Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/EJGlkjZ63pHbaV-Dvl6VFONu-c4.roa
File: EJGlkjZ63pHbaV-Dvl6VFONu-c4.roa (raw, json)
Hash identifier: E7lNEQQQD29R/x2/zMxxykgyaxAjm1AO4V8j2KkVpNM=
Subject key identifier: 10:91:A5:92:36:7A:DE:91:DB:69:5F:83:BE:5E:95:14:E3:6E:F9:CE
Certificate issuer: /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial: 018CC5DD062C0726A85A82C089DFB59A1EBF
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/EJGlkjZ63pHbaV-Dvl6VFONu-c4.roa
Signing time: Mon 01 Jan 2024 16:30:45 +0000
ROA not before: Mon 01 Jan 2024 16:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201973
IP address blocks: 80.246.97.0/24 maxlen: 24
80.246.96.0/20 maxlen: 20
80.246.96.0/24 maxlen: 24
80.246.107.0/24 maxlen: 24
2a03:f8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:06:2c:07:26:a8:5a:82:c0:89:df:b5:9a:1e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Validity
Not Before: Jan 1 16:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1091a592367ade91db695f83be5e9514e36ef9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3e:df:d8:34:2b:d7:5d:c2:6e:76:99:9c:b0:
39:ed:81:de:b8:d3:2a:60:fb:45:8a:e6:82:28:e3:
f4:b7:d1:20:6a:a3:c6:d5:5f:3d:ea:12:81:e3:d5:
0c:b4:4d:82:76:c1:d6:d5:1f:7b:de:45:b4:74:ae:
ab:59:ad:18:76:8a:23:c1:ee:f9:9a:dc:e3:b6:c2:
6a:17:f5:60:88:7f:6e:4c:b4:d2:6c:4f:51:cb:e9:
91:bb:14:5f:1a:9f:1a:7c:d6:db:52:8b:4c:18:f7:
28:78:8f:0c:e4:66:cc:47:76:45:bd:af:6f:64:0e:
cc:e5:df:ab:56:9d:b1:85:d2:1f:b9:6e:6e:1a:3b:
f2:63:96:e3:2d:9e:d0:54:ae:f6:95:0e:bd:9e:da:
45:22:12:62:25:54:f9:34:ec:d4:0b:f0:13:90:4b:
a3:79:f1:3b:fe:99:b6:eb:c6:4e:18:d9:8a:93:f7:
a4:da:36:51:50:15:f5:3e:da:8b:19:86:a8:5b:e5:
5d:4d:b1:8a:2b:50:18:13:54:51:12:79:81:d9:90:
70:23:3d:98:ee:b8:6c:a0:2b:cd:4e:1a:fc:23:24:
f7:96:e4:5b:81:53:e4:3a:7a:94:0e:cd:30:70:0e:
b5:76:ce:0d:f5:4a:16:26:0b:db:28:7f:6b:1a:94:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:91:A5:92:36:7A:DE:91:DB:69:5F:83:BE:5E:95:14:E3:6E:F9:CE
X509v3 Authority Key Identifier:
keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/EJGlkjZ63pHbaV-Dvl6VFONu-c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.96.0/20
IPv6:
2a03:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:de:13:30:69:40:65:87:46:2d:85:77:d6:d2:74:1d:86:44:
38:00:0d:07:08:28:ad:d6:28:e9:43:2c:6e:9e:8c:72:1c:56:
11:32:36:69:12:55:55:5f:07:41:87:73:5c:fb:0c:76:c9:22:
c4:3e:38:76:16:9c:82:51:75:b3:9c:f9:a8:17:c5:04:29:bc:
0a:ed:51:8c:45:2d:43:32:15:da:a7:8e:7a:3e:0b:05:f1:27:
fb:75:20:3c:3c:21:22:64:b0:83:16:e4:85:6d:59:9f:7f:b8:
c5:3f:19:d3:6a:f1:2a:b5:bf:84:92:95:4b:9f:65:bb:b5:7b:
3d:e3:08:a8:df:84:74:a7:8e:8b:86:2e:96:df:0a:d0:61:23:
5e:cc:23:93:f1:45:fb:c5:74:fd:99:85:6c:63:4e:6f:4b:02:
2a:27:a3:b2:36:ed:f1:8e:41:ba:bd:e5:25:3b:7b:bb:f4:00:
8f:df:f3:43:db:fe:5f:17:b1:8b:73:c6:55:18:5e:4a:50:6f:
70:72:8b:02:4c:b7:d5:3a:8a:b7:aa:12:64:1c:b3:64:3b:40:
a6:12:53:74:9a:02:3d:25:0d:2c:c8:22:d2:dd:83:02:9f:7e:
7f:66:52:63:fb:95:24:1d:93:a9:b2:ea:09:98:87:71:b9:3a:
48:5a:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:42:37 2024 by rpki-client on console-fra.rpki-client.org