Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/c-_NDjT1ZP1Rt3m9I0_b6um3QU0.roa
File: c-_NDjT1ZP1Rt3m9I0_b6um3QU0.roa (raw, json)
Hash identifier: HzF71nW7gIdBk6cpNsU6KUJ6JNkzJLgapiU6Oqf4avY=
Subject key identifier: 73:EF:CD:0E:34:F5:64:FD:51:B7:79:BD:23:4F:DB:EA:E9:B7:41:4D
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 018CC26D101DE7FD53BB85136F053AFE01F3
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/c-_NDjT1ZP1Rt3m9I0_b6um3QU0.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60795
IP address blocks: 185.80.32.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:10:1d:e7:fd:53:bb:85:13:6f:05:3a:fe:01:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73efcd0e34f564fd51b779bd234fdbeae9b7414d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:2c:3b:84:f0:2a:21:d0:82:3f:1f:54:0c:
0d:53:37:b5:af:24:e8:77:06:c1:07:db:48:b6:1f:
de:ff:80:71:94:c7:9a:32:51:62:b8:4e:a5:6d:aa:
d7:50:82:a2:8e:16:40:81:c2:56:74:ea:5c:7b:dc:
e6:5c:aa:d6:7a:ff:bb:fa:64:6a:10:d1:8b:3a:c5:
f1:cf:24:e0:72:28:09:00:6e:34:bc:fb:46:a6:b0:
44:dd:3f:22:13:ae:99:dc:93:c6:87:5f:1a:e5:e0:
bd:7e:d9:23:fa:51:c6:f8:91:95:fd:de:78:0a:3a:
43:8e:a2:29:81:d7:31:e1:0e:4b:38:32:c9:9f:5d:
a8:db:88:15:e2:93:cb:5d:da:54:b5:5f:41:1c:fc:
fb:d2:ae:27:82:2e:63:ba:f5:25:f8:1d:92:b3:e4:
22:4f:d4:4a:43:98:6a:a1:54:3d:ca:6a:0c:f7:2d:
34:60:7d:e2:04:2d:ca:dd:3f:e2:a0:95:57:0e:7b:
65:41:fe:c0:bf:35:9f:30:fc:13:24:d4:f5:c5:87:
81:1a:6f:7d:02:2d:29:44:37:2b:0c:15:4a:b1:61:
40:88:f1:9f:7f:87:a5:6b:71:81:65:c6:ba:be:a6:
c5:14:f1:60:c9:94:a4:c9:a5:c4:12:66:4e:e3:4a:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:CD:0E:34:F5:64:FD:51:B7:79:BD:23:4F:DB:EA:E9:B7:41:4D
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/c-_NDjT1ZP1Rt3m9I0_b6um3QU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.32.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7e:0f:b6:42:4b:3f:ac:44:3b:cd:36:80:79:e8:63:98:ca:
fe:70:e7:8b:14:e9:73:48:08:8e:36:0e:96:e9:20:cb:4e:f4:
77:15:bf:7c:67:4e:e7:2e:ac:92:48:43:ec:05:3c:9a:2e:8c:
c5:f5:f4:ed:c0:93:11:22:d2:0e:bb:79:78:8f:a1:e6:5d:3a:
2e:77:34:18:f4:7d:3f:bc:b0:eb:a9:ad:e6:df:63:70:97:a3:
34:4a:0f:15:ae:38:98:84:65:87:a9:fc:d9:0a:88:e6:22:c5:
b2:ca:e4:af:1f:d6:98:ed:53:d4:49:66:6b:88:e4:4b:15:b0:
f0:58:44:86:1b:01:00:ce:e1:43:92:ec:46:c8:82:74:f5:b0:
a7:49:7b:75:ad:be:d1:3d:6d:2d:6e:d9:2f:ee:42:53:72:26:
da:4c:12:99:7c:65:07:71:a7:d2:fa:c5:5b:5f:31:3b:67:83:
7f:d6:c3:de:16:24:28:cd:c8:ec:64:f7:13:a5:7e:ef:da:67:
37:5b:88:94:2f:51:28:fa:01:2a:e6:ae:04:e2:ab:22:79:76:
fe:26:8a:5b:f5:ae:de:f2:07:83:b8:b1:28:b5:31:04:2c:3e:
6e:bb:8e:10:02:98:c4:3a:d6:ef:54:ba:fa:89:a6:89:77:11:
6c:a4:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 11:32:59 2024 by rpki-client on console-fra.rpki-client.org