Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/V4R2nTTMB6rGbAF8z-KKeIcZpYE.roa
File: V4R2nTTMB6rGbAF8z-KKeIcZpYE.roa (raw, json)
Hash identifier: +XK/EBMxwK+S8ygW09GODch4jO4BmPRcT0+LlX4ffGU=
Subject key identifier: 57:84:76:9D:34:CC:07:AA:C6:6C:01:7C:CF:E2:8A:78:87:19:A5:81
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 018CC26D46084159AC45F0AA873B66E7FD9C
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/V4R2nTTMB6rGbAF8z-KKeIcZpYE.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133499
IP address blocks: 80.240.116.0/22 maxlen: 32
80.240.120.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:46:08:41:59:ac:45:f0:aa:87:3b:66:e7:fd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5784769d34cc07aac66c017ccfe28a788719a581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:5b:06:27:ab:eb:28:2e:2c:d0:2a:27:89:
c8:b8:47:b6:c9:e1:4d:d7:50:a3:e5:e0:b3:04:ab:
6e:24:cd:82:b4:66:81:f9:58:6d:06:de:83:d4:c2:
40:67:5f:18:24:d8:a3:7d:e5:8c:a5:8b:de:08:45:
d1:13:42:1c:50:ab:40:bb:ec:56:5e:d8:5b:2d:18:
25:91:55:7a:57:f4:36:0a:21:9a:62:11:ba:83:f8:
69:de:25:d0:70:c5:32:a4:45:58:35:bd:73:df:4f:
7a:7e:89:7a:6e:ff:9b:4d:20:2d:a5:6b:1a:44:18:
5a:54:f2:23:3d:4c:46:36:25:84:0e:61:ff:bc:95:
a0:a9:42:54:3b:ae:3c:6c:d7:c4:2f:a4:fe:e5:3e:
3b:63:81:ad:5a:e4:6b:a1:f2:24:79:de:ed:47:73:
25:24:d4:11:1e:2b:b5:d8:ee:68:92:a2:7b:06:af:
9a:24:f0:0e:7f:40:8b:63:72:5d:09:ae:e2:53:9b:
85:6b:4e:df:2d:0e:54:10:a6:16:c2:d6:40:2f:2f:
13:69:b4:51:d3:8d:06:72:74:1e:e8:6b:06:7f:91:
26:9b:21:01:a9:53:47:f2:09:d1:ad:3f:10:bd:37:
8f:9e:0f:4d:da:05:01:7d:62:30:f6:ab:53:84:89:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:76:9D:34:CC:07:AA:C6:6C:01:7C:CF:E2:8A:78:87:19:A5:81
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/V4R2nTTMB6rGbAF8z-KKeIcZpYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.116.0-80.240.123.255
Signature Algorithm: sha256WithRSAEncryption
37:ee:c7:a6:fb:43:79:4f:0b:66:f0:04:94:d6:e8:56:96:e8:
85:f5:73:9c:d4:15:37:4e:81:67:83:94:aa:61:c2:e6:d0:a1:
23:83:d5:bb:c9:7b:83:4f:92:0b:39:84:a0:cb:66:3c:98:fd:
f0:89:5b:40:fc:0e:99:98:c0:93:40:36:ec:0a:36:5f:8a:a9:
e1:49:36:e9:f3:b5:c9:80:1a:3d:7d:81:d0:51:38:66:63:8a:
1c:e7:43:0d:b7:a4:f9:0b:a9:b3:cc:2b:95:b4:ed:e4:73:4f:
e8:b1:79:c6:19:64:0d:fc:ae:36:5a:a0:7f:4a:bd:b4:a6:14:
ca:cc:10:36:12:ec:6c:08:4e:4f:bc:02:79:e8:32:d5:7a:47:
05:47:13:a4:1d:f4:5f:12:70:00:cd:93:30:8c:4a:b0:3e:f7:
d6:4d:4d:1f:be:17:3f:21:4e:cc:9a:79:48:69:68:a6:be:22:
f1:4a:a7:f3:5b:14:1d:7c:c2:ab:18:ea:67:00:76:ef:d0:05:
dd:ad:e3:b9:6f:af:8d:3f:83:03:cc:84:97:e3:d9:db:80:a3:
56:80:df:66:24:8f:19:56:4c:71:76:b6:26:0d:94:38:0a:2a:
d1:fa:fb:0c:b1:2b:bd:33:9a:f0:74:a1:dc:b7:62:3d:fc:b1:
87:de:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:22 2024 by rpki-client on console-fra.rpki-client.org