Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/kEqdtCgYMpZ1hDdO6BU_oFhyu8c.roa
File: kEqdtCgYMpZ1hDdO6BU_oFhyu8c.roa (raw, json)
Hash identifier: iLgq3d/N3WgJs26bOZKc5lhfrRI/k+pS8RpHrXbTUDU=
Subject key identifier: 90:4A:9D:B4:28:18:32:96:75:84:37:4E:E8:15:3F:A0:58:72:BB:C7
Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial: 019007A68EB7A300F4D1FEBCC154E65E462E
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/kEqdtCgYMpZ1hDdO6BU_oFhyu8c.roa
Signing time: Tue 11 Jun 2024 14:14:34 +0000
ROA not before: Tue 11 Jun 2024 14:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20521
IP address blocks: 80.245.208.0/20 maxlen: 24
2a00:1cc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:a6:8e:b7:a3:00:f4:d1:fe:bc:c1:54:e6:5e:46:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
Validity
Not Before: Jun 11 14:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=904a9db4281832967584374ee8153fa05872bbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:ad:2c:e5:ca:a8:37:41:23:12:9c:fa:3a:
b6:02:3b:26:ba:65:6e:be:dc:db:c9:d3:62:a0:60:
ba:6e:78:63:c6:bd:01:28:3e:ce:06:e7:bd:28:82:
a0:76:1a:c6:5c:ca:bc:2c:c3:2f:84:a0:07:b0:97:
95:86:90:49:1e:c1:66:93:9d:1b:d8:5c:c2:3f:5a:
8f:ae:d9:b6:49:4b:9c:7a:9e:50:e3:8d:e8:81:42:
6e:74:ec:46:59:d5:97:0b:27:6c:ac:ba:f8:84:a4:
5f:03:3f:c2:39:29:0f:e8:91:38:09:43:ae:36:e5:
b6:cd:cf:8a:58:1b:01:af:10:bc:cf:b9:78:8e:df:
36:2d:46:00:87:c4:27:ce:5d:19:64:81:00:7d:c7:
52:e6:97:de:7e:17:1c:eb:66:6f:12:e9:c5:aa:c1:
74:40:10:d9:44:26:b6:73:6c:ae:a0:8b:bd:49:20:
23:d9:2f:95:e4:61:25:f0:56:22:53:f8:55:cb:2d:
27:8d:13:59:e5:4c:62:72:16:0b:68:18:21:e4:13:
fa:62:24:cf:28:0d:08:f2:1f:39:75:cd:28:33:38:
7c:ec:e8:32:f8:f2:90:7d:eb:13:af:10:ad:3d:ee:
82:10:17:1b:06:05:aa:3f:bb:09:55:c3:0f:de:91:
43:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:9D:B4:28:18:32:96:75:84:37:4E:E8:15:3F:A0:58:72:BB:C7
X509v3 Authority Key Identifier:
keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/kEqdtCgYMpZ1hDdO6BU_oFhyu8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.208.0/20
IPv6:
2a00:1cc0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:b7:42:28:f4:f7:13:04:d4:b9:6b:57:4d:14:19:8a:97:8a:
a7:82:27:64:27:55:fe:a0:8a:55:ee:da:68:86:24:1b:cd:a4:
40:04:b8:c2:cf:d0:18:eb:84:45:d2:a0:56:ae:8d:01:50:64:
d4:72:5b:bd:fe:32:a7:78:7a:ee:48:dd:0e:7b:16:86:39:ae:
7c:0b:21:27:c2:f4:82:32:d7:3d:47:7c:0a:56:5c:36:3a:a1:
41:82:07:f8:82:72:ed:76:d8:51:30:5c:5a:e8:97:e7:ef:e8:
92:eb:77:9d:23:bb:ef:00:a1:4b:9f:7d:05:63:13:1e:52:8c:
23:d7:78:85:db:01:fc:af:24:17:f7:8d:40:69:c3:a5:8b:65:
96:50:1a:98:a7:fe:2d:91:b8:f7:49:15:ab:ca:9d:3e:2f:74:
18:be:5f:1f:0f:2f:7a:b5:92:da:0a:17:20:bb:0d:c0:34:83:
f1:16:02:fa:bb:5b:f1:b0:ef:b6:ba:9a:a3:1a:8b:a4:00:5c:
58:b8:e0:e3:a2:a7:83:64:99:26:c0:76:be:2c:17:6a:f0:a8:
77:40:ba:d6:72:ce:0b:50:0e:4a:ac:a8:2e:31:a7:6b:28:7f:
1f:60:5d:e8:94:c7:6f:4a:4c:12:4f:71:b5:ec:dd:55:6b:4c:
08:ab:32:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 13:43:50 2024 by rpki-client on console-fra.rpki-client.org