Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/up2OhYVMkK27HzylZe3Qmqi5mzY.roa
File: up2OhYVMkK27HzylZe3Qmqi5mzY.roa (raw, json)
Hash identifier: TOd7Tr8KR0QIENiqPuogGWWcRUeotTQeqiXgragXyKs=
Subject key identifier: BA:9D:8E:85:85:4C:90:AD:BB:1F:3C:A5:65:ED:D0:9A:A8:B9:9B:36
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 018CC7940CE15D186A11F52718893216BDED
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/up2OhYVMkK27HzylZe3Qmqi5mzY.roa
Signing time: Tue 02 Jan 2024 00:30:17 +0000
ROA not before: Tue 02 Jan 2024 00:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 80.210.95.0/24 maxlen: 24
85.194.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:0c:e1:5d:18:6a:11:f5:27:18:89:32:16:bd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jan 2 00:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba9d8e85854c90adbb1f3ca565edd09aa8b99b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:49:64:b1:cd:01:11:93:9c:3d:b5:b3:d3:
e6:a3:7c:28:9f:30:31:5c:d1:a8:f5:5f:57:3c:60:
18:24:21:83:0d:f3:ca:3d:7c:e6:e6:b9:91:13:bf:
16:3e:22:e5:5a:1e:de:47:4c:6e:54:24:2f:f9:56:
43:6a:52:75:d8:56:0f:5b:d9:ad:67:4d:b7:07:5a:
0f:38:74:42:a9:dc:24:bf:25:1e:20:18:62:68:19:
60:07:41:9d:00:00:ac:9f:33:bc:90:91:17:ee:26:
14:7a:aa:3d:1c:ce:d8:fa:52:80:a6:a0:08:e5:a0:
cf:f2:2f:d8:91:01:7d:bb:b2:d9:b7:c9:cf:6c:63:
50:46:22:95:48:1b:e4:e0:cd:fa:30:94:1b:cc:58:
d5:d6:6c:d9:e0:39:cf:7d:29:b6:a6:fc:4e:cf:06:
53:ca:5e:ae:09:23:cf:91:6e:01:93:df:6d:0d:9f:
16:8d:28:8b:bd:07:f4:09:00:54:6b:ab:c3:28:b7:
6a:11:49:af:02:f4:38:b2:43:8a:de:69:d6:80:03:
93:10:3f:e2:8b:8e:65:ec:f8:15:fa:0e:c0:ca:6e:
30:6e:bb:de:2f:4e:81:2c:ca:2b:e3:dd:8f:53:16:
4a:98:cd:0e:4b:d0:e7:ac:74:58:2e:16:b4:9c:43:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9D:8E:85:85:4C:90:AD:BB:1F:3C:A5:65:ED:D0:9A:A8:B9:9B:36
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/up2OhYVMkK27HzylZe3Qmqi5mzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.210.95.0/24
85.194.254.0/23
Signature Algorithm: sha256WithRSAEncryption
82:df:44:70:68:58:bb:87:1c:f7:22:b4:9e:2b:6d:3c:ad:81:
ba:4e:98:9b:ad:00:9a:19:87:aa:84:76:c5:a4:38:ff:4d:68:
f8:e2:57:a6:c3:13:47:d6:27:a6:27:20:e1:62:f5:f7:ac:c5:
43:65:a6:45:12:40:9c:cb:7a:9e:7a:c7:11:3e:ad:4a:d1:d6:
b5:43:28:3a:cc:8e:bc:54:70:44:46:b3:f3:c6:c9:74:cd:1c:
88:02:fa:80:88:18:b1:f9:b5:c9:39:3d:31:c1:52:46:fb:a7:
62:4c:da:2a:37:b0:8f:ac:47:23:a2:eb:67:c9:96:c8:48:87:
e9:8e:87:0d:91:b7:4d:24:82:65:6b:b5:c7:ff:af:93:fd:15:
c6:1c:6c:49:36:88:47:82:c8:c0:47:fc:3d:97:a7:3e:a9:98:
ca:23:84:e4:1f:41:63:e8:b7:d1:91:fa:ef:95:d4:75:c3:fe:
c6:fc:05:b8:5c:cc:be:c0:a7:1a:22:e1:e5:53:49:71:5d:6c:
24:87:3e:13:23:60:da:e4:b8:3c:f1:f1:14:5d:ff:37:27:ae:
94:ed:a3:3b:e8:7b:70:88:97:6d:5e:8b:f3:ef:93:77:a3:5c:
ba:86:74:54:ba:6f:53:89:3d:9d:3f:b1:2c:a0:0a:7d:fe:b9:
19:56:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:53:27 2024 by rpki-client on console-fra.rpki-client.org