Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ewaVCFvaAAsUba9Oexqnc-aZwuY.roa
File: ewaVCFvaAAsUba9Oexqnc-aZwuY.roa (raw, json)
Hash identifier: x4KprTKaONjJZu8plHS0FoFvNOL2bSTkg1HRRcZabIE=
Subject key identifier: 7B:06:95:08:5B:DA:00:0B:14:6D:AF:4E:7B:1A:A7:73:E6:99:C2:E6
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018CC3B686350AA5D7482D73BD0C4864AC79
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ewaVCFvaAAsUba9Oexqnc-aZwuY.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43513
IP address blocks: 80.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:86:35:0a:a5:d7:48:2d:73:bd:0c:48:64:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b0695085bda000b146daf4e7b1aa773e699c2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c5:02:93:55:be:0f:ff:f4:66:11:9c:23:b6:
ca:f3:24:51:0e:bd:e1:00:a8:d8:fa:65:f7:5d:0c:
11:b1:ce:ae:e1:ed:a4:95:81:bc:a9:cc:86:2d:db:
00:c7:bb:c2:ea:92:3a:69:83:92:55:a2:3b:be:05:
97:34:0f:de:48:e0:6e:36:3d:f5:42:ab:1c:4a:9d:
3c:46:26:62:fa:2d:39:df:03:b5:27:df:85:2b:74:
55:90:42:1e:ba:8f:f1:9d:0c:23:3c:a5:81:d3:fd:
2b:62:1e:b3:3a:d5:90:29:a8:f1:a0:e4:e8:84:eb:
b9:3d:12:fc:b0:24:27:7c:bd:56:6f:84:f6:9d:c2:
f3:0b:64:74:60:c3:24:9f:c7:76:bc:1d:4c:ee:d9:
00:ca:9c:5c:4e:39:32:7e:e1:68:91:69:72:73:3c:
39:ea:70:eb:07:0b:a9:ad:41:70:47:2f:06:b5:a5:
3b:a5:b8:c4:04:73:15:a5:c1:9b:55:87:94:6b:19:
c6:2c:e1:1d:19:ee:20:b7:80:9b:72:46:44:fb:1d:
1c:97:d2:86:0e:b8:4c:1d:0d:6a:a4:a4:20:da:16:
2c:b4:22:c6:2a:97:9c:d3:b2:ee:a6:b2:ba:78:16:
07:9f:33:a9:0a:f7:9d:d5:7b:56:b1:ec:68:13:3d:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:95:08:5B:DA:00:0B:14:6D:AF:4E:7B:1A:A7:73:E6:99:C2:E6
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ewaVCFvaAAsUba9Oexqnc-aZwuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c4:2d:30:82:31:e1:5c:c1:7c:02:8a:f5:53:b5:86:8f:2f:
f2:57:dd:68:00:89:87:9d:ac:58:61:1a:96:62:72:d3:a4:04:
3c:91:11:4b:7a:bf:a2:37:19:e2:79:ff:5a:ba:f4:06:02:40:
ff:ef:f1:0c:8f:21:09:54:e0:0f:0a:b3:1e:0a:58:cd:b1:70:
a2:11:87:95:72:a5:3f:f6:62:ba:d0:88:1d:33:47:88:3f:f1:
3a:ce:ac:9a:4e:de:ab:7e:4c:46:f6:2a:83:c0:e2:06:2f:17:
10:11:6f:83:49:c0:f7:9a:98:f0:ed:58:9f:2a:6d:4f:c3:87:
62:7d:9f:75:9e:d6:eb:1f:fa:8e:36:31:57:e4:08:fa:df:88:
6e:77:6a:2c:ee:ce:d1:c3:07:2e:fa:85:be:02:26:1e:f2:af:
f5:e0:28:c6:18:87:9e:cb:99:04:84:7b:40:14:9f:df:b7:63:
b8:9d:3e:54:43:1b:7d:d7:43:21:bc:38:5d:91:0c:0c:36:ba:
fb:fa:70:e1:60:b2:6e:19:f4:d4:7e:69:99:75:09:68:3b:84:
71:09:94:4f:f5:97:b8:99:ab:1a:57:77:30:e9:87:e9:23:5f:
91:b0:50:89:f7:21:85:fc:e1:39:12:b1:14:46:79:b7:6c:87:
e3:c2:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:40:29 2024 by rpki-client on console-ams.rpki-client.org