Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/80HHmgB4kN4l7E0-poCi6WhJuRU.roa
File: 80HHmgB4kN4l7E0-poCi6WhJuRU.roa (raw, json)
Hash identifier: oDALHnxaNQtgtD99hto/qFRwndKBhBnEe8NpHZmUB4E=
Subject key identifier: F3:41:C7:9A:00:78:90:DE:25:EC:4D:3E:A6:80:A2:E9:68:49:B9:15
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01914267CDEDD9D7B4704D0AC8FF13329F42
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/80HHmgB4kN4l7E0-poCi6WhJuRU.roa
Signing time: Sun 11 Aug 2024 17:06:24 +0000
ROA not before: Sun 11 Aug 2024 17:06:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 2a0f:7802:e000::/40 maxlen: 48
2a0f:7802:e100::/40 maxlen: 48
2a0f:7802:e200::/40 maxlen: 48
2a0f:7803:fb40::/44 maxlen: 48
2a0f:7803:ff90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:42:67:cd:ed:d9:d7:b4:70:4d:0a:c8:ff:13:32:9f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Aug 11 17:06:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f341c79a007890de25ec4d3ea680a2e96849b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:02:b9:2d:1b:61:09:94:f9:d5:c3:16:94:
f2:9e:91:51:61:5b:0a:ca:5c:d0:89:63:cf:8a:08:
74:25:5a:4a:c8:6f:8e:5a:d4:bf:14:62:80:68:24:
2d:5b:bb:24:11:6a:12:02:27:54:5a:1f:f8:2e:77:
d1:47:21:70:12:83:86:9c:d4:22:61:12:9a:6d:aa:
4e:3c:d6:b0:06:23:5a:0f:9c:80:c5:c3:9d:85:61:
04:90:4a:5e:c2:3f:65:b5:37:16:99:53:24:54:c3:
87:05:f3:c8:a3:08:ea:24:82:a2:43:36:b8:6d:e7:
cc:ab:23:8a:04:33:92:a7:1b:1e:b6:2d:bc:a8:91:
a8:9a:50:73:c5:97:2e:9a:48:93:77:45:a9:10:70:
de:38:ee:fc:fc:f2:bd:cf:05:fd:2e:13:9c:5a:86:
30:dd:a1:06:ec:09:e3:01:c3:54:f9:06:05:0e:e2:
9d:1a:ae:81:fc:47:c4:26:e4:07:af:6f:71:d1:d9:
df:d8:9a:2b:b0:a7:98:e0:a5:4c:56:fd:62:b2:aa:
30:2f:db:ee:2f:07:f6:dd:6d:4a:7b:dc:1b:d8:13:
84:22:1f:4c:69:a8:12:23:cf:3c:33:e5:0e:0d:42:
3a:66:39:b0:ca:9d:c3:98:8f:be:eb:ce:e2:22:14:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:C7:9A:00:78:90:DE:25:EC:4D:3E:A6:80:A2:E9:68:49:B9:15
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/80HHmgB4kN4l7E0-poCi6WhJuRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e000::-2a0f:7802:e2ff:ffff:ffff:ffff:ffff:ffff
2a0f:7803:fb40::/44
2a0f:7803:ff90::/44
Signature Algorithm: sha256WithRSAEncryption
67:2e:b1:09:1a:f8:7c:c6:69:5a:ea:46:47:43:65:66:2f:55:
f9:c4:c0:54:fc:5d:46:1f:7e:43:0d:25:dc:82:b4:11:37:b4:
28:5f:78:b4:e9:4f:87:3b:40:09:66:e4:43:1f:c9:ed:79:e5:
68:fd:5f:3b:6e:b7:ae:72:53:b5:c9:dd:38:94:aa:ee:27:35:
87:4b:5e:18:e7:44:6d:20:b3:cf:24:84:1c:da:a3:74:81:3e:
14:ed:fa:9c:16:bc:12:27:6b:0c:98:0c:1d:4c:c2:60:79:4e:
67:d2:86:eb:69:26:09:d3:92:d6:c9:3e:a7:a8:93:24:65:2f:
56:03:f2:78:55:68:a6:63:b3:2f:7f:53:e6:f4:08:70:73:5a:
78:86:76:63:7b:ac:c1:39:f4:ce:7a:a6:b7:c7:3e:7f:9e:66:
68:34:ae:e4:f4:e6:0c:82:98:73:18:1a:f9:f7:80:25:87:72:
3e:6e:51:04:b8:31:36:d0:ce:7e:64:04:c4:2a:93:64:37:dc:
18:be:b0:f8:00:71:1f:37:c4:22:a4:fd:8e:e3:d8:fe:68:d0:
5e:7a:f6:22:8d:11:c3:c7:5c:aa:21:77:8e:8b:74:71:de:74:
32:c7:2b:86:37:20:4e:f9:62:d5:4a:d8:26:a8:fe:bc:5f:c6:
29:65:f0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:58:18 2024 by rpki-client on console-fra.rpki-client.org