Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/cYo7pqUO0SrQY02PvSf-KpzjlJ0.roa
File: cYo7pqUO0SrQY02PvSf-KpzjlJ0.roa (raw, json)
Hash identifier: OM/tcYn6RUV8s0H0RFDumL0jgDTiAA806yqd1yX3WQ4=
Subject key identifier: 71:8A:3B:A6:A5:0E:D1:2A:D0:63:4D:8F:BD:27:FE:2A:9C:E3:94:9D
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC49252DDE5AB09FC8CFF1692974D21B1
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/cYo7pqUO0SrQY02PvSf-KpzjlJ0.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209172
IP address blocks: 80.95.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:52:dd:e5:ab:09:fc:8c:ff:16:92:97:4d:21:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=718a3ba6a50ed12ad0634d8fbd27fe2a9ce3949d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:a2:b6:af:d1:e7:d4:1f:33:48:0f:ab:00:
56:82:d3:0d:a2:1d:93:61:05:8c:36:ff:3e:27:6c:
8e:99:a4:10:3d:5e:1a:87:a7:b2:ed:23:64:2f:3b:
0b:81:7d:83:8e:db:1f:3f:cd:1d:08:c5:a8:48:90:
31:bf:84:ae:95:b8:46:a2:f9:d7:a9:be:de:55:99:
1b:ed:a3:36:f7:9a:74:94:2e:7b:37:58:ba:29:39:
95:ab:a6:15:81:23:29:f3:d0:29:b5:cd:ad:9d:30:
bc:72:c0:a0:d6:e6:f5:fe:6d:5e:d6:11:8b:49:bc:
0d:5b:b3:5f:7d:f6:fc:0a:93:7c:c4:94:6d:f3:0f:
0a:aa:2e:f9:13:0f:09:61:aa:bf:64:82:29:68:ff:
e4:80:ee:92:75:f3:c9:a0:d0:1a:1d:fc:86:99:25:
30:62:f4:30:c1:ac:d7:1d:90:d2:d4:1b:cd:e9:60:
e6:7f:ba:00:d7:04:16:fa:62:ed:b2:bc:cb:72:5c:
18:6e:a2:31:77:93:f8:ab:b5:f4:0b:a9:9f:6f:56:
5a:55:5b:e3:8e:79:f5:f3:9d:ef:d6:bc:7b:83:eb:
fa:9c:e9:b1:d6:97:29:b2:25:6c:f3:6d:6a:be:5a:
6a:9c:7d:64:d6:2b:68:20:2c:1b:54:e0:79:a2:7d:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8A:3B:A6:A5:0E:D1:2A:D0:63:4D:8F:BD:27:FE:2A:9C:E3:94:9D
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/cYo7pqUO0SrQY02PvSf-KpzjlJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.20.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6f:21:ad:d5:04:11:ef:b2:62:0c:57:f4:fb:42:e2:27:48:
49:d9:8a:44:c9:95:c0:4f:61:a0:39:24:5d:b2:0b:d6:85:3e:
a4:0c:e4:b5:a2:e8:81:04:7a:ac:65:1e:87:16:18:96:4b:9c:
bc:65:7f:c0:ee:eb:e3:ff:96:e2:e6:59:07:f7:4e:36:a9:5f:
ad:c4:a4:de:81:f9:57:2c:d2:93:3a:83:8e:a8:52:08:3e:54:
75:39:aa:06:e0:a2:2f:7a:1c:f6:2e:74:da:56:58:00:fc:68:
96:9f:79:76:01:68:5e:85:e5:8b:87:79:96:18:6e:7f:c4:fb:
18:e9:3b:84:74:1f:bf:2e:89:63:cc:14:b6:f3:1f:9a:80:8d:
58:cb:8f:b7:87:c4:79:2b:b9:18:b1:b0:58:39:d9:5e:49:09:
de:02:ff:85:d8:44:5c:ca:34:a0:72:4f:b8:af:d2:69:bc:04:
dc:99:e5:a7:c1:c5:d6:d2:0b:98:a6:8d:8e:f6:59:34:77:a4:
05:a7:09:4f:b6:76:db:68:83:31:d6:1a:2f:e9:c6:ac:7a:97:
d3:e2:d4:c3:5a:5a:a1:58:fd:ca:6d:af:ec:d4:18:69:be:e0:
11:8a:fe:71:23:c9:49:5e:9d:cc:80:bd:e4:0c:ba:9f:a2:5c:
d5:23:af:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:21:05 2024 by rpki-client on console-fra.rpki-client.org