Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/1-BBXQY9kDmj0af62jZbdytIkJ4Q.roa
File: 1-BBXQY9kDmj0af62jZbdytIkJ4Q.roa (raw, json)
Hash identifier: R2RKl9HYYLnLCOwOoy31Cea/JtU4Dn0bd9r7ti0ddtI=
Subject key identifier: F8:10:57:41:8F:64:0E:68:F4:69:FE:B6:8D:96:DD:CA:D2:24:27:84
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 018CC6B797BB7D0670B823A6FAD9AED96668
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/1-BBXQY9kDmj0af62jZbdytIkJ4Q.roa
Signing time: Mon 01 Jan 2024 20:29:29 +0000
ROA not before: Mon 01 Jan 2024 20:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42244
IP address blocks: 80.77.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:97:bb:7d:06:70:b8:23:a6:fa:d9:ae:d9:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f81057418f640e68f469feb68d96ddcad2242784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:24:1f:b0:af:a7:d0:94:b5:e2:61:ce:9b:
15:b4:45:c7:8a:3b:54:dc:2e:7e:57:87:fa:cf:42:
ba:e8:a8:5b:90:aa:75:1e:2b:da:b9:34:2a:95:c1:
50:9f:e6:e1:5b:b6:64:e1:53:4d:f8:59:8f:00:07:
6e:a6:9b:10:d9:22:f1:74:07:79:2e:bf:ca:de:9f:
51:26:58:72:5f:b3:d2:ad:ce:f3:4a:a5:2a:81:44:
3f:80:99:da:b0:e0:aa:d8:ed:b7:5e:a0:04:d2:e7:
fe:69:97:ac:93:bb:4e:a0:e7:e9:a2:b8:18:f4:e4:
b3:63:51:34:7f:65:1c:f5:c8:08:b2:34:b5:b4:44:
94:ca:d4:90:97:45:21:44:dc:f5:0c:50:29:21:c2:
5f:03:a1:3c:87:7c:fe:ea:23:a4:92:d0:74:91:d6:
82:f8:46:f2:57:0a:88:b4:89:a4:93:44:50:42:b9:
c9:21:d6:29:16:6c:4d:e1:94:02:92:e5:fb:04:0b:
eb:ec:cc:66:80:d1:f0:39:34:09:0a:bb:ef:ac:38:
e1:25:48:34:84:c0:37:33:56:e6:6e:cc:d9:b4:da:
c2:d1:b0:ae:da:e3:8f:7d:2e:aa:c3:44:e5:46:db:
35:05:12:d4:00:bd:9f:9a:c2:3f:37:fa:a9:8a:13:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:10:57:41:8F:64:0E:68:F4:69:FE:B6:8D:96:DD:CA:D2:24:27:84
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/1-BBXQY9kDmj0af62jZbdytIkJ4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:67:f1:69:0b:11:1d:16:ed:49:3f:6b:92:12:af:15:1c:3c:
9a:38:ad:41:62:b5:c9:f0:61:9f:ae:e4:5e:63:87:b3:98:e4:
e2:fe:c7:5d:37:90:48:0f:17:bc:b3:d5:20:1c:0a:28:69:b3:
a1:0f:12:2b:c4:58:4b:86:0b:e0:8c:d4:ee:a1:fb:f4:08:84:
0e:51:78:9b:47:b5:b2:9b:e3:20:f9:e4:f8:26:e2:21:9b:ac:
90:9b:84:64:22:15:71:e6:13:dc:af:f9:54:37:70:7e:35:73:
8c:77:64:4b:3b:91:44:54:4d:41:3e:27:1f:60:bf:f1:66:c1:
fb:ba:3d:3d:eb:9c:be:18:c9:5b:fd:0b:16:83:35:b0:61:10:
70:08:43:0f:58:22:9e:1c:de:41:d5:de:54:7b:e0:57:83:5a:
6a:7d:1a:d1:84:08:ca:89:cb:68:04:f7:bf:40:cd:ce:5b:f9:
d7:a8:ea:9e:5c:c5:be:65:85:74:46:0c:33:a9:8b:40:b9:2a:
96:dd:b0:22:b0:6b:7b:3e:2f:c1:80:8e:4e:fb:19:43:cc:ff:
08:b2:ca:2f:80:28:9b:64:1e:86:c9:24:01:24:0c:49:cd:11:
1c:ff:d8:ca:07:3e:cc:68:98:48:3c:4f:21:1d:a7:67:9f:d2:
1b:0a:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:21:06 2024 by rpki-client on console-ams.rpki-client.org