Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/7YjWrIVFhpfOHwvjow3Eml6zL-E.roa
File: 7YjWrIVFhpfOHwvjow3Eml6zL-E.roa (raw, json)
Hash identifier: HYTolCSA1Pitq+j6ZyaXqfyAVtDTzz38fKUs02Bxvho=
Subject key identifier: ED:88:D6:AC:85:45:86:97:CE:1F:0B:E3:A3:0D:C4:9A:5E:B3:2F:E1
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 018CC4247C51BDC17746908DA51E84BD2E45
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/7YjWrIVFhpfOHwvjow3Eml6zL-E.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16097
IP address blocks: 185.80.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7c:51:bd:c1:77:46:90:8d:a5:1e:84:bd:2e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed88d6ac85458697ce1f0be3a30dc49a5eb32fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:fa:2e:6d:ed:54:19:d1:91:ba:52:99:62:
98:db:f3:03:c4:a2:70:f7:f7:9f:f3:61:bb:db:8d:
9a:3e:ec:1c:be:71:23:6a:ce:7e:59:5a:91:80:12:
a1:5e:78:f0:19:ee:31:8b:a9:17:e1:11:40:43:5a:
45:46:a4:a8:5d:84:ce:4f:a3:90:95:83:9b:62:b7:
ed:01:3f:50:21:b5:50:7e:c3:1f:f6:1c:82:fb:04:
f5:c5:a0:d0:cc:dc:46:e8:05:17:8a:a1:c2:a3:27:
f3:df:c0:aa:4e:92:cb:89:87:67:4b:eb:7e:1a:7d:
64:63:19:6d:57:83:29:3f:13:a2:38:a8:fe:8b:3e:
5a:9c:e6:3b:ea:bb:52:0e:e2:8f:8a:a7:1e:07:8f:
5e:22:b7:48:c7:ae:d9:ba:26:51:ec:62:e2:d2:a0:
83:7d:d2:6d:33:b0:57:57:55:8c:16:43:19:97:45:
e6:d6:9d:33:cd:c7:d4:36:c1:d4:53:9c:c4:3e:d0:
ca:9c:44:5a:c6:77:68:05:16:d9:b8:f3:dc:b5:3b:
03:3e:ea:09:af:75:ff:dc:16:11:21:8b:f2:1c:dc:
35:9b:ef:6f:f5:f5:95:d7:c2:e8:05:05:2b:f1:98:
11:a5:30:69:5e:93:0e:56:16:57:77:74:84:29:f3:
e4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:88:D6:AC:85:45:86:97:CE:1F:0B:E3:A3:0D:C4:9A:5E:B3:2F:E1
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/7YjWrIVFhpfOHwvjow3Eml6zL-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:0a:ab:3c:10:29:fb:f3:2e:a4:7b:a1:2f:e6:bd:b0:f5:4e:
45:ad:1d:c5:56:95:3c:c4:2c:1f:ee:95:e7:4a:0f:4b:d4:78:
cd:a4:d9:7f:0a:f6:b1:c8:5e:e7:3d:9a:0e:82:b9:59:37:c5:
c8:8e:d0:5c:a5:64:a1:6b:97:82:b9:24:a1:1b:0f:54:52:e3:
7b:38:ff:ca:58:5d:86:1e:0c:7c:4f:72:90:4c:6b:d9:94:8a:
86:4b:01:32:5b:ff:a8:c7:90:81:00:c2:2b:14:13:9a:c9:ff:
6c:50:b8:09:1e:6e:11:53:f2:bd:ef:98:8c:6e:4c:11:84:e0:
06:e9:c4:40:89:8c:f5:57:fb:a4:ac:9d:73:6c:82:99:b4:2c:
de:c9:b6:8b:4c:1a:29:d7:74:71:40:0e:6d:38:eb:61:24:7c:
eb:dc:8c:bc:03:41:93:fc:ec:c0:c9:05:4d:2e:26:af:dc:5d:
2a:46:b6:7d:ae:54:2b:80:df:90:89:db:52:95:14:cd:33:6c:
93:3a:51:1a:a8:55:88:60:be:e1:74:77:86:3c:0c:86:b1:53:
a1:bf:ba:42:b0:cb:db:72:ce:5c:07:30:49:fb:71:f7:ed:ea:
cb:c6:05:33:dc:3c:77:f5:4c:45:e4:56:63:0d:78:47:06:0e:
cb:48:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:05:38 2024 by rpki-client on console-ams.rpki-client.org