Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fWEPL0iWpFH5fakME4xpcTkVvRM.roa
File: fWEPL0iWpFH5fakME4xpcTkVvRM.roa (raw, json)
Hash identifier: 2DVvKCGM6hTbUXjBSYhc8sXfr75s1CYTMA3IRrys+fg=
Subject key identifier: 7D:61:0F:2F:48:96:A4:51:F9:7D:A9:0C:13:8C:69:71:39:15:BD:13
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018CEF91D3960B9F0CEC720E575B6EAC7AE6
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fWEPL0iWpFH5fakME4xpcTkVvRM.roa
Signing time: Tue 09 Jan 2024 18:52:40 +0000
ROA not before: Tue 09 Jan 2024 18:52:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 80.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:91:d3:96:0b:9f:0c:ec:72:0e:57:5b:6e:ac:7a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 9 18:52:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d610f2f4896a451f97da90c138c69713915bd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3f:5a:ae:f7:b0:f1:3f:d2:5d:36:f4:31:d1:
f0:2c:0b:c2:36:d7:b4:31:cf:18:6b:30:9d:b0:51:
42:5b:40:da:01:09:f4:25:db:55:6d:17:de:07:3c:
a8:72:b5:d5:65:1c:bb:df:4b:0b:da:66:66:0f:85:
fa:b1:0a:e6:fb:fe:bd:71:e9:ba:61:83:f7:60:da:
db:b5:53:d1:c7:b0:94:ed:76:55:3b:23:25:02:a5:
02:a8:ba:dd:59:1b:ce:98:09:91:41:69:85:cb:ba:
b0:96:98:22:5a:ed:d2:c8:17:c5:a7:63:dc:0e:74:
a4:16:27:b2:e0:5f:73:03:b4:bb:a4:a3:11:e5:31:
9b:f7:bf:9e:5d:86:2d:86:ef:19:da:42:1f:f7:37:
a4:1d:5e:50:69:df:82:38:63:c4:42:1b:ce:cf:c5:
c9:00:d2:7a:3b:58:68:64:8a:07:84:4f:96:83:08:
67:a9:0a:10:69:17:35:0c:a3:3d:cf:a0:73:6f:17:
4c:ec:fd:fe:7a:3c:22:be:b4:5e:b4:7a:7d:9c:ed:
fe:c8:52:97:60:9f:cb:d2:b7:d5:41:48:e4:6f:0e:
5a:6c:82:cb:8c:e7:40:6b:53:cf:fd:00:4c:8f:ae:
ec:d7:14:16:09:96:7a:cc:1a:02:12:94:52:18:2b:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:0F:2F:48:96:A4:51:F9:7D:A9:0C:13:8C:69:71:39:15:BD:13
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fWEPL0iWpFH5fakME4xpcTkVvRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
20:a6:ab:e3:4c:d6:5f:d6:8f:aa:d6:92:bd:35:f2:95:01:02:
40:b1:91:a2:62:fb:86:99:88:12:09:d9:46:19:e7:89:b2:8a:
c3:b5:ec:6d:a9:63:cd:3e:9b:69:e3:c9:c5:be:55:f0:10:98:
1e:f1:38:0b:6b:9a:37:26:f0:67:d4:ba:c6:0c:2b:2c:79:59:
1d:76:d1:52:ae:3a:b5:1d:9c:fc:17:c8:48:4d:6a:98:af:7b:
50:c1:90:91:bd:9a:41:01:10:88:eb:fc:2c:9e:13:6a:92:f5:
5a:3a:d1:b6:cd:88:68:ea:da:04:a8:f4:e7:d9:a3:62:13:ff:
ea:83:a6:51:22:09:5b:14:c0:aa:11:23:4d:52:f3:71:38:ca:
1b:0a:3d:36:e2:dd:6d:cb:6c:85:79:90:9b:7d:68:31:39:54:
6c:6c:cc:4d:74:34:e4:c2:8a:9d:ea:78:bc:75:19:7e:45:bc:
a5:f0:08:74:11:c6:01:9f:3c:3f:3e:cd:ca:16:75:5f:bf:1d:
5e:d5:b2:44:6b:56:57:08:1c:9b:7a:33:81:4f:44:f1:10:f9:
b9:5a:80:9e:01:b9:3a:3f:9a:c1:76:23:21:e3:ad:2e:fe:a8:
70:80:37:d1:98:cc:e1:dd:62:aa:96:b8:29:e3:35:36:8e:9c:
ac:86:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:26:09 2024 by rpki-client on console-ams.rpki-client.org