Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/dNR921Uo3EdtxFWufeA5rL4vcBg.roa
File: dNR921Uo3EdtxFWufeA5rL4vcBg.roa (raw, json)
Hash identifier: EeZb6Q9qEeyGOLJKv2x95qLyX/2I3rvhAzGkjJYwe8Q=
Subject key identifier: 74:D4:7D:DB:55:28:DC:47:6D:C4:55:AE:7D:E0:39:AC:BE:2F:70:18
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B72FC9B222E4C64EA6E2BD328948C7
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/dNR921Uo3EdtxFWufeA5rL4vcBg.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14898
IP address blocks: 81.80.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2f:c9:b2:22:e4:c6:4e:a6:e2:bd:32:89:48:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74d47ddb5528dc476dc455ae7de039acbe2f7018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:1d:1d:83:fe:49:5f:a7:ea:10:e0:14:33:
f6:33:ff:19:c8:50:54:bc:bf:3b:27:a7:8e:6b:70:
97:d4:0a:ba:bb:c7:d9:d1:0a:d3:ae:d5:ce:41:df:
cd:8b:55:8e:6b:64:7d:9c:9e:d0:35:8f:57:d7:c9:
fe:7a:23:00:cc:93:4c:25:1e:f2:a8:79:85:ae:65:
9b:92:82:e1:07:a8:64:c7:66:0d:a5:5d:7e:84:4b:
a6:7a:19:f1:6b:dd:0c:c0:b4:3c:09:ad:e5:37:ac:
21:75:91:e6:66:50:e7:de:7d:a7:51:8c:ed:c8:78:
3f:3c:97:7a:f7:54:9e:46:cf:03:4c:cb:de:84:c4:
22:cb:90:38:29:24:24:9e:fc:5f:f3:03:e0:72:d7:
73:ce:84:63:34:3f:4a:48:19:5a:04:21:8a:d8:0d:
fe:02:a0:d6:5d:d6:6f:0c:05:0f:bd:f5:20:81:53:
9e:af:c3:1b:bc:7b:96:2f:aa:dd:5b:5a:e4:86:f8:
98:77:62:fc:24:21:33:71:41:59:37:30:76:f7:5c:
60:d6:20:f2:b2:02:39:89:23:3d:b5:9f:ee:25:f1:
0b:9a:3a:33:c0:50:31:90:75:e4:93:2b:40:10:e2:
40:d2:cb:a8:a3:a6:a8:be:d6:a4:30:42:80:67:7c:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D4:7D:DB:55:28:DC:47:6D:C4:55:AE:7D:E0:39:AC:BE:2F:70:18
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/dNR921Uo3EdtxFWufeA5rL4vcBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.80.77.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8a:96:f1:2c:a6:38:a1:e4:8b:ca:a3:45:2f:35:54:83:ae:
95:df:00:80:63:32:61:ca:02:95:3c:f6:44:b5:80:e8:3e:3f:
4c:cf:89:b1:57:e0:9b:ba:34:09:5e:63:bf:6c:35:b7:64:10:
6b:9a:02:c4:0d:5b:15:09:dd:b0:80:94:a9:1c:f8:15:c8:28:
e8:a1:8f:d7:65:1d:2d:54:7f:23:9b:f3:c4:0c:c1:fc:9d:27:
20:48:7e:d3:c0:9c:46:0e:03:1c:24:2d:29:0a:f9:58:59:be:
1d:48:af:1f:5e:7d:d2:81:62:36:cc:4f:76:cf:ce:ba:2a:34:
32:a3:c8:bd:6c:10:d3:14:8d:b3:e2:02:a5:97:a4:9c:8e:0f:
1f:45:a6:1e:98:0e:be:d6:e0:a0:5c:f4:ca:16:11:bc:bc:bf:
13:44:ee:de:2e:08:98:48:de:2e:2f:40:56:19:bd:67:03:26:
22:11:47:b7:9d:3a:a2:e2:9b:e1:cf:d5:45:b0:a1:f5:31:95:
26:9f:42:ed:d3:0b:d6:fb:94:20:81:9d:b6:53:81:42:20:8e:
43:36:f9:b3:69:0d:34:b3:37:ad:71:31:ba:b6:e0:34:ce:5f:
b9:4a:9a:77:b7:70:83:f8:a4:5c:94:8f:12:8a:b7:65:43:90:
7c:7b:99:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:40:49 2024 by rpki-client on console-fra.rpki-client.org