Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ht5OSGZXYj_vIlEEsUtpuP2OreA.roa
File: ht5OSGZXYj_vIlEEsUtpuP2OreA.roa (raw, json)
Hash identifier: IS+Wxk/JOCeRFQuSE1WzVkV+pQ1rmRQRRI/7M1njeO4=
Subject key identifier: 86:DE:4E:48:66:57:62:3F:EF:22:51:04:B1:4B:69:B8:FD:8E:AD:E0
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018CC5DC20C20C3EA59B67875ACA9845662C
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ht5OSGZXYj_vIlEEsUtpuP2OreA.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202856
IP address blocks: 80.120.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:20:c2:0c:3e:a5:9b:67:87:5a:ca:98:45:66:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86de4e486657623fef225104b14b69b8fd8eade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:ca:2a:ba:35:f9:5c:60:7f:da:a7:b4:92:
2a:ee:1b:75:a6:8a:1d:9e:6f:43:95:80:d5:46:49:
ab:e6:15:db:cc:44:24:50:6c:e4:8c:de:36:4e:68:
78:8e:98:13:72:c4:55:57:4b:37:dc:cb:10:99:a5:
ca:10:fb:99:41:be:db:cf:95:4f:b6:be:b0:b1:01:
dd:54:74:b2:75:65:8f:eb:f3:06:b8:bc:9a:3f:4f:
a5:c3:2c:30:76:ea:6f:79:38:d2:04:9a:23:17:bc:
f0:40:14:04:7f:13:b8:14:e8:b5:87:eb:6c:4d:27:
5a:ad:a3:41:21:d1:90:35:ca:3c:e3:54:04:5f:a1:
9c:cf:25:b3:ed:ca:f0:dd:97:b3:b9:de:bf:1e:31:
97:68:60:c3:84:7f:2d:9e:48:ed:a6:c4:e2:2a:40:
35:b1:d5:88:10:09:f7:d0:1b:ca:21:e5:66:87:1f:
7a:a9:5f:d5:73:46:48:d8:03:1e:1f:d0:74:38:54:
3c:8a:cc:47:5a:6b:ee:77:8d:df:ba:cc:ae:10:c2:
42:14:ae:72:d6:c0:81:ae:47:9c:d1:b8:2f:2c:96:
61:dc:41:8a:c2:be:cf:45:65:7d:fc:80:4e:b1:e6:
ce:4c:6d:15:ae:da:f6:61:5b:d1:1b:a7:65:32:b7:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:4E:48:66:57:62:3F:EF:22:51:04:B1:4B:69:B8:FD:8E:AD:E0
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ht5OSGZXYj_vIlEEsUtpuP2OreA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.145.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ad:aa:c3:17:36:6e:39:6b:07:24:10:b5:63:e3:b8:10:d7:
b7:36:b6:f9:90:64:5d:c7:93:b9:60:9e:df:2a:73:bd:b3:47:
ad:f4:e4:10:5f:5f:a9:30:fb:f4:4f:e2:2b:8f:30:f9:a9:b2:
56:16:6f:23:84:23:dc:6c:f3:4d:75:5e:4f:74:16:05:93:bf:
46:48:40:ac:ba:ee:ec:42:b6:13:76:be:e7:b9:c1:a1:ea:99:
13:1f:6c:f3:07:5a:0a:8d:84:45:3c:ce:ec:40:ea:3a:6d:72:
61:33:41:20:f2:46:95:d4:ad:d9:91:45:d3:c1:f0:1a:31:54:
db:c1:61:6a:70:2f:f1:a0:05:c7:88:f9:7b:f0:63:dd:6c:55:
00:36:f4:4b:e4:0a:25:00:61:78:f6:0b:dd:3b:ac:d2:3b:60:
51:ac:e9:f7:20:1a:84:44:0f:29:b6:27:a5:34:bc:e3:ce:2d:
32:51:61:b8:ec:5a:99:b7:1e:7d:c9:10:06:c8:ca:dd:b8:36:
be:71:97:7a:fb:9d:3f:32:19:07:0e:db:9c:80:49:66:0a:34:
85:84:01:72:b5:58:22:41:b5:08:36:59:c3:98:f5:9b:1b:a3:
97:db:de:dc:4b:71:ba:9f:9b:f2:34:11:49:ab:13:90:2e:35:
f3:15:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:09:28 2024 by rpki-client on console-fra.rpki-client.org