Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/I6RrquLr7nlOXFxx9fHyvxs5XKg.roa
File: I6RrquLr7nlOXFxx9fHyvxs5XKg.roa (raw, json)
Hash identifier: FZfMn2m8vw7El4gjbHA3hcI3MyxMeyuuJoFJFr+HGo0=
Subject key identifier: 23:A4:6B:AA:E2:EB:EE:79:4E:5C:5C:71:F5:F1:F2:BF:1B:39:5C:A8
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018CC5DC1F8FA0C0B24F2D68A780CC2BE997
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/I6RrquLr7nlOXFxx9fHyvxs5XKg.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201728
IP address blocks: 80.120.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1f:8f:a0:c0:b2:4f:2d:68:a7:80:cc:2b:e9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23a46baae2ebee794e5c5c71f5f1f2bf1b395ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:1c:23:77:ce:dd:a3:e0:35:00:98:67:bf:
8a:4d:c0:d9:d7:f1:31:11:7f:1b:37:04:0c:a3:70:
f0:8f:fe:4c:c9:30:88:ce:92:54:70:78:4d:cb:73:
af:4a:0f:dd:ae:cd:5c:49:91:05:26:01:94:bb:bf:
b4:d1:d7:39:e2:8d:ac:ba:98:8a:96:de:78:ac:1d:
ff:9a:9f:a5:8a:b6:56:28:96:3f:50:76:22:74:5d:
4a:4c:ae:4a:c8:a9:bc:29:f8:44:c3:88:1e:a7:81:
e0:fb:d2:b0:39:f8:10:54:03:e7:09:df:dd:5b:c3:
0f:80:d7:bd:cd:53:92:0a:66:d8:b9:f5:66:22:d1:
4f:6c:07:52:a7:58:10:2a:50:51:78:08:29:d2:53:
69:c1:c5:4a:64:16:27:ec:0f:44:42:82:e3:96:85:
32:b7:ae:e2:35:9f:85:19:d2:0b:3e:f0:96:07:d8:
e6:fc:42:41:9e:02:be:14:9f:3b:1f:98:c6:88:b6:
96:5e:35:6b:c6:21:34:09:a9:62:f5:4a:d0:f7:b0:
88:b0:c6:3e:37:c9:65:84:9a:56:ff:95:5b:65:83:
65:ba:23:f4:8b:09:38:a5:f8:0a:8f:99:42:12:0f:
19:84:3b:f1:88:04:6c:18:a0:b5:95:ae:52:29:47:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A4:6B:AA:E2:EB:EE:79:4E:5C:5C:71:F5:F1:F2:BF:1B:39:5C:A8
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/I6RrquLr7nlOXFxx9fHyvxs5XKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.132.0/24
Signature Algorithm: sha256WithRSAEncryption
94:04:54:ff:62:fb:8f:6b:52:29:c0:13:da:32:77:ba:38:17:
d0:c4:c3:8f:3a:32:c6:bf:be:a5:ab:7d:fc:af:c9:a5:f6:07:
d6:44:f6:54:74:44:65:1a:0f:6e:20:43:32:88:95:e9:4d:1d:
4d:fc:d8:72:15:7c:f9:11:5d:a0:84:3b:56:30:d8:57:7f:e5:
42:ec:10:ee:64:68:08:d1:51:54:03:f2:28:c9:dc:c8:59:b3:
cb:c7:23:35:1b:9c:ab:da:d3:80:ba:b7:0d:3f:8f:44:cd:04:
ea:80:91:7f:bb:76:b1:33:45:b8:6a:a0:7c:0e:20:48:ba:3e:
57:1a:c8:15:1c:f5:19:53:45:9d:07:56:12:36:75:0f:b0:9e:
c4:70:32:d4:02:bd:21:99:cd:7c:34:1d:6d:81:ec:90:e9:72:
80:6b:99:a3:36:38:4e:12:37:dd:d7:61:ca:37:51:7f:99:6f:
9c:e6:ac:90:a2:c3:ea:a3:6d:7e:55:d6:0f:86:3b:17:e9:a5:
fb:79:bb:08:e0:a9:d5:fc:b3:c0:6e:d3:84:10:e9:9f:62:bc:
7d:ff:31:e2:c0:e2:d4:12:fa:b5:a8:aa:b1:74:89:8d:b5:6a:
59:2a:11:22:af:70:e1:65:dc:90:e9:d5:4b:19:2d:60:c4:f0:
c5:4d:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:00 2024 by rpki-client on console-fra.rpki-client.org