Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/nHMFhhn9YLwm3fxLLnKwnS54Stw.roa
File: nHMFhhn9YLwm3fxLLnKwnS54Stw.roa (raw, json)
Hash identifier: sZYXKGj51e7V0q4Rh1JbDrxNRGAHm0NfDEpWqnddoA8=
Subject key identifier: 9C:73:05:86:19:FD:60:BC:26:DD:FC:4B:2E:72:B0:9D:2E:78:4A:DC
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 018CC7940D10F63286128D1EFAC05C42DFCF
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/nHMFhhn9YLwm3fxLLnKwnS54Stw.roa
Signing time: Tue 02 Jan 2024 00:30:17 +0000
ROA not before: Tue 02 Jan 2024 00:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 80.210.95.0/24 maxlen: 24
85.194.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0d:10:f6:32:86:12:8d:1e:fa:c0:5c:42:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jan 2 00:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c73058619fd60bc26ddfc4b2e72b09d2e784adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:da:e4:81:bd:7b:e1:69:7e:63:68:78:29:
a7:ac:82:64:ef:0d:9d:a4:17:73:27:dd:bd:60:0b:
6e:c9:9e:1d:0f:c7:1e:3e:58:ae:c6:90:ed:33:cb:
dd:fe:db:4a:e6:35:88:96:77:ec:45:03:c2:60:c9:
81:8d:dd:af:d2:68:4c:60:1d:2d:de:9a:1b:42:f6:
59:06:3a:d8:55:fd:1d:3a:38:db:ff:16:06:64:6e:
3c:61:c3:7a:a1:72:7c:74:d1:24:e7:09:6a:8c:b9:
81:72:f8:44:24:67:d1:c5:fd:7f:cd:aa:d4:68:57:
3b:20:60:95:76:45:bc:b2:44:4a:12:0f:01:42:31:
70:4c:d0:e9:50:96:28:3a:ac:8d:20:42:d6:d4:4c:
db:00:ba:53:0f:b4:9e:23:59:43:d2:a3:80:45:58:
e4:9e:85:f2:15:87:1c:95:a0:0d:b8:49:6d:55:66:
dd:e8:59:a7:a9:1e:76:ed:67:a5:bb:74:36:6c:0a:
1b:10:c7:cf:95:dd:e6:a3:d8:21:0b:7e:7b:80:f8:
08:50:ac:37:d8:1b:f1:96:ae:c3:81:73:1c:cd:d8:
22:a8:3c:e9:35:ab:58:da:27:30:9a:27:8d:7d:96:
7d:34:9a:fd:de:a1:94:ff:ab:ec:11:bf:f3:c6:8b:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:73:05:86:19:FD:60:BC:26:DD:FC:4B:2E:72:B0:9D:2E:78:4A:DC
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/nHMFhhn9YLwm3fxLLnKwnS54Stw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.210.95.0/24
85.194.254.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:8a:9d:a8:09:c9:95:26:79:ce:86:2b:1f:95:9d:d0:ce:4d:
ac:16:5d:70:df:71:0e:f0:f8:b6:dd:23:86:29:b0:9f:44:a9:
b5:f2:c3:61:84:a0:fd:0c:2b:a6:a0:cb:90:81:5d:0d:eb:c4:
dd:6b:ae:e1:1c:3f:8d:63:26:f7:be:60:58:70:36:52:4f:bb:
42:0b:3d:38:99:90:51:0c:83:c3:8a:6a:06:8c:28:71:34:f4:
62:8d:e2:96:19:68:b6:39:9b:1c:63:8b:09:d3:6b:18:77:16:
22:01:c1:a9:4a:4f:f0:e2:39:30:91:06:61:9b:9f:84:54:8c:
78:3d:25:b7:8b:c6:d3:6d:1d:6d:c5:2e:61:03:73:0f:6b:71:
6e:5d:75:a7:80:0a:7b:1c:d9:d8:c2:2b:0a:50:f8:de:2c:63:
bc:74:cf:1e:39:c2:32:8c:11:2c:0d:ee:20:2b:98:84:74:65:
6d:2d:76:19:fd:ff:11:44:12:a1:59:be:6e:3f:0a:7f:af:3c:
7d:d8:68:d0:49:86:df:26:dd:51:01:d3:5a:df:bd:04:7e:d5:
cc:0d:2e:5b:df:66:2f:33:10:69:3b:00:f2:e1:d7:1c:fe:3f:
72:3a:d9:b2:a6:d8:61:a9:3e:dd:4c:0c:df:42:ad:a7:7c:ec:
18:2c:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:45:52 2024 by rpki-client on console-fra.rpki-client.org