:60:
ca:b6:42:31:df:1a:04:0d:36:68:ec:79:ad:ec:96:1b:43:0a:
98:8d:32:eb:fc:3a:ef:5b:2f:29:70:2d:98:c5:c5:a9:9e:c6:
5a:96:d8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:33:26 2024 by rpki-client on console-ams.rpki-client.org