Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wOpkUcwwDUca20XIj9u7pckll3g.roa
File: wOpkUcwwDUca20XIj9u7pckll3g.roa (raw, json)
Hash identifier: 6BWgjWV0JYqJKsdSTVRCYNNCFAkacmYwS9BbfqYJDWQ=
Subject key identifier: C0:EA:64:51:CC:30:0D:47:1A:DB:45:C8:8F:DB:BB:A5:C9:25:97:78
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F8EEED7806C679E1200C7B4F217E5
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wOpkUcwwDUca20XIj9u7pckll3g.roa
Signing time: Tue 02 Jan 2024 04:30:03 +0000
ROA not before: Tue 02 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35182
IP address blocks: 80.233.245.0/24 maxlen: 24
80.233.250.0/24 maxlen: 24
62.63.176.0/21 maxlen: 24
62.63.184.0/22 maxlen: 24
62.63.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8e:ee:d7:80:6c:67:9e:12:00:c7:b4:f2:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0ea6451cc300d471adb45c88fdbbba5c9259778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:b5:09:bc:dc:64:41:2d:6e:3c:d7:2d:a1:
b2:be:ec:4d:7f:e4:a2:28:85:8f:05:e6:b6:03:e6:
37:f2:7b:0f:0a:51:13:71:d1:a3:89:7c:8b:98:54:
fa:c8:6a:cd:ac:d5:dd:d8:e4:b8:b6:e6:e7:f4:87:
3d:6a:86:ef:02:00:76:b8:4b:e2:51:bb:1b:61:9b:
66:7f:6c:37:7c:5b:17:da:b6:52:e5:80:da:b3:36:
62:43:50:13:73:09:04:73:f6:cd:57:91:5a:f2:dc:
e2:73:8a:58:59:72:5e:62:cb:3f:c2:67:c0:e9:0b:
c5:c3:a5:54:6c:45:5c:f6:35:d4:0a:60:f1:79:85:
5d:60:ca:3f:66:e2:0c:b6:b7:e8:4b:de:bd:1f:4d:
37:c1:71:25:b6:ec:49:73:c6:bb:3e:ed:d2:1c:80:
d8:be:3d:6a:ff:da:a5:1e:67:b0:4e:a3:8e:43:a8:
f1:6e:a8:1b:c3:a6:5a:b7:7f:3b:08:4d:cc:ed:ad:
f2:33:a4:92:4d:03:05:55:8d:6c:61:2a:df:1c:d4:
d1:fe:56:76:f9:bc:5c:13:ba:d8:bb:d3:98:53:c8:
68:a4:b7:d4:53:a6:22:d2:7b:65:ba:f6:86:31:2a:
7c:2f:a6:81:e6:26:51:a6:92:3b:4d:8a:3d:59:01:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:64:51:CC:30:0D:47:1A:DB:45:C8:8F:DB:BB:A5:C9:25:97:78
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/wOpkUcwwDUca20XIj9u7pckll3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.176.0-62.63.189.255
80.233.245.0/24
80.233.250.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d4:56:9a:3e:e7:71:98:52:11:7e:c5:7c:8b:5b:25:14:af:
0c:9d:3a:0e:23:84:4f:08:52:6d:e9:e8:60:29:32:c1:1e:38:
d1:0a:09:e6:1b:dc:08:ee:da:b4:af:a0:73:7f:8f:3f:ae:65:
5d:3f:39:ff:be:e6:59:ca:0c:c2:15:2f:56:38:8d:3e:c9:fb:
21:6a:b7:23:91:81:00:3d:f6:46:29:f1:d5:a7:8a:c0:06:97:
21:af:07:f5:2f:6a:45:8a:5c:84:95:f2:80:72:87:c3:51:3c:
56:4f:c4:b5:95:76:6f:50:7e:41:fa:cb:bc:b0:17:1c:ce:2c:
91:d1:03:f1:c8:6d:73:79:89:a6:c7:b9:8d:20:49:fb:f7:32:
9b:59:66:a6:97:ce:0b:c8:c3:01:b1:02:12:30:aa:69:f1:15:
e4:ff:e1:6b:c3:d6:a6:5a:58:8b:9f:d2:84:fa:32:2e:bb:25:
20:0d:ca:16:86:7d:bf:7c:db:57:76:6f:57:80:49:78:81:f1:
0e:5e:b6:d1:cb:b9:f9:5f:9d:8c:37:e6:fd:42:fe:3f:5a:48:
f9:c8:32:57:a7:cd:75:70:a9:0c:38:96:84:02:18:f3:3c:40:
d5:2e:52:84:19:c1:91:0c:92:06:0d:d5:c7:f6:4b:0e:9c:b4:
2f:64:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:24 2024 by rpki-client on console-fra.rpki-client.org