Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/d3J-gUBDtNO-_xalEMlBtnr1we8.roa
File: d3J-gUBDtNO-_xalEMlBtnr1we8.roa (raw, json)
Hash identifier: OJatVf4rsG09R8I9lgbn0Z4+mjQiVZ+9+Q6i2M0T3PQ=
Subject key identifier: 77:72:7E:81:40:43:B4:D3:BE:FF:16:A5:10:C9:41:B6:7A:F5:C1:EF
Certificate issuer: /CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Certificate serial: 018CC56ED47875692409A5F1EBDF727AB9BF
Authority key identifier: 97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/d3J-gUBDtNO-_xalEMlBtnr1we8.roa
Signing time: Mon 01 Jan 2024 14:30:24 +0000
ROA not before: Mon 01 Jan 2024 14:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 80.89.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/lzEK2mobvXqmjhQCI7-cYlozvkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/lzEK2mobvXqmjhQCI7-cYlozvkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d4:78:75:69:24:09:a5:f1:eb:df:72:7a:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77727e814043b4d3beff16a510c941b67af5c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:30:b8:05:f4:28:c3:a8:54:0b:e5:e8:99:
7a:07:ef:09:0d:44:7e:cf:a7:08:43:0c:93:b3:c6:
b8:a7:e8:56:4d:dc:39:b2:9f:7d:80:8d:67:5d:38:
fb:80:4f:91:91:4b:4e:d8:e4:78:b8:b3:e3:b9:c3:
54:68:1d:76:13:70:48:f1:b4:de:0c:32:b3:88:06:
58:35:66:9c:5d:1b:37:37:25:b8:b3:a3:c9:90:66:
74:16:56:50:b3:5e:18:4a:6a:c8:0a:ed:10:11:72:
be:62:75:06:7e:cd:fd:71:0b:2e:e4:6e:87:52:4b:
4f:cb:5d:be:84:54:c1:a7:83:67:92:ac:ee:85:d4:
c8:2f:6c:1f:a1:6f:7e:46:46:0c:0f:3f:f3:98:47:
05:e6:65:a8:fa:1c:2d:55:0e:67:09:de:b9:74:5a:
08:a7:45:5b:e2:2b:8b:c8:59:85:f8:ae:7e:a9:1b:
40:d0:10:f6:1d:1f:1a:8a:f8:d5:fb:6d:cd:9b:66:
b5:04:da:d4:b5:e7:89:cf:0f:f8:cb:de:e8:60:45:
20:4f:df:84:bf:e0:aa:69:9d:35:6f:5f:29:f0:42:
d7:ec:58:45:3e:92:e8:73:bb:79:97:bd:da:54:64:
88:93:b4:ac:76:bf:d4:b4:10:41:0a:98:bf:da:20:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:72:7E:81:40:43:B4:D3:BE:FF:16:A5:10:C9:41:B6:7A:F5:C1:EF
X509v3 Authority Key Identifier:
keyid:97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/d3J-gUBDtNO-_xalEMlBtnr1we8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/lzEK2mobvXqmjhQCI7-cYlozvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.0.0/22
Signature Algorithm: sha256WithRSAEncryption
33:c8:45:e3:d4:6f:af:36:6e:cf:5d:58:4c:1f:42:58:7e:dc:
7f:d1:41:a0:8d:af:db:24:43:c3:99:5e:f4:17:68:7d:6f:72:
92:40:52:38:91:c6:03:44:48:77:dc:f0:5a:6c:da:9b:b9:84:
5c:d4:d7:e3:69:30:e4:42:0a:ef:76:29:d0:f0:67:f2:45:ea:
bc:b6:cf:30:8f:d8:2c:d9:22:97:91:49:07:8a:ab:08:38:6c:
2f:e3:27:e5:c8:c6:5d:7b:c3:20:85:37:a1:99:ee:db:49:89:
b4:65:09:cf:58:7a:18:71:50:78:b1:bf:13:59:00:52:f4:e4:
78:e1:a2:5f:b1:51:b7:8f:53:1b:5b:d3:61:0a:cf:d6:a5:16:
30:38:73:b6:4a:90:f3:c7:b9:84:41:72:bc:5d:53:b0:99:92:
5d:27:79:4e:c8:f6:af:22:29:5c:f8:6f:4c:f3:61:34:fa:09:
1b:1d:ac:f2:ef:ce:81:8c:7e:d1:8a:54:e4:90:68:e0:55:b8:
46:23:21:d0:0d:91:ab:8e:15:0c:db:bf:3a:69:d7:cb:60:5c:
f0:f0:0b:75:69:f1:58:e6:c3:dd:08:82:a2:07:53:69:5d:7b:
d0:25:95:fc:78:cd:9d:a1:65:b3:50:b5:36:09:20:11:10:0d:
2b:45:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:37:27 2024 by rpki-client on console-ams.rpki-client.org