Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/AV-Iyb5pnoaCOLuONsU77Wq2eMU.roa
File: AV-Iyb5pnoaCOLuONsU77Wq2eMU.roa (raw, json)
Hash identifier: ztmXQ/kaOTwMKH91gWWMW0ypvPigN9QKS+WEiWDxbKw=
Subject key identifier: 01:5F:88:C9:BE:69:9E:86:82:38:BB:8E:36:C5:3B:ED:6A:B6:78:C5
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 018CC3B7428698C73D6F259588DB6A3DD0EB
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/AV-Iyb5pnoaCOLuONsU77Wq2eMU.roa
Signing time: Mon 01 Jan 2024 06:30:16 +0000
ROA not before: Mon 01 Jan 2024 06:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 80.70.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:42:86:98:c7:3d:6f:25:95:88:db:6a:3d:d0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Jan 1 06:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=015f88c9be699e868238bb8e36c53bed6ab678c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:93:13:41:81:1d:d1:76:e3:88:ba:01:14:
c6:3e:09:34:b4:4d:c2:24:64:79:c1:86:ab:94:27:
6b:43:e4:37:a5:7b:b6:9e:19:8a:02:f9:e0:e2:72:
50:35:3a:5b:97:e9:11:fd:9d:b2:df:9e:89:e6:40:
83:82:c9:71:79:34:4e:9c:09:49:f9:73:3d:60:af:
4a:b3:cc:71:57:55:8c:7d:c6:ea:d9:96:5c:ef:33:
62:89:ee:a2:85:02:0a:c4:3a:c8:c7:36:9b:e3:a9:
7c:a9:7d:4d:9a:e3:70:f5:ca:2b:32:e8:d5:b2:81:
6f:96:f0:e3:93:6c:bf:22:5c:25:da:33:5a:e3:99:
54:7d:8c:20:15:d5:0a:98:58:75:38:2b:f7:1f:bd:
29:c4:09:ce:2a:54:9e:de:0d:42:02:96:e8:24:60:
63:2e:6d:3a:39:ec:b9:bd:6b:5e:83:f0:1c:ff:a3:
0f:bd:60:49:88:60:58:ab:16:50:34:43:e2:94:9e:
49:f7:fa:4f:af:67:6d:a5:31:a0:9f:a8:6c:67:82:
39:85:5a:95:4b:86:9b:ce:fc:3e:ce:db:cd:77:ec:
d9:89:1e:93:17:8f:42:e1:fd:1b:0b:74:f2:dd:85:
d3:7c:9e:a6:a5:b8:ba:48:0f:73:1d:f0:89:de:55:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:88:C9:BE:69:9E:86:82:38:BB:8E:36:C5:3B:ED:6A:B6:78:C5
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/AV-Iyb5pnoaCOLuONsU77Wq2eMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f6:a4:00:8e:a6:3f:a7:eb:d8:d7:bb:d6:8b:af:29:be:c4:
35:22:94:bf:20:a5:78:df:46:0f:1f:22:26:7f:6f:9e:38:25:
9d:ba:26:fa:e5:af:74:96:8a:0a:b4:f1:8a:f3:41:f8:86:f0:
90:92:1d:99:e1:d3:fe:2b:0e:1c:cc:8b:c4:c8:62:54:17:0f:
c4:f9:5a:6d:52:6a:c9:ff:65:8b:04:c2:79:3b:9e:a8:9b:fc:
ff:4e:b7:0b:fe:ad:1d:c4:3d:43:d4:ac:b2:3a:4c:95:ca:b7:
e2:9c:fd:c6:dc:30:7d:92:e3:a3:d8:cd:75:e9:66:39:c0:2b:
88:7a:8c:10:ae:0b:78:b7:d8:8f:fb:0c:f4:21:66:9a:7b:19:
d9:0c:ed:c1:1a:4a:2e:3a:49:92:bd:9a:f9:1b:61:60:04:37:
86:64:47:c3:4b:2d:50:3c:ac:f1:9d:75:79:f6:8c:96:f9:32:
03:3e:74:95:59:84:0c:d1:88:56:9d:42:c0:55:b8:1e:6c:d8:
57:18:ee:ff:7b:46:ea:98:bd:e6:df:d1:e8:0f:2f:54:f9:14:
6b:a7:5c:9f:1b:72:f4:95:de:32:22:0d:23:35:c4:f5:75:c3:
c0:4d:be:ab:ae:78:2d:7d:83:4e:78:97:3e:68:ec:1b:fa:d6:
67:28:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:46:42 2024 by rpki-client on console-ams.rpki-client.org