Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/dslDVWfQcpljojuoaEWGnLEjEY0.roa
File: dslDVWfQcpljojuoaEWGnLEjEY0.roa (raw, json)
Hash identifier: 97QfK0tJJJHyyErsDCXiqd9z1Mv97RO3BtuMZGOade8=
Subject key identifier: 76:C9:43:55:67:D0:72:99:63:A2:3B:A8:68:45:86:9C:B1:23:11:8D
Certificate issuer: /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial: 018CC8DF96B2ED96143602F54F106661DBDC
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/dslDVWfQcpljojuoaEWGnLEjEY0.roa
Signing time: Tue 02 Jan 2024 06:32:25 +0000
ROA not before: Tue 02 Jan 2024 06:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35654
IP address blocks: 80.72.66.0/24 maxlen: 24
80.72.69.0/24 maxlen: 24
80.72.68.0/24 maxlen: 24
80.72.75.0/24 maxlen: 24
80.72.77.0/24 maxlen: 24
80.72.80.0/24 maxlen: 24
80.72.82.0/24 maxlen: 24
80.72.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:96:b2:ed:96:14:36:02:f5:4f:10:66:61:db:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76c9435567d0729963a23ba86845869cb123118d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:a2:72:e1:69:2f:64:b5:1b:07:ad:11:22:
15:f5:76:9b:59:8d:49:0a:2e:ea:a4:a1:5a:46:73:
e0:75:39:48:2d:25:bb:00:29:bc:1e:f4:9d:a2:d9:
a8:39:99:bb:01:1f:b4:ad:53:31:60:df:a2:5c:83:
86:0e:0c:33:b5:a7:0f:39:59:52:d8:64:ab:8a:a2:
e4:a8:b0:79:c8:d2:28:07:ab:a1:b2:7a:33:87:6e:
0f:25:dc:d4:1c:22:89:3e:01:8b:2d:ca:63:b2:d3:
32:53:20:a5:c7:ac:43:65:8c:e9:49:f6:af:9f:7d:
91:6c:29:8c:08:0e:e7:42:e1:3f:70:b8:d0:8a:d0:
c3:68:42:fd:db:af:16:de:a8:7b:68:64:7e:76:da:
89:6b:81:e2:ec:e3:4d:60:c1:00:73:bb:b8:00:43:
a4:7c:c9:a2:dc:69:26:eb:bd:62:78:cf:6f:cd:44:
7e:4d:6f:73:81:93:9b:3e:d9:a0:82:d8:c6:16:b5:
d8:74:6a:f6:47:53:4e:ac:43:af:8e:51:f5:fd:a0:
c3:6d:df:f7:24:c8:fb:b8:fc:f2:1c:27:ed:c8:b5:
03:1b:ed:a6:56:63:ff:5c:54:56:b6:24:c8:a7:32:
17:25:11:a0:de:10:6e:be:23:8f:4e:69:fe:f3:f7:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:43:55:67:D0:72:99:63:A2:3B:A8:68:45:86:9C:B1:23:11:8D
X509v3 Authority Key Identifier:
keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/dslDVWfQcpljojuoaEWGnLEjEY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.66.0/24
80.72.68.0/23
80.72.75.0/24
80.72.77.0/24
80.72.80.0/24
80.72.82.0/24
80.72.95.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ca:81:d0:66:37:89:9d:42:73:d3:94:56:17:c9:eb:99:06:
2d:24:fe:a5:d1:47:01:16:88:85:b4:d2:ae:c7:af:f3:4e:ae:
9e:07:87:d6:ca:c7:f3:ff:0f:8c:03:19:9c:4c:d9:6f:ee:37:
39:72:ae:c8:56:ee:20:d5:21:50:0d:c6:58:f3:55:75:ac:db:
bd:1b:4c:26:45:65:c0:21:a9:bd:52:11:2f:f8:bc:fd:fa:6f:
bd:f0:c6:9f:fb:85:90:b3:d0:ca:2e:a2:78:30:cf:be:48:b8:
bb:bc:ea:00:09:1b:ea:9c:03:37:ae:c5:9b:45:99:65:78:7f:
7f:4b:8c:c8:78:e8:d9:bf:80:a1:74:69:10:f5:89:01:20:ec:
7f:69:f9:76:5c:3c:2a:ff:18:db:93:ac:08:f3:76:9b:44:ae:
3e:df:9c:05:32:c8:db:72:8d:83:3e:1a:eb:cf:61:4c:cf:14:
2c:b1:72:51:5b:f4:74:d6:48:01:90:1b:7e:dc:af:97:2b:7f:
46:6d:fe:f8:b7:06:aa:19:dd:b6:fb:eb:9a:e1:8e:03:c3:20:
19:42:ff:ae:86:bb:ee:ce:6b:84:92:1b:a2:0c:2b:fe:9c:ea:
13:33:75:6c:81:05:eb:0f:5d:ca:d8:c9:27:44:77:f8:46:59:
78:8b:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:24:19 2024 by rpki-client on console-fra.rpki-client.org