Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/DmQaw3h5rwBt9c2SCFlwpmwBz2c.roa
File: DmQaw3h5rwBt9c2SCFlwpmwBz2c.roa (raw, json)
Hash identifier: Y42l1PWm1qbzLWL+xNe7Bw3V8TxvlGHbn1L7K/g7+Kw=
Subject key identifier: 0E:64:1A:C3:78:79:AF:00:6D:F5:CD:92:08:59:70:A6:6C:01:CF:67
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 018CC3B73F89E339A18B0E5B81DA49D60147
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/DmQaw3h5rwBt9c2SCFlwpmwBz2c.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204444
IP address blocks: 80.94.27.0/24 maxlen: 24
80.94.28.0/23 maxlen: 24
213.155.167.0/24 maxlen: 24
212.14.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3f:89:e3:39:a1:8b:0e:5b:81:da:49:d6:01:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e641ac37879af006df5cd92085970a66c01cf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:01:c2:21:cf:a0:0f:50:58:60:f5:d3:7b:
2b:60:9f:43:fb:4c:3a:65:e7:10:e2:12:72:e7:cb:
8e:e0:44:0a:68:6e:e0:2c:8f:0c:95:99:68:47:d0:
46:85:19:26:b9:6e:14:c3:46:7b:85:f4:eb:9e:93:
c5:93:61:f4:89:67:73:6c:11:07:3a:81:2f:03:fe:
ed:f4:5e:45:27:bc:24:5c:db:3e:87:c8:d6:b9:d7:
70:a4:c7:ab:e3:73:26:c4:9d:90:5f:48:0f:4b:ef:
86:1a:bb:dc:4a:87:88:4f:d8:9b:dd:45:86:0d:48:
3d:91:01:6a:e8:13:f0:bb:61:11:fd:48:70:84:8f:
73:bb:90:51:ba:1f:2e:b9:4d:dd:b6:6a:73:d2:3a:
65:11:51:06:6b:5d:07:10:b3:0f:ae:0d:7b:d9:b1:
05:ca:09:b7:02:a9:3b:2e:fc:8b:2d:fd:2b:a1:19:
62:9a:50:ae:e9:fe:c9:ea:e6:80:60:25:1f:69:dd:
98:25:02:64:a2:39:bb:88:05:ff:a8:9f:5f:90:01:
ca:d1:12:ab:a7:a9:99:86:ab:b8:65:cc:ff:c8:68:
48:cc:26:07:20:d8:e8:5d:3f:eb:df:8b:5d:50:4a:
6b:b4:27:1f:49:11:e3:a9:b5:18:6d:f2:06:49:31:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:1A:C3:78:79:AF:00:6D:F5:CD:92:08:59:70:A6:6C:01:CF:67
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/DmQaw3h5rwBt9c2SCFlwpmwBz2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.27.0-80.94.29.255
212.14.60.0/24
213.155.167.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a3:32:9f:5c:8b:76:91:a9:de:f0:77:ac:95:e7:3c:dd:08:
9c:a8:4b:75:97:77:99:93:d7:b2:dc:34:6c:b7:01:18:62:82:
84:e8:96:d3:47:48:e7:76:69:94:14:22:38:af:08:a7:8e:bd:
40:22:e5:e2:fa:9c:1f:55:67:ac:95:e6:5f:48:64:c3:bb:1a:
8e:3c:35:18:06:39:43:3f:4f:29:49:79:36:89:37:17:cf:e7:
e3:8c:8b:50:d8:f3:b9:d3:0b:8c:68:f5:08:a7:9f:3d:51:8e:
8e:d5:7c:68:5e:69:3a:84:3a:25:3f:6b:0f:5b:d5:10:e0:7a:
02:87:a3:dd:e3:a8:0e:94:2e:b3:53:16:27:cf:83:3b:77:cc:
ca:d3:d9:00:78:ae:7f:10:e4:3f:5b:ae:73:3c:7c:f4:d7:79:
00:13:4d:fd:56:a8:67:16:b2:2a:2f:c2:88:0f:f1:63:85:48:
d2:f8:e0:24:73:59:ce:95:28:bb:56:f2:9d:1c:76:d6:82:36:
1c:a5:72:0c:34:a8:b5:1a:ff:f6:ba:71:17:92:b7:3d:7f:5d:
37:e7:53:e0:c4:b1:af:83:be:aa:88:4e:e6:c3:b7:5c:cb:b1:
ef:55:35:7f:33:3c:a7:32:1f:1b:09:2a:93:cc:a5:ee:ef:4f:
47:9b:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:24:56 2024 by rpki-client on console-ams.rpki-client.org