Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zoAGCpo2f-yPiC7w5Y2t_4YGUc0.roa
File: zoAGCpo2f-yPiC7w5Y2t_4YGUc0.roa (raw, json)
Hash identifier: KK5p8eqZI/yj/axkvFnDldfhrcIXRMS20QDyNe5seto=
Subject key identifier: CE:80:06:0A:9A:36:7F:EC:8F:88:2E:F0:E5:8D:AD:FF:86:06:51:CD
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0192D810DDFB5CE58A5344E04D5FBEF845E7
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zoAGCpo2f-yPiC7w5Y2t_4YGUc0.roa
Signing time: Tue 29 Oct 2024 11:37:16 +0000
ROA not before: Tue 29 Oct 2024 11:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 88.80.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:10:dd:fb:5c:e5:8a:53:44:e0:4d:5f:be:f8:45:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 29 11:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce80060a9a367fec8f882ef0e58dadff860651cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:79:8e:e8:84:b2:13:07:37:c1:1a:4f:d7:
3c:11:00:c1:46:ce:91:40:26:82:d9:67:00:a6:66:
9e:04:b5:8b:0f:3c:b5:85:b1:19:36:4d:f7:dd:8d:
ea:ac:15:b0:e7:b7:e0:84:00:ad:c5:86:b0:23:9c:
d7:07:25:aa:19:3b:e2:17:53:a3:26:e1:c5:e2:eb:
73:de:44:22:a2:2c:04:1e:a7:34:b6:d7:2e:ac:4e:
ee:40:4a:14:38:81:15:90:c6:5f:2c:58:96:69:5e:
2f:72:28:b7:89:49:6f:68:13:60:77:7c:18:0c:fb:
0d:95:f4:43:6f:31:4a:15:a7:34:9d:05:e8:a4:94:
57:36:fc:53:fa:bf:e0:55:fd:e8:e6:9c:63:e9:39:
bb:b4:d3:95:42:6e:34:70:06:42:ea:1f:3a:76:a3:
73:91:e4:00:c6:63:1e:f1:19:e2:9d:b0:8f:d8:48:
07:e6:58:f6:1e:69:15:42:3f:8f:6c:dc:92:cc:e9:
22:52:26:69:a9:3d:48:8a:e4:da:21:9d:46:94:53:
cd:9d:4c:4c:86:0b:e5:28:1a:26:8b:b5:f4:91:c4:
d0:8a:a2:aa:dd:44:97:9d:66:ae:94:10:91:bb:25:
10:31:35:c3:5b:8b:d9:c5:cf:60:df:c7:bf:46:a6:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:80:06:0A:9A:36:7F:EC:8F:88:2E:F0:E5:8D:AD:FF:86:06:51:CD
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zoAGCpo2f-yPiC7w5Y2t_4YGUc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5d:c2:f0:ba:e8:39:b2:66:4d:9d:3f:a8:a9:7f:65:12:37:
98:35:c1:c9:84:d1:58:c5:5d:fd:6b:f4:53:ae:c0:6d:7f:75:
06:a5:f9:1c:37:d1:79:ff:b7:53:94:66:52:22:c5:09:f8:e4:
42:00:1a:0d:26:35:74:a7:58:ff:24:aa:3d:98:07:e2:b9:6f:
bb:ad:20:d9:63:d0:03:c6:a0:9a:3a:b2:78:cb:b2:f3:77:82:
c5:e1:e7:bd:90:5b:69:d1:9d:e6:b2:b7:a1:86:7f:00:5c:ed:
fd:68:c0:25:15:1c:48:a7:a1:c8:5d:bc:1f:ec:33:b5:3a:7e:
ec:da:a5:24:fd:14:af:d9:47:e6:fc:27:99:e9:74:0a:69:04:
38:96:5b:44:a4:6f:f1:cb:cc:84:e2:98:78:49:e1:71:0d:e2:
72:58:fe:7d:e6:25:59:e8:6a:3d:43:b7:e6:49:03:9c:dc:ac:
a1:67:1c:4e:2b:40:60:6e:8d:f0:2f:58:1b:1d:14:5a:33:93:
d9:c6:17:3f:51:32:bd:e0:96:33:d6:82:fd:97:53:eb:57:38:
7f:ae:69:1c:e6:18:47:1e:0e:bf:f9:da:d8:11:2b:57:4e:9c:
40:52:da:48:f7:fb:67:dc:3d:43:6c:53:d2:36:93:fe:2f:a4:
e8:c7:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:06:01 2024 by rpki-client on console-fra.rpki-client.org