Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/A8ZamxFiefAYo3OuaL2EjivsQak.roa
File: A8ZamxFiefAYo3OuaL2EjivsQak.roa (raw, json)
Hash identifier: 1fFb39Z6VlihVCxpfhnP+SXiy2wF5/qpoTG2WZjaxeI=
Subject key identifier: 03:C6:5A:9B:11:62:79:F0:18:A3:73:AE:68:BD:84:8E:2B:EC:41:A9
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 018CC3B6A195FFFC4B66D54AF23D873AF201
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/A8ZamxFiefAYo3OuaL2EjivsQak.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34655
IP address blocks: 80.77.114.0/24 maxlen: 24
188.227.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a1:95:ff:fc:4b:66:d5:4a:f2:3d:87:3a:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03c65a9b116279f018a373ae68bd848e2bec41a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:81:89:4f:56:65:6a:d6:cc:2a:7c:9a:a5:
ee:a0:17:b2:c4:36:a5:a5:7d:13:db:05:3f:85:42:
37:65:c7:ea:c2:56:80:29:b9:a0:d6:8f:0c:6c:66:
ab:85:48:3f:ff:d4:d6:38:6a:1f:08:22:a0:94:18:
f8:47:1e:b9:b6:26:7c:5b:03:75:3a:97:ba:c1:0c:
fc:99:c8:5b:93:2b:0f:33:29:f1:a2:66:a5:56:73:
1a:78:69:57:27:0a:1d:e7:1e:f4:c2:41:49:4d:78:
9b:12:86:0d:2e:73:a8:44:5d:9a:75:4f:da:62:89:
da:c6:57:78:ba:a7:b5:a4:9c:a9:5a:91:e4:3d:c2:
a5:12:be:52:3e:1a:c5:c8:70:f9:96:4b:2a:4f:0f:
fe:be:9d:1c:25:73:dc:2b:d3:00:3e:2d:8f:22:5a:
90:62:0c:5c:ab:7f:8a:54:18:e3:bb:d1:19:05:4c:
87:64:e0:7a:75:30:cb:ab:e7:27:7e:41:eb:3e:ba:
39:48:16:68:bb:04:96:b9:8d:b3:05:1f:4f:6c:71:
b1:e2:ed:a7:cb:8b:28:cd:f6:3b:2b:7f:41:3e:96:
eb:86:60:49:7b:d5:c7:0f:ac:1b:60:bc:c8:bb:e0:
b8:71:69:06:ca:0b:9f:84:86:ed:7a:65:47:83:68:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:5A:9B:11:62:79:F0:18:A3:73:AE:68:BD:84:8E:2B:EC:41:A9
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/A8ZamxFiefAYo3OuaL2EjivsQak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.114.0/24
188.227.231.0/24
Signature Algorithm: sha256WithRSAEncryption
60:14:f2:c5:70:a4:be:38:0b:a6:e9:3a:7c:75:c5:4a:61:a0:
58:66:87:8d:c3:1e:cd:ad:c9:0a:58:27:8c:4e:d6:9d:8b:36:
e8:f7:15:f8:aa:b6:be:5a:ed:0b:c1:2c:ad:18:ca:7e:3b:bd:
97:cb:35:e5:f8:bc:96:8c:06:76:3b:01:7f:c0:6f:99:84:1c:
15:fb:4f:ff:95:a5:bd:5b:97:33:d1:48:99:97:d9:64:4e:dd:
dd:07:45:32:a5:d3:38:eb:95:69:1d:fe:1d:78:67:bb:ba:b2:
01:16:86:cf:c5:eb:26:52:02:95:36:fb:49:a5:3f:68:e2:a1:
aa:7c:e8:e1:24:1a:aa:3f:68:7f:46:eb:5c:70:02:0c:38:22:
66:bd:99:1d:0d:c8:0c:79:42:5f:46:24:73:6c:62:8a:c4:f3:
59:5f:d7:65:94:24:60:7a:45:cd:70:60:78:e5:e2:fe:07:61:
5c:d0:3e:29:c6:88:da:eb:e1:d7:04:5a:e4:dd:84:f8:37:1d:
75:7f:6d:4c:e8:23:0d:58:f8:64:14:c4:b1:60:fd:ac:08:ca:
a7:bb:fa:76:0e:12:fa:e3:53:1c:c7:5b:5e:ff:04:d5:c9:54:
13:7d:60:76:64:9e:ab:ea:b7:81:3c:69:0a:1b:a6:f4:23:0f:
eb:14:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:05:26 2024 by rpki-client on console-ams.rpki-client.org