Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3lcpQffX0t9eyc07gdwz7PQXB6g.roa
File: 3lcpQffX0t9eyc07gdwz7PQXB6g.roa (raw, json)
Hash identifier: WLEJ1EFEaPHxXKgjLTVOb4ulWD7hP8m99/52f/kCzHA=
Subject key identifier: DE:57:29:41:F7:D7:D2:DF:5E:C9:CD:3B:81:DC:33:EC:F4:17:07:A8
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DE17837186742E0A489512733993C3300
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3lcpQffX0t9eyc07gdwz7PQXB6g.roa
Signing time: Sun 25 Feb 2024 18:12:48 +0000
ROA not before: Sun 25 Feb 2024 18:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 212.80.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e1:78:37:18:67:42:e0:a4:89:51:27:33:99:3c:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 25 18:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de572941f7d7d2df5ec9cd3b81dc33ecf41707a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bf:20:dd:ad:fb:9a:e3:e1:98:c8:12:7a:b9:
c3:93:44:5f:d6:20:cf:90:d9:ad:c0:34:f2:9c:25:
e1:6e:56:b3:44:08:41:cb:bb:e3:b4:d1:62:00:b5:
77:32:2d:58:07:ca:e0:62:e8:28:5c:c6:53:82:58:
dd:81:df:f4:4c:4c:47:39:e1:76:12:f0:b5:1f:b2:
b3:bd:7b:55:20:22:1e:15:5b:2e:01:fd:5b:66:a5:
cc:6c:30:e2:ee:b2:9c:7f:66:7a:0d:a0:a7:13:2a:
4b:51:c7:38:89:0e:d9:72:51:e1:25:50:6a:07:ed:
52:c2:fe:1f:da:86:ea:db:e0:e7:12:e9:5a:26:af:
f8:ee:af:1b:8c:d6:a5:77:62:1a:b9:a7:43:88:43:
25:00:b8:03:92:ef:1c:55:e8:5a:b3:a7:57:5e:4c:
a4:51:5e:5f:2a:f5:ef:25:09:b6:27:d3:30:43:66:
0b:be:16:06:6b:c1:91:59:26:f6:78:3d:bc:68:ed:
ee:9d:91:ca:86:8a:e5:90:c8:14:6e:aa:6a:5f:ec:
cc:3f:cc:46:6e:e6:b9:95:d4:2e:8b:55:c8:b7:1c:
45:b3:9b:5d:48:ba:10:9b:7a:d7:22:83:39:5f:9b:
61:75:89:0a:a4:c2:be:b6:e0:c9:05:75:bb:94:c1:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:29:41:F7:D7:D2:DF:5E:C9:CD:3B:81:DC:33:EC:F4:17:07:A8
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3lcpQffX0t9eyc07gdwz7PQXB6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.9.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ce:8b:68:7d:99:3b:d9:2c:c5:ed:ad:64:46:d6:c0:a9:7f:
98:21:ac:66:b6:2d:6d:47:43:e7:2d:e6:16:fa:55:ea:9f:19:
72:d0:04:b6:6f:29:c2:59:83:37:08:79:32:2d:fa:fe:17:96:
e8:7b:ff:d3:b5:70:a3:5b:0d:bd:69:3c:dc:30:47:06:0e:fc:
0d:b4:bd:7e:c6:e6:af:55:cb:de:7a:14:b6:59:f1:9c:f2:39:
e8:9e:4c:6a:d7:3e:b1:a2:76:5b:08:c5:4f:b5:7d:56:22:5d:
82:64:bf:57:1a:d9:a9:4c:9a:a4:a3:0c:04:3a:a4:1e:50:e1:
a4:0e:ff:08:4d:0f:10:ff:3e:eb:e0:36:b6:fc:12:32:84:f1:
7b:f5:a1:41:a9:3d:b4:6e:92:e9:ac:4c:80:3a:54:7b:c1:26:
ef:82:28:ce:3c:00:e2:1e:50:45:5b:1b:d9:04:31:33:f5:f1:
2f:14:30:f2:9e:bf:01:50:86:9c:b2:22:c4:85:cf:26:9d:ef:
d4:aa:ce:b8:b0:5f:76:78:95:84:17:70:7f:3d:a3:7b:d2:f3:
47:22:06:38:7b:52:a3:5e:57:0e:2f:52:19:cf:fc:85:fc:24:
7f:f9:ca:e3:f4:98:8f:12:ac:02:5c:09:52:14:15:8e:de:c2:
64:af:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:27:11 2024 by rpki-client on console-fra.rpki-client.org