Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/cC1l7mb3mRrp5Ngm8WjYBzqob2c.roa
File: cC1l7mb3mRrp5Ngm8WjYBzqob2c.roa (raw, json)
Hash identifier: Zwdaz/Aim3l7+qwu3RRogptCLMA+s3pYOIEeW77CBAY=
Subject key identifier: 70:2D:65:EE:66:F7:99:1A:E9:E4:D8:26:F1:68:D8:07:3A:A8:6F:67
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 01926B6DD140EEA90AAA6A72B1D4C0679CE4
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/cC1l7mb3mRrp5Ngm8WjYBzqob2c.roa
Signing time: Tue 08 Oct 2024 09:20:11 +0000
ROA not before: Tue 08 Oct 2024 09:20:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51074
IP address blocks: 185.128.80.0/22 maxlen: 22
185.128.80.0/24 maxlen: 24
185.128.81.0/24 maxlen: 24
185.128.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:6d:d1:40:ee:a9:0a:aa:6a:72:b1:d4:c0:67:9c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: Oct 8 09:20:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=702d65ee66f7991ae9e4d826f168d8073aa86f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:90:6e:3a:be:b4:83:20:92:f8:5e:87:13:46:
6b:d2:14:6b:09:4b:00:fb:35:8b:27:97:63:ea:3d:
d8:fa:37:fe:46:ae:95:f8:ab:43:28:7f:43:9e:bd:
98:a0:21:cc:32:0c:ef:86:94:40:e7:66:87:b3:66:
c0:8a:f0:c8:1b:3b:a8:c8:5c:a4:71:fa:75:2c:c7:
9a:5b:54:d5:6e:e2:f4:77:47:0a:43:b3:41:b1:4b:
21:16:02:40:a5:5f:d4:8b:51:ac:58:ae:ea:c4:3d:
48:23:ad:22:43:9c:6a:63:40:cf:b4:62:3e:ee:b0:
84:75:09:24:9f:64:64:68:57:ea:95:1e:0e:d5:04:
52:5e:18:98:ae:6a:47:91:02:33:38:56:78:d4:de:
a0:78:74:13:85:78:bf:db:fa:fc:65:30:1d:0d:45:
25:81:6d:d5:52:c0:13:e4:70:68:3f:71:09:58:8d:
f6:4e:b3:67:17:ba:f1:b4:15:11:b0:9e:0d:07:35:
ea:9d:2c:97:17:39:41:5d:5f:b9:17:72:16:4d:b5:
b3:a7:53:ae:e9:8d:8c:e8:e7:29:99:e3:4a:03:6e:
71:1b:25:38:75:4f:70:48:ab:30:d5:28:88:a7:e1:
52:b8:f9:63:be:fb:6a:3d:d9:4b:f2:4d:d7:27:03:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2D:65:EE:66:F7:99:1A:E9:E4:D8:26:F1:68:D8:07:3A:A8:6F:67
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/cC1l7mb3mRrp5Ngm8WjYBzqob2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.80.0/22
Signature Algorithm: sha256WithRSAEncryption
49:1e:8f:17:1d:39:de:f0:08:22:c4:e7:ec:ec:fe:56:bd:b4:
97:27:18:30:1e:63:06:00:53:89:c6:7f:c5:8a:e0:b5:5c:7f:
d0:56:98:23:9d:6d:09:f8:ca:a3:43:5c:b3:26:16:55:98:77:
7b:1b:df:b6:e2:8c:a5:94:d3:10:f5:cc:54:d3:6d:49:14:d5:
85:24:8d:3f:a4:37:95:34:3c:03:14:85:20:a4:39:71:56:3f:
a6:4e:6d:b5:0b:fb:b4:ad:fb:8b:fc:6b:7f:a3:b0:fb:c5:a8:
e6:5f:8a:6b:ed:c4:83:74:3c:00:3b:33:97:de:22:c8:8d:1d:
5a:f4:ab:05:cf:12:50:be:8f:de:3e:54:af:5e:d3:9a:1c:b5:
62:c6:bf:b9:28:b5:52:a1:8d:bf:71:1e:68:76:0d:62:13:8d:
54:a0:05:e6:d8:e9:b0:cf:1c:3d:51:18:f7:27:c9:f2:b6:47:
8f:af:69:36:a8:6c:8c:69:f1:bd:10:f1:21:f4:b0:93:57:8b:
64:ef:4c:be:37:07:51:13:60:cc:29:ae:dc:9d:81:4b:80:6e:
74:a8:5d:d2:00:d8:74:15:71:0a:c0:c9:db:b2:0c:56:9a:d5:
ef:d1:94:9a:db:67:07:f0:ba:2f:6a:9a:f5:c4:ba:bc:a8:a1:
c9:5f:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:27:06 2024 by rpki-client on console-fra.rpki-client.org