Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3kbuFjosr6hpduK7j1XJSiJp0oQ.roa
File: 3kbuFjosr6hpduK7j1XJSiJp0oQ.roa (raw, json)
Hash identifier: qCSVhL/OpjpGVHjXQodW6GInqX1tTBK4qK53A9O8b70=
Subject key identifier: DE:46:EE:16:3A:2C:AF:A8:69:76:E2:BB:8F:55:C9:4A:22:69:D2:84
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CC8DF92AE382BDE3D35B409AC7E20249B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3kbuFjosr6hpduK7j1XJSiJp0oQ.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47226
IP address blocks: 88.80.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:92:ae:38:2b:de:3d:35:b4:09:ac:7e:20:24:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de46ee163a2cafa86976e2bb8f55c94a2269d284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:61:88:4a:16:d7:32:5f:9e:e1:9d:3d:96:
0b:19:a5:8d:c2:f4:9c:d0:c8:e0:31:28:c8:54:2d:
76:f8:78:ce:da:f4:d8:c4:b2:6b:14:82:39:93:a1:
91:e5:7f:bc:9e:b8:61:78:20:bc:e2:88:3a:70:37:
0a:e1:5c:a4:34:17:e3:b8:96:8a:24:ed:3f:86:66:
be:54:04:87:92:04:eb:f3:74:c0:4a:a4:c6:02:f3:
14:81:46:e6:5c:d0:3a:a1:62:a6:a5:2f:47:89:6f:
c8:74:44:d1:53:cb:de:07:02:1b:b4:89:61:4b:20:
69:13:ec:74:a2:0e:8b:3e:0a:5b:b3:46:05:a5:c5:
26:45:d5:bb:cb:14:37:89:f7:0c:b8:7b:54:05:86:
a3:7a:26:23:21:e6:26:00:31:66:ed:7d:32:68:40:
4f:14:fb:fb:b3:c2:4f:20:aa:df:b0:60:cf:70:3b:
f2:58:8b:40:63:bf:ba:ff:f6:64:f2:95:3a:1f:22:
74:c6:c3:87:5a:40:08:bd:e6:d3:ee:8b:20:f1:90:
e0:02:16:de:05:f0:5c:ff:2e:8a:9c:ae:12:3e:34:
41:48:0a:85:dd:65:2e:8d:e9:0b:fe:cd:83:d2:2d:
15:10:35:6b:40:d3:cf:37:b8:38:e6:68:7f:49:2a:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:EE:16:3A:2C:AF:A8:69:76:E2:BB:8F:55:C9:4A:22:69:D2:84
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3kbuFjosr6hpduK7j1XJSiJp0oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:97:12:c7:ff:21:4d:b5:5f:49:9f:32:74:27:7c:62:f7:8e:
72:bb:e1:c3:44:54:38:41:4b:39:13:9f:ea:e2:a3:ee:fe:f6:
84:ce:dd:0c:b1:7e:82:1c:84:6f:ef:27:a6:0c:9d:11:2d:69:
03:9a:ae:14:d4:c2:04:cb:21:05:70:3b:b1:b4:d3:f9:85:ce:
47:de:04:27:bc:51:12:a4:1d:e0:7b:c1:31:f1:ca:be:b7:9f:
99:eb:c2:25:04:81:f7:83:75:89:97:12:77:7c:7c:8a:0c:38:
e3:cd:9a:b7:8a:0f:8f:fc:ed:ee:e8:72:63:9c:60:f1:8a:84:
d6:70:9d:91:a1:7e:cc:ee:66:2e:ef:80:92:be:4f:2d:66:7e:
e4:67:a3:2f:6d:97:33:e9:f8:29:9f:a9:f0:a4:dd:8f:a7:c1:
74:c8:f8:1c:c3:86:99:4f:86:71:8c:f8:7a:35:8e:ed:da:75:
f3:41:86:e2:2d:45:09:9f:e2:12:25:fb:cc:5d:4e:01:88:bc:
f2:e9:63:1b:39:34:43:37:a5:14:4d:17:d3:ef:2f:fc:e9:e6:
ba:77:98:22:43:8f:a3:60:60:a8:a2:02:e5:ca:3c:0f:ac:89:
6e:bf:b4:93:fb:6d:39:da:6e:2b:01:39:d5:85:6c:3c:ba:0f:
88:d1:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:00:23 2024 by rpki-client on console-ams.rpki-client.org