Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/qNrodSNfhjHrt-CL3KWtpv_qCIs.roa
File: qNrodSNfhjHrt-CL3KWtpv_qCIs.roa (raw, json)
Hash identifier: 06GXtuProy1u14ttbaFRl2phzgrBlEySLQ625/xJTeY=
Subject key identifier: A8:DA:E8:75:23:5F:86:31:EB:B7:E0:8B:DC:A5:AD:A6:FF:EA:08:8B
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CC26D536D398E6BE179668D7C9A93A586
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/qNrodSNfhjHrt-CL3KWtpv_qCIs.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57045
IP address blocks: 80.76.41.0/24 maxlen: 24
185.177.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:53:6d:39:8e:6b:e1:79:66:8d:7c:9a:93:a5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8dae875235f8631ebb7e08bdca5ada6ffea088b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:bc:b2:9b:65:69:c5:2d:f8:ee:02:c3:8f:
95:1a:41:20:d2:67:0c:bf:fd:19:15:9b:33:e3:fb:
59:a7:25:fc:fb:dc:b7:42:06:ae:2d:2a:3b:ea:ae:
76:2e:2b:f5:25:29:01:30:b4:43:7b:c7:6f:a7:24:
0f:bf:f2:be:12:7e:bb:93:7f:65:61:ef:18:da:c9:
2f:45:0d:42:cd:3a:77:1d:52:33:1d:1e:1d:0f:b9:
38:65:4a:5f:3c:5a:ed:ff:6b:a7:8e:13:01:77:97:
cb:93:3c:59:2c:06:d7:06:11:41:01:83:be:58:bd:
c3:8c:bb:d3:f0:91:1a:67:d3:8e:2f:a4:dd:a8:fd:
d7:17:f6:71:a9:b5:f9:67:f4:ff:1c:af:2c:57:4a:
97:49:02:a3:a3:40:f4:2f:ea:ee:cf:63:61:b2:49:
2f:3f:31:e8:e8:ea:6f:21:de:69:e3:21:51:a8:84:
e9:c4:f6:63:ed:e1:bc:fc:69:73:c7:75:2e:62:40:
64:3c:f4:5e:12:67:58:33:4a:17:90:8e:78:dc:17:
09:ab:b0:b6:5a:42:73:00:1b:74:45:c6:59:dd:ac:
c4:7f:31:46:86:30:2e:88:e1:bd:19:fb:00:ac:2c:
c2:a6:71:0f:fd:69:b9:3c:4c:c8:17:64:af:aa:f1:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DA:E8:75:23:5F:86:31:EB:B7:E0:8B:DC:A5:AD:A6:FF:EA:08:8B
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/qNrodSNfhjHrt-CL3KWtpv_qCIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.41.0/24
185.177.114.0/24
Signature Algorithm: sha256WithRSAEncryption
24:99:7d:3c:fb:1f:5c:dd:a7:8a:b2:5b:e6:d0:c3:82:32:20:
ba:1a:ee:0e:ce:35:44:ca:3d:c5:6b:0c:b4:c5:e5:35:bb:0f:
9b:e5:33:89:41:5d:c9:d8:f5:17:06:dc:89:a4:de:68:8f:72:
d6:d1:d9:7a:20:a0:ea:67:10:f9:50:6f:ee:8c:5a:f1:a3:aa:
cd:2b:d6:34:52:dc:d6:43:54:88:d5:2d:a3:b1:b1:bc:ff:13:
a5:1f:9d:2d:9f:f2:54:0b:3a:50:6f:0b:0d:d9:b5:bd:bc:1a:
c6:03:e0:a6:b9:3f:08:bb:dd:60:76:3e:97:44:f5:ba:19:b6:
59:93:fd:89:43:a1:0c:32:02:35:21:ed:d2:ee:c4:6d:1c:d4:
a8:15:e1:0f:f7:ce:4e:f8:17:11:b4:25:13:5b:6c:f4:80:4e:
8c:1f:6f:c5:36:e2:09:32:42:4c:9d:b0:a2:17:65:8d:30:62:
df:37:10:7d:d3:5c:04:c0:ea:36:9b:bf:a8:4a:8b:bf:f5:7a:
09:b6:f9:7d:da:51:c8:21:b9:2d:61:5e:e6:81:70:df:bc:2d:
57:ef:6f:4d:20:81:73:e1:ca:06:75:f1:92:4c:05:c6:c4:84:
a9:ec:fd:88:92:0c:62:95:0d:52:83:11:9f:60:ce:51:7d:6f:
40:6d:8e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:54:07 2024 by rpki-client on console-fra.rpki-client.org