Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0qkU7lsNnj-qY3ISFuBWcTi5cGE.roa
File: 0qkU7lsNnj-qY3ISFuBWcTi5cGE.roa (raw, json)
Hash identifier: YCoGEb3aQH2HoqufBGb7k+4qKgpufccaCL/Oeqx4Hx8=
Subject key identifier: D2:A9:14:EE:5B:0D:9E:3F:AA:63:72:12:16:E0:56:71:38:B9:70:61
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 0190C9C737053A2E2EABE42F5BBD3272EAC9
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0qkU7lsNnj-qY3ISFuBWcTi5cGE.roa
Signing time: Fri 19 Jul 2024 06:56:34 +0000
ROA not before: Fri 19 Jul 2024 06:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 80.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c9:c7:37:05:3a:2e:2e:ab:e4:2f:5b:bd:32:72:ea:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jul 19 06:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2a914ee5b0d9e3faa63721216e0567138b97061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:c1:5a:a0:b6:cb:2d:b0:7f:92:40:5d:64:
c3:40:38:95:90:87:f0:ce:20:58:da:87:0c:4b:62:
e3:d5:fe:8d:61:0b:fc:35:0f:ac:7c:6c:d4:7b:65:
a2:7c:94:42:b4:e7:33:4a:51:16:8a:81:7e:c0:b0:
58:51:db:69:69:a1:29:da:25:88:d8:30:58:17:27:
e6:1e:cc:36:a8:a3:bf:62:d3:8d:d9:a5:da:f6:81:
95:8d:06:97:4f:73:59:b4:91:1b:90:08:3c:b7:fd:
5c:a6:17:f2:65:e8:97:64:01:78:c8:59:e7:ea:46:
0c:0b:ad:06:dd:47:1b:15:8e:dc:eb:1c:cb:54:de:
51:a9:9d:66:c0:64:3a:42:98:da:20:12:66:a5:3e:
2b:10:c9:e9:3b:3d:55:ee:33:1e:f0:43:4a:67:62:
cc:cf:6e:07:b0:93:19:1d:45:87:2e:db:4a:d6:ba:
7b:40:a3:3c:bb:ba:83:a7:6c:b3:04:4a:8d:48:44:
9c:1f:33:61:9d:1a:3e:15:6c:28:56:2e:53:1a:64:
a4:4e:b0:c6:e7:76:37:02:56:70:3c:d1:c3:10:f0:
52:ab:8e:b0:a8:82:02:ff:d1:d1:bf:be:38:a6:cb:
9f:1a:52:28:a5:c4:87:09:96:21:bc:98:61:d2:83:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:14:EE:5B:0D:9E:3F:AA:63:72:12:16:E0:56:71:38:B9:70:61
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0qkU7lsNnj-qY3ISFuBWcTi5cGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:1c:59:da:cf:0e:88:01:36:24:3d:e2:be:43:fc:76:28:2c:
92:d4:1c:56:82:bf:b8:06:79:1c:bb:40:e3:ad:73:17:f4:4a:
46:3d:47:46:63:c7:05:a6:2e:41:fc:7d:ef:20:51:ed:bb:75:
ba:06:35:b7:c2:dc:d5:37:4a:5f:f6:a2:c5:ba:2f:8b:24:44:
82:53:fd:09:ab:e0:15:6c:40:8f:e4:15:2d:10:1a:b3:45:ec:
ec:2b:f4:e9:b0:c6:ec:55:b5:d3:91:c5:1d:36:ee:c9:b7:b8:
4e:71:56:82:a1:d5:3f:f6:ab:bd:85:c3:88:9c:e4:e1:ae:f5:
59:09:0c:5f:af:d2:17:28:64:22:1c:f3:f7:1e:bb:2e:14:02:
da:0c:30:e7:38:7e:5e:79:c3:3f:ea:be:94:e3:3a:9b:a5:62:
4b:da:31:14:44:ac:42:10:0f:07:a5:05:f1:93:17:8d:1f:81:
0f:e1:71:89:a3:1c:bf:21:66:bb:5d:23:e8:5b:ad:1b:0f:86:
bb:14:a0:db:af:be:10:b4:ec:f2:1c:ba:f0:64:06:26:a4:c9:
43:d1:6d:2a:81:f7:3e:4e:f2:00:2c:ab:ac:39:16:f3:75:96:
f0:27:0e:00:73:19:0b:4a:32:e2:7a:81:2e:9e:0b:04:6a:09:
b4:54:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:29 2024 by rpki-client on console-ams.rpki-client.org