Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f9e644-4ff1-490f-bd30-9d87771b8fd6/1/_WlXeT8O_Au6Jlp6THv75wE6pyY.roa
File: _WlXeT8O_Au6Jlp6THv75wE6pyY.roa (raw, json)
Hash identifier: JQr7oRWG/kV9hNzmBCH7xeME0Jd7QQARidTm6SjrY5A=
Subject key identifier: FD:69:57:79:3F:0E:FC:0B:BA:26:5A:7A:4C:7B:FB:E7:01:3A:A7:26
Certificate issuer: /CN=80c6d55501bc2672498c4ff4524a8a9f15ec2e8b
Certificate serial: 018D877039B3EDAE66A2CF398BB45AD704B3
Authority key identifier: 80:C6:D5:55:01:BC:26:72:49:8C:4F:F4:52:4A:8A:9F:15:EC:2E:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMbVVQG8JnJJjE_0UkqKnxXsLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f9e644-4ff1-490f-bd30-9d87771b8fd6/1/_WlXeT8O_Au6Jlp6THv75wE6pyY.roa
Signing time: Thu 08 Feb 2024 06:38:15 +0000
ROA not before: Thu 08 Feb 2024 06:38:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205285
IP address blocks: 45.84.76.0/23 maxlen: 23
45.84.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f9e644-4ff1-490f-bd30-9d87771b8fd6/1/gMbVVQG8JnJJjE_0UkqKnxXsLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f9e644-4ff1-490f-bd30-9d87771b8fd6/1/gMbVVQG8JnJJjE_0UkqKnxXsLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMbVVQG8JnJJjE_0UkqKnxXsLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:70:39:b3:ed:ae:66:a2:cf:39:8b:b4:5a:d7:04:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c6d55501bc2672498c4ff4524a8a9f15ec2e8b
Validity
Not Before: Feb 8 06:38:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd6957793f0efc0bba265a7a4c7bfbe7013aa726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:9d:35:9f:78:16:49:0d:67:c1:55:ca:4c:
52:a9:02:28:0c:51:fb:f7:f6:eb:3c:0b:64:7c:57:
08:c9:47:a3:77:84:d6:a1:d3:df:c3:60:10:87:5a:
c2:55:e8:10:31:ab:67:8e:8f:6b:72:5a:5b:41:e8:
4d:a2:4b:d5:24:46:a3:36:11:e8:76:10:e5:03:94:
e7:b4:82:a8:d6:66:64:8b:8a:1f:65:9a:f6:02:38:
88:ef:0c:35:1e:30:08:71:44:99:f7:9a:98:fb:2e:
aa:a0:fb:39:05:f5:00:4a:86:91:d1:73:40:93:3f:
9d:d0:89:22:eb:9e:57:cc:39:11:0c:81:a8:01:0e:
e6:6a:e3:72:bf:89:b4:b3:86:e5:84:e3:29:5f:41:
e8:79:93:de:ba:98:d2:88:7f:73:a1:eb:0f:20:8a:
1c:4d:7c:aa:1f:bd:90:c5:ce:3b:01:6a:dc:05:d3:
ba:4f:88:32:12:fe:68:85:eb:ae:6a:c9:8b:bd:6e:
e8:35:87:85:95:5a:97:16:39:a6:29:b9:06:7f:78:
52:ce:30:1f:8b:fc:af:32:f3:39:1f:40:88:dc:b9:
06:7e:2a:c8:da:8d:c2:39:b8:0a:f1:a2:21:a8:8e:
7c:84:c9:2a:fd:02:0a:c9:56:c3:a2:57:ef:3f:28:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:57:79:3F:0E:FC:0B:BA:26:5A:7A:4C:7B:FB:E7:01:3A:A7:26
X509v3 Authority Key Identifier:
keyid:80:C6:D5:55:01:BC:26:72:49:8C:4F:F4:52:4A:8A:9F:15:EC:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMbVVQG8JnJJjE_0UkqKnxXsLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f9e644-4ff1-490f-bd30-9d87771b8fd6/1/_WlXeT8O_Au6Jlp6THv75wE6pyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f9e644-4ff1-490f-bd30-9d87771b8fd6/1/gMbVVQG8JnJJjE_0UkqKnxXsLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.76.0/22
Signature Algorithm: sha256WithRSAEncryption
60:55:78:91:00:f7:1e:0f:06:51:be:05:41:21:ab:26:72:aa:
41:79:b5:1c:4f:10:cb:12:d8:56:61:31:57:98:8a:b8:e8:7e:
62:a7:75:33:0f:cc:11:19:25:98:59:2e:cb:fc:83:8f:e3:94:
c7:45:14:b0:50:61:3c:08:84:6c:16:a1:6f:28:77:4c:ee:e8:
b1:48:10:b1:7e:0a:82:92:f8:55:f0:17:be:41:c2:18:8d:73:
f3:57:88:72:0c:d5:b8:6c:eb:ba:a2:5b:0c:a9:a9:cc:22:9b:
0b:22:f6:e9:4b:73:c9:7a:a1:22:9d:0b:c3:77:f3:2d:77:36:
e5:f6:b5:fa:7c:ca:95:79:24:66:5f:50:40:00:63:60:77:25:
39:b3:5e:3b:c1:0b:26:93:01:cc:68:21:0b:66:84:de:c8:ef:
c0:4e:7c:04:6c:f5:dc:82:b1:d4:ea:20:62:c7:73:79:aa:59:
ef:35:b2:ed:14:65:5e:06:d8:f6:a1:46:1f:70:c5:5a:38:e1:
c5:ad:bd:e9:ed:31:5a:01:01:6d:21:a5:32:12:8f:66:30:fb:
54:2b:e4:bb:9f:12:ae:9b:a8:a5:bb:bf:23:d4:86:fe:92:95:
f4:f2:a7:f4:b7:5b:a9:4d:52:67:65:18:85:7f:75:a6:13:d4:
bb:11:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:03:58 2024 by rpki-client on console-ams.rpki-client.org