Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RRvlDkKaOIMPokIS2Xuk0gBmkv8.roa
File: RRvlDkKaOIMPokIS2Xuk0gBmkv8.roa (raw, json)
Hash identifier: l9HMn86Qg3I1lKPfvM8CVIoma8nnvn+BLVQ3yOT5eio=
Subject key identifier: 45:1B:E5:0E:42:9A:38:83:0F:A2:42:12:D9:7B:A4:D2:00:66:92:FF
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB42E24D69A7CF359C5DF584BB758
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RRvlDkKaOIMPokIS2Xuk0gBmkv8.roa
Signing time: Tue 02 Jan 2024 08:29:25 +0000
ROA not before: Tue 02 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25487
IP address blocks: 217.13.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 14:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b4:2e:24:d6:9a:7c:f3:59:c5:df:58:4b:b7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=451be50e429a38830fa24212d97ba4d2006692ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:56:c6:c2:99:4e:d0:b1:50:28:1c:39:5f:
c0:d4:ee:fb:e3:4d:be:c2:a7:45:9b:1e:57:b2:05:
5e:35:df:fb:b4:4c:a7:bc:35:73:81:39:57:ba:1a:
53:25:65:a8:0e:a8:bd:0a:b8:e3:97:b5:74:ca:c5:
cf:e2:1b:87:de:9f:50:4f:66:1b:33:05:a5:77:7a:
43:a8:31:73:5f:2b:57:3c:4f:b7:d7:03:7d:23:16:
16:f1:ba:e3:8e:67:ff:12:c0:75:69:9f:82:0c:d6:
93:e5:c9:2a:63:5d:0a:51:76:bd:f8:cb:70:fd:7c:
54:8f:a1:fd:cd:a8:b1:61:e1:96:44:43:08:2e:c5:
d6:2f:38:91:25:8f:9a:15:36:53:62:bd:92:b2:df:
03:c6:d1:43:ef:e2:67:fc:ec:f7:cb:11:ff:46:3a:
be:05:86:57:f8:87:61:54:db:9f:dc:e6:9e:c0:07:
1b:b7:4e:72:91:c3:4b:e9:56:91:d3:99:19:f5:92:
70:ec:02:e4:d9:a7:50:9d:4f:50:cd:5d:e5:45:61:
94:e7:89:10:4d:af:d0:f5:12:56:10:3f:ec:a6:b6:
b0:07:e5:c3:32:66:33:3b:0b:d3:4f:04:b2:7e:36:
a7:fb:3b:2e:1c:cb:04:de:1e:72:93:60:d8:a3:0b:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1B:E5:0E:42:9A:38:83:0F:A2:42:12:D9:7B:A4:D2:00:66:92:FF
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RRvlDkKaOIMPokIS2Xuk0gBmkv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.13.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:fb:be:8b:e9:fc:6b:8a:75:c1:97:a7:d1:f7:ee:19:d9:61:
99:c2:0e:c3:16:16:12:fa:90:0d:46:96:41:99:6c:d6:84:ba:
0e:08:b0:99:47:15:7c:d8:99:47:e0:df:86:f3:67:d8:2e:02:
63:d2:5d:23:b5:7e:40:18:aa:e4:a6:d5:ce:fc:cf:eb:1a:67:
de:07:e4:ef:4e:4a:68:30:ce:10:ed:c9:01:9f:cb:bf:68:f6:
09:14:b0:db:5e:48:92:34:0c:f5:f9:42:9c:6a:5e:fb:7e:d3:
75:48:54:e9:eb:0f:a9:75:93:f3:e4:99:43:e6:c0:e2:e5:fc:
5f:d0:98:43:d3:42:5c:05:cd:a7:2f:a6:9f:02:78:4f:d9:2f:
07:bb:86:6e:06:6f:ee:b7:aa:ef:72:b2:85:e3:d8:9b:f4:9e:
c5:2f:7e:66:31:81:8a:6e:c4:bc:ad:46:d0:e0:4a:48:59:0a:
72:a5:9e:25:3d:6b:c2:17:fe:b9:11:ff:93:b7:cb:a6:84:1c:
93:e2:c5:a3:80:62:1e:95:d5:cf:87:24:bf:6d:b2:89:c7:c4:
fc:e5:4a:41:41:64:9f:8b:5e:01:24:4f:94:eb:13:5a:7e:9c:
70:03:93:e4:1e:a9:74:f3:d1:8e:86:dc:3c:0a:54:22:8d:ef:
b9:2f:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 22:47:55 2024 by rpki-client on console-ams.rpki-client.org