Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1-umJfM-uWxSvMJzfamzuY6Z1U7s.roa
File: 1-umJfM-uWxSvMJzfamzuY6Z1U7s.roa (raw, json)
Hash identifier: eeTDqEBdVoEFNVew1JPYNYVXffhU6Pa7A9/rMb1s7wg=
Subject key identifier: FA:E9:89:7C:CF:AE:5B:14:AF:30:9C:DF:6A:6C:EE:63:A6:75:53:BB
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018DF5B8D33DBE8E2E87C9EE2ACB43C3438D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1-umJfM-uWxSvMJzfamzuY6Z1U7s.roa
Signing time: Thu 29 Feb 2024 16:35:47 +0000
ROA not before: Thu 29 Feb 2024 16:35:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:b8:d3:3d:be:8e:2e:87:c9:ee:2a:cb:43:c3:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Feb 29 16:35:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fae9897ccfae5b14af309cdf6a6cee63a67553bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:c5:2a:db:43:54:2d:39:f8:01:64:19:71:
b7:c4:bc:ce:5c:5f:dd:fb:b8:bd:ae:1b:29:78:25:
ea:d5:b5:02:00:86:c7:61:f2:c8:0b:18:7c:be:43:
2d:51:d0:93:57:63:76:68:24:80:c7:c5:55:89:e8:
d7:99:09:75:e9:3c:f8:8e:d7:cc:0f:76:29:96:6e:
39:cf:56:60:0a:4e:e2:6a:2d:8b:43:bb:38:f0:fe:
5b:99:f0:0f:37:0e:54:25:d9:66:de:a2:c8:e8:e4:
1a:2c:02:f3:6b:75:a1:8e:41:e9:a4:3d:2f:de:ce:
d4:a7:36:81:0e:2b:be:b1:c7:0c:ed:ac:12:11:7c:
02:5e:78:28:97:b0:4e:a3:b6:a7:49:b5:40:8d:4f:
2c:d4:fd:05:49:5e:46:aa:ef:57:34:3f:63:da:ea:
a7:3a:d0:b5:1b:42:44:ad:85:ae:18:a7:a1:9f:43:
2f:30:ee:ba:3b:e2:32:ec:25:65:c2:c1:6c:d5:d0:
d1:cd:d1:65:a3:11:e5:39:64:b6:ac:3f:b2:02:93:
a1:b7:52:cd:2a:c5:31:81:48:cb:fe:d3:59:74:d7:
73:b2:0d:c8:81:00:69:ab:61:0c:f0:8e:29:62:ff:
6f:c4:d9:af:c8:97:27:8f:4a:b8:49:e6:e4:59:d5:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:89:7C:CF:AE:5B:14:AF:30:9C:DF:6A:6C:EE:63:A6:75:53:BB
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1-umJfM-uWxSvMJzfamzuY6Z1U7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cc:79:44:b7:c0:84:de:f0:6c:13:c5:a9:c3:34:70:a5:f5:
e1:7c:b8:e5:26:32:cc:93:4b:c5:6c:f5:97:9a:4b:67:5f:c7:
0f:22:45:98:29:94:29:ed:1a:79:cc:ec:78:d2:9d:a6:a7:8c:
e9:a6:bb:a1:61:15:13:10:70:d6:e4:9b:41:58:7e:03:4f:1b:
f2:66:06:55:8b:6a:7a:9a:2f:53:2b:8f:14:fd:b9:2d:0a:0c:
51:be:10:6c:57:43:42:ca:9d:d1:42:96:92:f5:e2:33:32:a3:
81:dd:af:98:db:fb:80:91:6e:de:60:6e:f0:7c:44:8d:7f:46:
30:fa:d1:4c:1a:98:1f:e6:d2:3b:6e:1f:01:5b:2d:14:01:18:
1e:75:d4:34:f4:a2:63:23:95:e8:0f:ef:e0:a5:6a:aa:3b:54:
c3:86:56:50:cc:c7:3e:0d:4f:3a:85:bd:ec:fa:9b:da:cd:8c:
bc:cf:59:55:0f:e8:f9:17:7c:61:fe:ce:47:6c:b1:a3:c1:2a:
00:c2:d3:8c:9b:92:0a:4c:84:46:98:96:8d:a6:fb:63:42:20:
77:da:9d:af:6f:12:7d:72:3d:7f:ec:1d:02:32:5c:e9:ce:e2:
d8:5a:85:ee:e5:c9:8d:84:c3:63:bd:b9:f1:9c:3f:3f:64:95:
4b:f0:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:47:20 2024 by rpki-client on console-fra.rpki-client.org