Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/r9Zupp64oU8MkLKHNui7Jf41FPA.roa
File: r9Zupp64oU8MkLKHNui7Jf41FPA.roa (raw, json)
Hash identifier: xTX6807kufHuDG2Q8aPKWohJJYBwF4XSfqltGHtqXNE=
Subject key identifier: AF:D6:6E:A6:9E:B8:A1:4F:0C:90:B2:87:36:E8:BB:25:FE:35:14:F0
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0190122DDF4093F6D92F2F1F35059AA36532
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/r9Zupp64oU8MkLKHNui7Jf41FPA.roa
Signing time: Thu 13 Jun 2024 15:18:34 +0000
ROA not before: Thu 13 Jun 2024 15:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214722
IP address blocks: 80.73.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:2d:df:40:93:f6:d9:2f:2f:1f:35:05:9a:a3:65:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Jun 13 15:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afd66ea69eb8a14f0c90b28736e8bb25fe3514f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:2c:a7:6a:ae:7a:34:ae:a8:fd:62:19:f5:
10:82:e2:f7:f4:c3:6a:e4:84:58:d0:44:4e:10:fb:
0e:42:9c:51:f8:fb:83:63:dc:a2:8e:96:21:c2:3d:
8f:63:e1:7f:5a:e2:87:ef:43:e7:4e:a8:18:40:1a:
9b:c3:65:21:b1:1f:6c:f8:27:d9:9d:0b:55:22:67:
77:23:a3:9c:56:2e:a3:48:bc:35:d1:1a:09:bc:e3:
69:d0:eb:e4:ba:49:4b:f9:81:85:86:7d:23:e6:c4:
6e:5d:2a:7c:de:2f:4c:86:3a:ca:2c:83:55:bb:cc:
3c:c0:96:f9:6f:7d:9d:d4:2d:fc:66:56:ee:ac:1d:
70:57:0f:f0:a9:9d:47:a2:80:d9:af:8e:64:18:0a:
63:5d:c2:f7:6c:ad:e2:cf:64:cb:b8:dc:58:5e:b5:
ad:62:70:06:94:bf:72:94:c0:58:2c:92:44:3b:8e:
34:78:7f:aa:de:d4:d7:99:6f:73:69:4e:e1:36:73:
96:f2:cf:e3:ce:a0:a4:b9:cf:2f:48:cc:a2:9f:89:
a8:58:da:52:2c:cb:eb:4c:a6:3e:cc:ba:91:4b:c1:
4d:df:ec:7d:30:0f:be:cc:ce:9b:03:44:fe:e3:ec:
9e:f0:eb:d6:24:82:de:4b:1d:3a:06:ac:53:0b:fa:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:6E:A6:9E:B8:A1:4F:0C:90:B2:87:36:E8:BB:25:FE:35:14:F0
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/r9Zupp64oU8MkLKHNui7Jf41FPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.104.0/22
Signature Algorithm: sha256WithRSAEncryption
38:82:a0:24:7f:5e:3e:17:38:02:4d:e8:b1:2b:b0:7b:73:9b:
e4:d5:f7:15:06:09:cd:b7:2f:1c:64:a5:e8:c4:03:66:96:65:
3f:f3:6b:45:2c:f5:3d:24:c4:ce:22:88:25:70:19:a7:5f:b8:
0f:bf:be:1e:43:c9:f6:79:be:56:ef:46:80:49:54:93:0f:85:
6b:a9:57:1b:ca:06:8a:bd:dc:fb:b5:53:25:10:13:73:56:a0:
e4:c9:dd:fb:20:81:03:b8:70:0c:51:d8:dc:0b:67:fd:62:38:
36:b9:db:b1:9f:48:89:9c:7c:53:1c:c3:5f:5c:ed:71:81:eb:
f0:d4:1e:0a:48:18:25:5e:26:d3:66:fb:b6:89:e9:4d:0b:42:
82:e9:4a:3f:91:8c:e5:6e:ee:56:24:a4:37:fd:05:4d:01:88:
6d:ad:cc:fb:22:cb:00:3c:21:2b:0a:ca:81:6d:26:3e:06:c8:
7d:8d:b8:b4:77:60:c6:9b:ff:2f:50:d8:0c:15:0d:2f:55:81:
6e:aa:69:a0:b7:ac:58:b6:63:a9:81:92:8a:6a:f1:e2:bd:a7:
2a:7b:6c:9a:00:ab:34:99:92:fb:0f:7c:03:1d:99:dc:a7:95:
0c:2e:60:c8:99:7c:1c:83:02:f7:51:c1:31:b9:77:c6:02:a8:
28:1c:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:29:09 2024 by rpki-client on console-fra.rpki-client.org