Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/F7s91KoIj1ZfYv6eslwPJ9GkTpY.roa
File: F7s91KoIj1ZfYv6eslwPJ9GkTpY.roa (raw, json)
Hash identifier: 7CNsQFwOexBGk0I2UbSUn4SDfWly9O+9IWn189MkLJc=
Subject key identifier: 17:BB:3D:D4:AA:08:8F:56:5F:62:FE:9E:B2:5C:0F:27:D1:A4:4E:96
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018D4BD929658FC05762CDFEB128C4F99529
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/F7s91KoIj1ZfYv6eslwPJ9GkTpY.roa
Signing time: Sat 27 Jan 2024 16:55:39 +0000
ROA not before: Sat 27 Jan 2024 16:55:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216047
IP address blocks: 88.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:d9:29:65:8f:c0:57:62:cd:fe:b1:28:c4:f9:95:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 27 16:55:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17bb3dd4aa088f565f62fe9eb25c0f27d1a44e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:c3:98:40:ca:24:79:f9:e2:7e:cd:9e:ce:
e0:ff:49:3d:1e:ce:b3:5d:fa:9f:55:ec:b2:31:e4:
83:7c:b3:dc:e2:9c:fb:46:75:e2:03:87:1e:e9:4b:
d4:e8:08:0c:fd:8f:37:20:5c:13:3c:9d:4c:66:2f:
6f:9e:e2:83:1a:f5:7e:50:b9:93:78:ae:cc:79:12:
a3:ac:01:ee:b3:19:fe:c1:59:91:01:86:df:ca:5e:
dd:2a:d8:88:e2:ae:4e:17:00:f6:76:4f:79:0d:a4:
bc:c1:ef:90:25:ff:e0:dc:79:c2:8a:2f:db:ab:d1:
5f:be:40:d5:98:ad:a2:2f:08:e1:ff:10:9f:a5:c8:
55:f1:90:6b:e8:e2:fd:34:25:4f:88:df:5f:08:bd:
de:58:ee:79:e4:b2:0d:bd:0d:8d:f0:6a:c9:08:55:
24:47:e4:33:c8:1f:5f:40:07:b0:56:33:84:21:04:
32:c5:ee:a8:40:42:85:a6:34:d6:ca:79:a9:fa:48:
c5:9f:2e:68:13:a5:cd:44:0e:82:a2:df:f1:90:b5:
29:f1:fa:c7:0d:83:2f:3d:81:46:2a:13:9b:f7:8a:
81:7a:e2:81:06:82:e9:8b:9b:d2:0c:e4:4c:02:42:
36:03:7b:62:c6:96:a4:56:99:af:fd:9a:d7:4a:fb:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:3D:D4:AA:08:8F:56:5F:62:FE:9E:B2:5C:0F:27:D1:A4:4E:96
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/F7s91KoIj1ZfYv6eslwPJ9GkTpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a3:df:c1:d5:72:a0:30:db:7e:93:d2:f3:94:24:8e:5c:7e:
52:07:b9:35:62:0c:49:d5:22:7c:ac:d2:0f:33:67:98:7b:89:
76:6b:ab:9c:04:28:1d:da:ab:7c:f4:4e:89:26:dc:04:07:47:
ea:a6:67:fb:9c:9f:db:6a:7b:21:6f:8a:26:15:d9:82:df:69:
b7:3a:1f:4e:d7:5d:7c:64:ac:0a:48:81:2b:36:99:60:90:53:
23:cb:7d:44:63:0e:4c:19:9a:b0:f0:2e:d3:58:09:71:98:d6:
08:3b:f6:1d:42:71:b0:67:cf:5d:e7:8f:5f:6b:3e:34:2b:49:
ce:29:0f:14:45:11:ef:75:11:06:23:f5:77:cb:0e:19:76:20:
25:b7:d2:f6:6d:d8:f0:83:04:51:a1:77:63:e4:f1:70:ca:54:
cb:8f:e5:30:b4:fd:c2:76:5b:2b:35:86:43:6b:a3:2e:fb:79:
3c:8d:69:de:65:61:77:c3:33:c8:7a:55:33:50:f6:24:9e:61:
a0:1a:a2:96:f8:1c:eb:b9:7e:97:76:7d:85:4b:58:c6:4c:d3:
62:45:ee:b3:95:ee:8c:5f:fa:51:af:4b:4b:bf:8a:8a:de:b6:
39:3e:6e:83:ba:39:89:2b:cf:74:0a:70:e7:3c:5c:3f:30:62:
78:02:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:28:36 2024 by rpki-client on console-fra.rpki-client.org