Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/MLFqFWl1IRWNvyF0FM7VdYASwj0.roa
File: MLFqFWl1IRWNvyF0FM7VdYASwj0.roa (raw, json)
Hash identifier: XJY1IF/S5KEJ847vmvTgQ4fuvVnpjGaHiiaBHcVGdZo=
Subject key identifier: 30:B1:6A:15:69:75:21:15:8D:BF:21:74:14:CE:D5:75:80:12:C2:3D
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018CC5DC1DFC1A21A3B654BC6F26E63A3B0D
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/MLFqFWl1IRWNvyF0FM7VdYASwj0.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51187
IP address blocks: 80.120.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1d:fc:1a:21:a3:b6:54:bc:6f:26:e6:3a:3b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30b16a15697521158dbf217414ced5758012c23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:c3:a8:f8:5f:18:56:08:b9:72:e5:74:cc:
21:19:30:50:1a:60:65:88:e1:ea:c3:fa:23:35:6a:
d5:2c:c4:5b:35:29:af:09:8f:e0:69:fc:bb:ac:20:
81:8b:87:ca:4c:35:9f:72:bb:3a:ea:41:d0:c4:07:
ec:08:9a:ca:2e:6b:0c:d5:84:b4:bf:4c:82:e1:d8:
83:1b:cf:4e:0e:a4:0a:7d:4c:ff:1e:fb:1c:16:a0:
69:26:1f:1b:4f:24:05:99:04:e0:b1:8f:1f:f3:8d:
58:98:d9:df:6e:f0:0a:f6:22:bf:66:b9:4d:ad:3c:
d2:fc:aa:81:33:44:42:c3:94:44:85:4c:8b:2d:3c:
2c:82:96:a4:7a:b0:94:71:c3:5d:80:64:a0:20:a1:
53:a6:33:10:d6:90:fa:b5:c7:77:02:6c:16:d3:89:
40:9d:bf:6f:f8:90:1e:70:bd:51:c4:d3:45:1d:a0:
fe:fd:8e:0d:d7:95:48:5d:46:b4:42:2b:ec:40:fe:
8b:31:e1:b7:2b:ae:c1:5f:a0:9e:71:d9:c5:88:99:
79:8e:32:29:52:a2:2a:bc:07:68:cc:60:e7:60:17:
98:33:5e:2d:6d:50:66:57:9d:c1:58:99:9d:00:b5:
c0:17:ec:6f:0f:30:40:23:d8:e8:99:75:98:7e:82:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B1:6A:15:69:75:21:15:8D:BF:21:74:14:CE:D5:75:80:12:C2:3D
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/MLFqFWl1IRWNvyF0FM7VdYASwj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.18.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:e3:c7:16:9d:e5:54:54:6d:7a:06:c4:c3:4f:d9:d8:6d:c7:
6f:23:99:45:3a:a2:01:6e:d3:24:ac:51:6a:21:f9:0c:c0:84:
f3:4e:d2:f7:7e:1b:e6:12:8a:19:7c:7e:79:c7:65:74:56:8f:
b2:a2:b8:a6:a6:99:be:4c:5f:52:a0:a4:03:0f:df:20:3f:a5:
99:c9:da:3f:5d:de:f1:99:fa:3a:5c:7b:72:d5:17:26:33:80:
94:f4:32:b3:9f:87:9d:c7:ef:bf:4a:78:b4:0c:08:d4:3c:ed:
de:d7:d0:c1:7e:09:98:fc:dd:b3:61:e8:a8:43:e1:db:19:af:
87:3c:d4:50:ef:90:b0:63:58:59:7d:0c:c4:54:44:e6:0e:15:
f5:1c:7f:93:48:7a:13:f6:ef:3f:77:9c:fa:f4:50:c1:b7:28:
60:23:bb:04:a2:07:d5:b4:57:1b:b8:33:35:a3:f1:85:b0:fd:
1f:85:b7:bb:28:6e:df:91:0d:1a:35:dd:6d:10:5f:7b:22:c4:
de:db:cd:c9:6e:c2:32:6b:f7:35:cd:64:50:dc:cc:c4:d0:71:
86:81:8c:de:3c:1f:04:67:8a:4b:7d:1c:33:c3:e6:1c:ca:3b:
ec:8f:6f:b1:ac:af:14:48:6a:28:2f:4d:2f:0b:3e:75:56:c9:
4a:f4:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:10:53 2024 by rpki-client on console-fra.rpki-client.org