Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/wrORONtECZcoBKGjtIe7NDlImpY.roa
File: wrORONtECZcoBKGjtIe7NDlImpY.roa (raw, json)
Hash identifier: LCG6mCHm6Y6uH9YtkdIqnPG9oHFuvrLrho+nDwrG2LE=
Subject key identifier: C2:B3:91:38:DB:44:09:97:28:04:A1:A3:B4:87:BB:34:39:48:9A:96
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 018F6210279EA8746811E31738EA6E048BEF
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/wrORONtECZcoBKGjtIe7NDlImpY.roa
Signing time: Fri 10 May 2024 10:32:56 +0000
ROA not before: Fri 10 May 2024 10:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198504
IP address blocks: 80.84.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:10:27:9e:a8:74:68:11:e3:17:38:ea:6e:04:8b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: May 10 10:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2b39138db4409972804a1a3b487bb3439489a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:77:e6:10:99:ab:cb:eb:8b:5b:da:ff:2f:
d7:52:f3:25:e8:b4:cf:c8:0f:d2:0a:dc:6c:8b:22:
b7:34:73:98:6d:f5:c0:8b:bc:f7:51:e8:5d:aa:f2:
f2:45:bb:58:29:af:15:6b:6a:f0:63:e2:5c:29:64:
03:6f:3d:28:e8:62:47:24:3e:4f:21:19:54:54:00:
2c:95:46:6c:5f:74:bc:e0:bd:90:72:53:9b:49:a3:
e7:36:06:7c:9d:81:66:3b:25:d8:94:6a:4a:92:13:
a6:53:24:c4:e6:60:4b:79:7a:47:cb:6e:c7:4a:44:
74:4c:5b:6e:9a:57:d2:bd:c1:ff:c8:24:2e:c4:bd:
15:c5:bb:7e:dc:38:0f:8b:c7:09:58:1a:e1:bc:a1:
31:82:bb:83:43:f7:e1:c0:e2:48:5f:4c:a0:81:d8:
84:c1:32:16:ad:7b:d0:b1:6e:53:3d:1f:38:36:5b:
34:a1:75:ea:ea:df:6f:7c:1f:fd:e4:df:02:9b:e3:
c7:e0:e5:f6:96:10:b5:87:82:bf:23:26:39:42:58:
62:d2:c8:e3:aa:fc:83:c5:46:03:2a:c1:87:fa:9e:
b2:aa:d4:dd:d9:0b:3a:cf:ed:42:ca:0d:44:f8:e7:
84:07:fd:1f:c7:ba:81:89:2b:ce:db:d0:d2:c7:9b:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B3:91:38:DB:44:09:97:28:04:A1:A3:B4:87:BB:34:39:48:9A:96
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/wrORONtECZcoBKGjtIe7NDlImpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.147.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f0:40:44:79:28:14:6a:cf:3d:1e:fb:4c:6c:17:b7:44:af:
57:39:40:0e:3c:d5:1d:9a:a3:f9:69:ae:1a:8f:5c:92:f0:87:
a7:8f:9b:49:db:76:7f:5a:b2:98:62:7f:08:8b:4b:80:6b:60:
b1:ff:0f:81:d6:6c:80:7d:2b:d0:a0:af:e3:04:a6:9e:c6:cc:
b3:84:d9:93:af:fc:c0:06:47:5e:c2:14:1e:cc:2e:e2:03:ba:
05:f8:eb:81:d3:ab:2a:ff:6f:ea:92:de:f4:19:4b:11:30:62:
8b:fd:05:88:09:dc:c6:b2:87:99:85:b2:64:0c:f8:c7:d2:fd:
cb:17:8c:c0:18:a3:80:72:68:24:65:62:7e:ae:9d:0c:84:d6:
21:b8:76:a8:ca:69:85:72:52:34:9d:cd:6c:2e:24:df:0d:e2:
69:20:4a:cb:41:cc:10:78:61:2a:df:e8:7b:9d:ec:b3:83:a5:
9c:c1:8a:aa:01:ab:c1:40:87:a1:d5:11:76:2c:62:5e:e3:3d:
34:5e:28:e1:15:0c:b1:ea:6f:cc:14:fe:a6:80:57:28:20:0d:
b4:f4:0f:93:45:d8:b8:df:0a:e1:45:5b:fd:57:7e:75:2d:04:
5f:76:27:4c:1e:42:5e:2b:0a:f5:83:b7:d9:d7:77:7a:19:ac:
0e:6f:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:25:31 2024 by rpki-client on console-ams.rpki-client.org