Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ZGqxPwxkTYGdSpYg0a3uatQjw_k.roa
File: ZGqxPwxkTYGdSpYg0a3uatQjw_k.roa (raw, json)
Hash identifier: BrHDiFwhQkaTfEVDwzfKgD4okzOInYWX4k4eAYpWzCQ=
Subject key identifier: 64:6A:B1:3F:0C:64:4D:81:9D:4A:96:20:D1:AD:EE:6A:D4:23:C3:F9
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 018CCA2A25E226011CE82F9B0329BBC0A935
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ZGqxPwxkTYGdSpYg0a3uatQjw_k.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61239
IP address blocks: 80.253.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Oct 2024 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:25:e2:26:01:1c:e8:2f:9b:03:29:bb:c0:a9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=646ab13f0c644d819d4a9620d1adee6ad423c3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:58:72:d8:ec:9a:75:a7:26:ad:07:73:26:
4a:8a:89:d8:63:bd:b6:7b:23:e5:8b:d6:53:0c:13:
37:b0:d1:f6:c0:ac:75:9d:2c:06:16:71:05:3d:ce:
df:c9:42:c9:ed:66:0a:3e:8f:1b:a0:a6:0b:12:0a:
c8:9b:ea:11:77:00:53:bb:63:af:df:ec:64:89:67:
d4:76:d9:4c:ea:18:6d:46:b2:b3:14:26:28:63:a4:
40:cc:a5:fe:c1:e1:c1:3d:85:50:24:d5:23:3a:e4:
80:d4:49:82:23:d5:e5:6b:bd:de:f1:94:e3:db:e7:
52:e9:a7:30:31:36:d7:4e:bd:b6:30:4f:30:79:12:
c5:d8:25:e1:36:42:60:b8:63:5a:82:7e:0d:8b:e0:
a7:71:5b:e1:2b:66:8f:4d:ac:28:16:79:82:63:02:
5c:71:17:fe:87:2f:b9:5b:c0:6c:fd:30:47:a8:e4:
aa:ed:91:43:78:6a:a4:7e:3f:ea:a8:ee:a3:fe:9a:
1b:56:07:71:86:da:ca:25:cd:de:14:4c:7e:d8:db:
aa:9b:ca:3f:9a:8b:b9:9e:30:a6:c5:d7:d2:58:da:
bd:c6:a1:35:90:29:09:47:af:44:ee:ee:c2:5f:bf:
76:fc:0a:3c:4a:6e:94:e3:be:d1:01:73:11:4b:1f:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:B1:3F:0C:64:4D:81:9D:4A:96:20:D1:AD:EE:6A:D4:23:C3:F9
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ZGqxPwxkTYGdSpYg0a3uatQjw_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.159.0/24
Signature Algorithm: sha256WithRSAEncryption
98:0c:a4:10:45:f0:25:6a:fc:f6:e6:cd:c7:53:56:f2:71:1f:
70:62:31:63:3a:e6:e0:13:31:c6:3f:0c:ec:07:c2:a5:7d:5e:
f7:f1:19:3f:ab:31:ef:ce:b4:d3:56:c7:19:bf:c8:e4:5c:6d:
61:b2:c1:30:24:a5:bf:ee:b4:58:64:7a:c5:19:d7:e4:8c:26:
fa:bf:7d:06:df:58:ae:b6:47:e8:e8:12:45:94:dd:d0:97:1c:
1a:54:e2:a5:20:2f:72:79:b1:9c:73:57:4a:4d:3a:5e:12:80:
c5:7f:67:1a:73:d6:22:e7:79:4b:80:6b:d2:bd:a6:05:a9:13:
71:9f:db:07:9c:c8:43:e4:71:1c:8f:d8:fb:6c:01:6e:6e:67:
e2:c1:03:6f:64:7d:08:b2:20:b6:7f:5c:c5:5b:64:1d:af:58:
b2:d1:0b:ac:1b:3c:bf:5d:ba:d2:db:d0:42:28:74:0d:8a:3c:
4e:67:8e:38:f8:64:e9:ff:b5:86:61:9b:88:23:55:00:c3:c4:
4f:88:57:20:a4:a6:07:13:12:3b:08:9d:25:06:ba:8f:65:fe:
e7:64:2c:b4:4b:d6:17:35:f7:df:af:89:9a:2b:38:08:1c:de:
8c:b9:59:2e:57:f0:14:c0:6c:89:af:03:81:68:f3:0b:21:67:
5f:ad:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 16:23:06 2024 by rpki-client on console-fra.rpki-client.org