Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zWVO0bmE1zPkIOHgZ5QDMLYY6-4.roa
File: zWVO0bmE1zPkIOHgZ5QDMLYY6-4.roa (raw, json)
Hash identifier: JRGxsGnYx62g8u6qqIvup+OWBx7FHMcQTxTCh9QlTp0=
Subject key identifier: CD:65:4E:D1:B9:84:D7:33:E4:20:E1:E0:67:94:03:30:B6:18:EB:EE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D7D6F3A372FF1E3F894408472BD1FCEA7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zWVO0bmE1zPkIOHgZ5QDMLYY6-4.roa
Signing time: Tue 06 Feb 2024 08:00:57 +0000
ROA not before: Tue 06 Feb 2024 08:00:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30937
IP address blocks: 80.68.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:6f:3a:37:2f:f1:e3:f8:94:40:84:72:bd:1f:ce:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 6 08:00:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd654ed1b984d733e420e1e067940330b618ebee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fd:8d:fa:bd:26:97:c8:9a:4d:93:29:d7:c0:
e7:2a:a2:09:30:6f:af:37:d9:9b:4a:db:15:4a:99:
8a:18:84:7c:11:31:d6:a4:81:f6:48:01:71:c7:1f:
37:d3:b9:d4:e9:3a:2d:38:2b:82:10:35:58:f0:8a:
2f:7c:9c:9a:ae:c6:3e:11:c6:a0:a1:18:86:ea:0b:
bb:5c:7d:20:49:47:78:27:2f:e8:f6:6f:32:11:d8:
61:f3:ed:8d:89:2f:35:69:67:7b:97:f8:f7:35:cd:
72:85:4b:e1:1d:ce:ea:da:65:07:86:a6:de:64:02:
6a:1c:3f:05:7e:1c:4d:ad:61:a3:95:4a:c3:c3:32:
d9:99:d0:86:b3:c3:06:75:46:09:3a:06:23:cf:b9:
e8:1e:71:25:45:e9:50:fe:4a:18:91:c8:60:f0:c9:
4c:df:34:15:18:ba:0f:8e:d3:fd:d1:1a:05:96:00:
d0:f6:c0:15:8b:f9:ea:30:77:ab:0c:98:97:45:82:
d1:45:33:60:1d:60:75:45:37:10:db:80:23:02:3c:
7d:d0:1a:51:2f:31:28:a8:cf:70:f5:b9:fb:16:90:
35:ab:72:f4:b9:18:2b:14:13:e9:35:a8:27:f1:c9:
f8:78:1a:b8:e6:e2:b9:4a:31:15:b8:80:76:a2:d1:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:4E:D1:B9:84:D7:33:E4:20:E1:E0:67:94:03:30:B6:18:EB:EE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/zWVO0bmE1zPkIOHgZ5QDMLYY6-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f3:34:60:5c:09:c8:4d:df:00:34:1a:05:bc:51:7d:11:3b:
f4:a7:65:5a:b8:46:e7:b5:30:4e:7f:09:33:dc:cb:4d:a1:5a:
36:a7:0a:e4:50:fc:5f:7c:92:6d:68:66:ab:5f:eb:ee:b6:44:
2e:04:c0:5f:07:86:9a:98:b3:c8:0a:cb:ef:5f:be:ee:4e:e9:
7c:3c:27:07:6a:1c:9f:87:7f:8f:1b:f0:eb:84:bb:8a:67:3d:
2e:a5:25:3f:b8:9e:98:ec:d3:fe:4a:40:b4:d6:4c:75:25:31:
f6:3a:e3:70:42:f5:cb:44:9e:ce:ab:bb:51:87:96:5b:e3:a3:
50:ae:29:1e:9e:6a:43:ff:6f:cc:ff:33:7c:62:fc:74:a9:73:
4f:b3:c7:2e:12:99:f9:93:7a:98:ee:e6:4f:01:dd:7f:18:b7:
cf:07:51:c1:2a:9d:59:3c:a2:65:69:04:31:ce:08:be:d1:8d:
b7:97:de:36:db:89:29:cd:f5:f1:07:79:3f:5a:4a:71:c1:08:
57:56:82:d1:e7:ad:b4:b3:c5:9a:f3:97:e8:cb:ae:55:08:d1:
3e:f3:ed:64:49:79:64:c4:bd:a6:91:7a:71:31:5b:78:df:6d:
dd:e1:f1:6b:21:f6:b6:5e:e5:a5:63:e7:5c:2d:d4:41:6c:7d:
85:62:62:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:08:55 2024 by rpki-client on console-fra.rpki-client.org