Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7MPHOAKYNCQ2xVVtX-dAO9Hplgo.roa
File: 7MPHOAKYNCQ2xVVtX-dAO9Hplgo.roa (raw, json)
Hash identifier: FBM48UW/xbimb/aJNqUJybJDXrMCRyhkyDQ3AZjUS3I=
Subject key identifier: EC:C3:C7:38:02:98:34:24:36:C5:55:6D:5F:E7:40:3B:D1:E9:96:0A
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018D9DB8F98C4EB77B406DC9178DA8DC9695
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7MPHOAKYNCQ2xVVtX-dAO9Hplgo.roa
Signing time: Mon 12 Feb 2024 14:29:21 +0000
ROA not before: Mon 12 Feb 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 80.71.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:b8:f9:8c:4e:b7:7b:40:6d:c9:17:8d:a8:dc:96:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Feb 12 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecc3c7380298342436c5556d5fe7403bd1e9960a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:f4:64:48:3b:43:b7:e3:d2:ca:17:3f:34:
f8:bd:5b:98:87:6c:4e:65:24:ff:51:88:1a:bd:87:
a4:0e:cd:60:e6:a9:9d:8c:e7:7e:ee:c4:8d:51:4a:
f8:ea:08:25:6d:0b:28:8d:cf:b6:ff:83:63:13:4a:
29:dd:1b:89:c8:2d:90:f6:12:37:ff:7f:02:47:07:
2e:0d:1d:3d:20:44:15:15:ed:8d:29:e8:49:7d:d8:
d3:3c:bf:38:19:c6:a2:27:55:2a:9a:d6:31:2c:73:
52:70:bf:92:4d:9c:11:73:a0:c4:f9:bd:7f:46:e7:
4b:4e:2d:42:ad:ea:f9:ed:d2:d6:f3:a0:84:a4:6a:
98:29:39:8e:a1:dd:79:a6:cf:46:5d:62:c9:88:b8:
cd:fa:ff:e5:9a:50:6a:55:d5:94:47:cc:09:3e:f4:
41:f9:ef:12:e3:65:f4:98:1e:d4:3b:b3:82:b2:6a:
e7:93:59:6b:85:53:14:89:8d:e8:bc:61:52:47:b2:
f1:2a:73:43:b2:27:90:c3:18:b8:62:80:df:be:38:
61:11:be:43:fb:f5:ef:af:14:51:45:b6:bf:41:83:
f7:cb:3d:50:8d:59:ed:9b:54:0f:5c:fb:a0:f1:56:
d2:34:70:a7:25:54:71:fc:e5:36:9f:45:52:59:28:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:C7:38:02:98:34:24:36:C5:55:6D:5F:E7:40:3B:D1:E9:96:0A
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7MPHOAKYNCQ2xVVtX-dAO9Hplgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.230.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ec:33:b8:2c:04:d6:4a:77:45:89:8c:8a:1c:df:8a:a7:42:
b3:4e:be:be:89:d0:f3:1d:5e:da:9a:60:47:6d:7a:81:db:7c:
b1:49:35:d6:f5:16:03:81:da:a3:ab:c9:e7:ec:a3:59:4d:67:
60:48:c1:76:84:88:0f:6c:f1:36:41:c7:d3:66:99:72:e4:a5:
df:5f:cd:9f:80:93:92:62:70:09:86:3f:37:6b:8b:29:ee:19:
57:1f:d4:83:5c:fc:83:a1:c5:1c:fd:bf:95:ad:ae:c3:0f:52:
38:46:9a:2e:1e:38:e8:0e:79:1c:b9:b9:de:95:b6:f7:26:f8:
ae:97:40:2b:ba:60:2d:f8:0a:ea:00:d1:be:83:95:cb:b0:1b:
c8:4b:38:b1:97:e2:d0:10:ba:e9:f4:14:32:75:87:15:00:a7:
fa:a9:18:13:8c:ec:21:33:59:db:5d:cf:02:2f:da:75:17:65:
10:14:32:ec:e5:00:dd:9a:ac:a0:1e:f5:07:d2:2d:fa:cf:35:
0d:c1:38:71:a8:ab:7b:6f:ba:c7:b7:61:b1:4f:1b:ba:8e:35:
08:9d:29:cc:46:53:4d:7d:dd:b0:8b:8f:59:c1:58:cc:18:a3:
93:35:da:e0:56:07:0a:90:af:40:cf:a2:58:6a:0c:01:a5:84:
86:76:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:33:44 2024 by rpki-client on console-fra.rpki-client.org