Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/R92DP4UlD6znAu2rI2kODMOj4Lk.roa
File: R92DP4UlD6znAu2rI2kODMOj4Lk.roa (raw, json)
Hash identifier: J6GXYfRm45LA0z+ejWEylMm6lWAdwWjkUNxZTOi/GgM=
Subject key identifier: 47:DD:83:3F:85:25:0F:AC:E7:02:ED:AB:23:69:0E:0C:C3:A3:E0:B9
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 018F6210266D83D635EE141CB03B1DAD62C0
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/R92DP4UlD6znAu2rI2kODMOj4Lk.roa
Signing time: Fri 10 May 2024 10:32:56 +0000
ROA not before: Fri 10 May 2024 10:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198381
IP address blocks: 80.84.145.0/24 maxlen: 24
80.84.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:10:26:6d:83:d6:35:ee:14:1c:b0:3b:1d:ad:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: May 10 10:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47dd833f85250face702edab23690e0cc3a3e0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:a7:36:ce:65:0c:d4:92:60:43:08:4d:61:
61:48:08:a4:10:dd:fa:e8:49:9e:ab:99:e0:8c:cc:
d5:69:ad:57:58:09:b7:38:f3:a9:79:9a:52:cb:74:
33:af:ad:70:ae:bf:d2:95:7c:c7:fb:c0:a7:8b:30:
0b:76:18:4b:de:19:1c:c0:b5:a4:67:00:a5:8e:6a:
6b:36:9b:89:13:19:a3:da:70:b3:77:b8:ac:de:30:
b9:a4:62:e4:2a:90:d3:47:17:7a:39:96:63:f3:b9:
12:d8:3d:2c:5c:8d:90:23:a4:5e:e8:f4:9c:dd:34:
95:24:54:a3:8a:e6:1e:59:65:f8:c1:2c:50:ad:45:
9c:24:aa:60:32:87:2e:3f:a0:89:40:23:0a:91:fd:
81:ba:be:20:1c:dc:6c:f1:d7:3c:46:2a:dc:b1:97:
83:5a:3d:cc:2d:9d:ef:3e:e9:19:df:5a:52:92:17:
5b:ca:d4:d4:39:53:16:f1:38:8c:62:6e:68:15:80:
ff:42:c2:39:b4:84:0e:34:c9:5a:c7:b9:38:bf:fa:
a8:8d:b8:c3:f2:7b:a4:0d:07:0c:66:ff:01:a9:76:
fb:f0:91:0f:cf:e3:55:09:1f:b2:6c:31:5a:bc:4b:
76:60:de:48:57:78:54:2a:7c:d2:30:86:6e:fc:6b:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:83:3F:85:25:0F:AC:E7:02:ED:AB:23:69:0E:0C:C3:A3:E0:B9
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/R92DP4UlD6znAu2rI2kODMOj4Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.145.0/24
80.84.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:59:1c:43:d9:47:c2:fc:6b:88:f9:80:3e:71:72:e3:be:ba:
41:c0:d9:9f:5b:65:9c:15:df:42:f0:15:5a:6f:70:bb:f2:1a:
55:fc:3d:27:b1:4a:30:ec:56:0d:c6:6e:56:f3:7d:da:2a:8f:
f1:4b:10:e2:1f:5e:03:ea:05:a7:f6:be:53:de:bd:1b:40:23:
f9:0f:1f:18:4b:3e:fe:3a:e4:7c:db:86:6a:c3:74:d8:10:1c:
27:64:db:56:05:e2:d5:f7:13:45:0f:00:81:6a:15:4b:ba:ba:
76:a1:73:21:ea:ec:1f:5d:ec:3c:9c:53:f3:34:64:98:d6:09:
f8:3e:46:2d:a6:3f:c8:1e:86:fd:ab:88:90:36:b9:67:63:b3:
a0:63:34:06:0a:00:2a:0a:58:3c:33:0d:59:1e:27:80:a0:e0:
4d:67:f6:7c:d3:6b:01:be:f2:3a:be:fd:b4:58:4e:b7:77:fb:
7c:de:55:93:ab:5f:5b:22:37:66:ff:d4:29:b8:a0:4b:0e:f2:
50:73:bf:0c:f1:2c:3b:c8:4b:d3:83:ea:c2:0f:23:b6:64:97:
3a:06:90:b6:20:01:9e:05:df:8b:18:e2:f8:f8:68:07:72:f3:
5b:48:f8:42:2e:c1:7d:aa:91:35:7e:ec:04:b0:0d:05:7b:1a:
1f:81:d6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 10:16:11 2024 by rpki-client on console-ams.rpki-client.org