Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8T_A_hADjiLDXw0YhuGmVmP58rQ.roa
File: 8T_A_hADjiLDXw0YhuGmVmP58rQ.roa (raw, json)
Hash identifier: Xv7c+7UBSd9KDIOvKf2qvcd3i/vobpNgbEukMMuNa9k=
Subject key identifier: F1:3F:C0:FE:10:03:8E:22:C3:5F:0D:18:86:E1:A6:56:63:F9:F2:B4
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019229BA4FADA97960B39FDFCB82AC8B3D3C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8T_A_hADjiLDXw0YhuGmVmP58rQ.roa
Signing time: Wed 25 Sep 2024 15:08:48 +0000
ROA not before: Wed 25 Sep 2024 15:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41327
IP address blocks: 80.71.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:ba:4f:ad:a9:79:60:b3:9f:df:cb:82:ac:8b:3d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 25 15:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f13fc0fe10038e22c35f0d1886e1a65663f9f2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:d3:9b:1f:07:5b:6e:97:d4:1c:d8:48:21:
18:12:98:85:5c:c0:10:65:1d:5f:37:e6:2e:cf:d5:
74:36:9b:10:b9:12:61:b9:15:77:f1:b4:48:3d:ba:
c3:71:be:5d:ab:9a:1e:e8:b6:41:1c:81:b7:46:99:
b9:f4:23:3e:ef:34:e3:a3:b3:c1:15:cb:79:2c:c7:
45:12:63:87:08:9a:01:8b:b6:d7:40:d1:c1:7c:f1:
4c:30:56:46:0c:ab:73:f3:58:d9:e1:51:e9:81:c3:
76:81:97:cc:f8:29:77:7e:4b:0e:11:05:12:84:0a:
60:ed:19:8c:c6:0b:84:3d:5c:c9:af:cb:b6:19:ce:
9b:82:a7:c4:0d:92:29:7c:5d:85:7b:d1:b0:a1:d1:
bd:3f:a5:42:d9:03:aa:f8:df:13:09:f3:e3:d6:54:
b0:ea:60:4f:98:f1:3a:20:fc:a4:93:fe:87:5f:3d:
b9:83:88:28:df:95:42:8a:47:26:77:24:d8:f1:72:
5f:a1:3c:17:1d:ae:3a:16:6f:a8:00:a5:a8:ac:5e:
fe:08:ae:25:15:06:d5:7f:80:98:7b:75:90:5d:33:
7b:22:89:5c:26:57:66:de:fb:de:5e:49:8d:79:1b:
2e:0b:6b:fb:ba:df:9a:08:e8:ea:6f:38:cd:03:61:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3F:C0:FE:10:03:8E:22:C3:5F:0D:18:86:E1:A6:56:63:F9:F2:B4
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8T_A_hADjiLDXw0YhuGmVmP58rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
Signature Algorithm: sha256WithRSAEncryption
26:bf:e3:ae:a4:a2:45:3e:a0:4e:01:ff:c8:30:bf:2c:06:eb:
3c:e7:ef:fd:97:46:cc:cd:66:5a:34:48:72:ad:7d:09:45:68:
3f:21:30:60:4f:88:a8:6f:ba:99:e1:21:d9:7d:98:34:c0:23:
68:4b:0a:13:71:91:fe:1c:41:37:a5:78:bf:dc:58:55:51:25:
78:87:32:85:b3:8e:5c:45:0d:0d:04:47:f2:fa:dd:0d:e5:1a:
2e:a0:52:02:f4:15:cf:b1:b6:6e:15:1a:02:c5:59:b1:b5:c4:
d4:72:c9:18:8c:76:06:22:70:01:5b:4f:8c:39:5c:b5:74:06:
da:34:59:f2:b2:85:df:2b:12:b1:9e:0b:01:8a:9d:78:6c:46:
9f:da:21:2e:be:47:57:0d:95:9f:24:8b:98:01:c0:bd:d5:3c:
a6:5e:31:0f:6c:a4:82:cf:4a:96:a4:ba:22:15:a1:c6:c6:e6:
a1:2d:83:6a:46:d8:61:7a:bb:2e:bf:d2:b5:11:a6:bd:b3:86:
9a:69:cf:ba:03:3b:43:1a:f9:41:ec:25:4c:bd:95:90:b5:b6:
f2:16:22:ca:7a:3c:bd:a4:24:16:64:92:86:75:69:a7:f7:47:
f0:2b:51:06:ab:e7:f7:0a:10:11:e0:8f:a0:86:ed:12:ac:05:
68:72:37:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIpuk+tqXlgs5/fy4Ksiz08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjQwOTI1MTUwODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTNmYzBmZTEwMDM4ZTIyYzM1ZjBkMTg4NmUxYTY1NjYzZjlmMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyXTmx8HW26X1BzYSCEYEpiFXMAQ
ZR1fN+Yuz9V0NpsQuRJhuRV38bRIPbrDcb5dq5oe6LZBHIG3Rpm59CM+7zTjo7PB
Fct5LMdFEmOHCJoBi7bXQNHBfPFMMFZGDKtz81jZ4VHpgcN2gZfM+Cl3fksOEQUS
hApg7RmMxguEPVzJr8u2Gc6bgqfEDZIpfF2Fe9GwodG9P6VC2QOq+N8TCfPj1lSw
6mBPmPE6IPykk/6HXz25g4go35VCikcmdyTY8XJfoTwXHa46Fm+oAKWorF7+CK4l
FQbVf4CYe3WQXTN7IolcJldm3vveXkmNeRsuC2v7ut+aCOjqbzjNA2HGDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPE/wP4QA44iw18NGIbhplZj+fK0MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvOFRfQV9oQURqaUxEWHcwWWh1R21WbVA1OHJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfqMA0G
CSqGSIb3DQEBCwUAA4IBAQAmv+OupKJFPqBOAf/IML8sBus85+/9l0bMzWZaNEhy
rX0JRWg/ITBgT4iob7qZ4SHZfZg0wCNoSwoTcZH+HEE3pXi/3FhVUSV4hzKFs45c
RQ0NBEfy+t0N5RouoFIC9BXPsbZuFRoCxVmxtcTUcskYjHYGInABW0+MOVy1dAba
NFnysoXfKxKxngsBip14bEaf2iEuvkdXDZWfJIuYAcC91TymXjEPbKSCz0qWpLoi
FaHGxuahLYNqRthhersuv9K1Eaa9s4aaac+6AztDGvlB7CVMvZWQtbbyFiLKejy9
pCQWZJKGdWmn90fwK1EGq+f3ChAR4I+ghu0SrAVocjd9
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:17:18 2024 by rpki-client on console-fra.rpki-client.org