Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/GLOuJbP4WwuhIeT7vQRSpSNbrO4.roa
File: GLOuJbP4WwuhIeT7vQRSpSNbrO4.roa (raw, json)
Hash identifier: VJgwDzyWeEp30L2NHlJkINmAnvvMlGHrUGh+V6TsGcA=
Subject key identifier: 18:B3:AE:25:B3:F8:5B:0B:A1:21:E4:FB:BD:04:52:A5:23:5B:AC:EE
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 018CC3B7179A220FCB8EE5141C9A12741FDA
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/GLOuJbP4WwuhIeT7vQRSpSNbrO4.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60294
IP address blocks: 80.74.48.0/22 maxlen: 22
80.74.48.0/20 maxlen: 20
80.74.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:17:9a:22:0f:cb:8e:e5:14:1c:9a:12:74:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18b3ae25b3f85b0ba121e4fbbd0452a5235bacee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:5f:e9:7e:5d:67:02:0b:a6:9d:f0:e9:6e:
f4:5b:72:2e:67:ea:a3:99:1a:0a:74:fa:82:88:a1:
98:98:d1:a3:14:42:6d:e7:66:f0:8e:54:74:d1:77:
dc:07:eb:88:56:3a:a1:df:a7:2e:1d:2c:b8:92:91:
51:3d:57:6d:53:39:9d:7e:f3:8b:ee:04:62:6c:82:
d3:d1:14:65:84:d3:28:33:0b:6c:a6:06:84:0a:de:
00:76:ed:4a:1d:4a:5c:0d:64:39:f3:08:9a:c0:9a:
9c:9d:58:90:a3:fc:dd:f2:89:a2:84:3a:08:59:c0:
3a:86:c6:cd:0e:6c:72:4f:ea:06:93:4f:67:4e:87:
3b:63:d6:56:fe:81:fc:77:b6:32:c0:fe:16:41:76:
e9:fc:8c:a1:39:c6:0d:2c:37:53:60:fb:87:16:8a:
5f:d8:ed:f6:12:0f:d1:20:2a:db:30:8d:4e:ed:8a:
e3:e9:1e:69:c5:c9:5a:73:8f:91:62:14:bc:f8:b2:
91:38:77:32:0b:bd:37:91:bb:03:c5:ce:04:76:07:
3b:8d:7b:5a:25:d6:41:bf:e0:b2:90:c2:49:a7:f0:
34:ce:30:47:07:5b:5c:72:1d:5a:34:fc:db:fd:66:
ad:36:2d:ed:a1:12:9e:8a:6d:ad:5b:7c:68:f1:43:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B3:AE:25:B3:F8:5B:0B:A1:21:E4:FB:BD:04:52:A5:23:5B:AC:EE
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/GLOuJbP4WwuhIeT7vQRSpSNbrO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.48.0/20
Signature Algorithm: sha256WithRSAEncryption
27:d1:1d:74:2b:43:40:b8:d4:23:63:6a:72:03:db:ea:fa:08:
2f:fa:0a:0d:0b:3b:46:1c:4b:8c:57:79:bb:f7:a9:25:38:05:
8a:92:f8:3a:53:ee:ec:a2:2d:26:b3:4c:38:84:6d:3b:64:e6:
81:29:c9:a5:22:70:60:5a:97:5f:9b:06:d6:91:04:ec:00:36:
35:f7:07:02:c9:bf:4d:a6:20:d3:b3:96:90:c4:9e:f0:0c:5a:
bd:a3:a5:78:8a:cf:9a:64:c2:0c:01:c6:f5:ba:62:05:68:16:
1f:77:7d:16:84:8f:16:ed:e6:69:2f:3b:db:b8:e4:a6:f5:3e:
e4:f5:06:06:12:c5:01:9e:69:a5:60:32:11:95:d2:52:87:56:
e9:ed:ce:42:e1:4f:1c:a4:16:64:36:de:d2:40:4b:e9:1b:3a:
42:35:4e:4c:ad:5d:2a:da:88:b2:bd:19:a8:07:8f:f6:d2:ed:
fa:05:22:2f:89:88:f8:2d:c0:ba:73:ba:cb:61:f4:db:14:63:
af:8c:e3:c9:54:b3:b6:e4:21:cc:d5:1e:be:3b:a7:b3:c1:7b:
2f:54:46:1f:de:87:7a:42:d1:c1:f1:14:c3:58:4c:57:a7:90:
1e:a5:f3:37:92:99:98:05:2a:fa:5e:cd:82:e5:e6:2e:06:c5:
42:4c:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 14:55:30 2024 by rpki-client on console-ams.rpki-client.org