Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DS8zOixqtvUkWP19TGqx8SyjfPI.roa
File: DS8zOixqtvUkWP19TGqx8SyjfPI.roa (raw, json)
Hash identifier: LxVHadY6chs/qedBOrWZVkHdNkQ+1GaPVDVhnC3DaPI=
Subject key identifier: 0D:2F:33:3A:2C:6A:B6:F5:24:58:FD:7D:4C:6A:B1:F1:2C:A3:7C:F2
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019169805346A35E19510F84C2B74D55CFF0
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DS8zOixqtvUkWP19TGqx8SyjfPI.roa
Signing time: Mon 19 Aug 2024 07:18:23 +0000
ROA not before: Mon 19 Aug 2024 07:18:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 80.71.237.0/24 maxlen: 24
80.71.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:80:53:46:a3:5e:19:51:0f:84:c2:b7:4d:55:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 19 07:18:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2f333a2c6ab6f52458fd7d4c6ab1f12ca37cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:e6:f1:66:83:6d:ae:75:f6:cb:c2:bc:17:
53:93:97:ec:31:46:42:b1:32:15:32:f1:c7:df:bb:
75:31:ff:d4:d7:f8:17:7e:8a:50:da:18:8d:6f:0a:
e1:a7:a7:05:96:7b:d0:28:ca:69:66:28:07:dc:dd:
47:e0:fb:5f:1e:98:c6:71:f4:23:f9:65:da:8d:18:
03:e5:e9:37:10:4c:77:dc:fc:27:a8:2f:b8:c5:7e:
1e:f4:95:12:aa:af:9b:9b:88:36:86:e4:9d:a4:6c:
cf:e4:00:5e:d7:53:43:37:9a:cc:c2:b1:dd:b5:93:
cd:aa:19:37:67:31:c9:8c:68:d7:bb:5b:2e:7a:c8:
a4:d2:ac:c8:27:1b:5f:70:4f:8b:19:73:80:e1:70:
2a:c6:e7:06:00:6b:72:97:f4:37:20:e2:40:78:20:
30:a0:fc:3a:20:91:2e:cc:3f:95:cf:42:a7:f9:78:
f3:dd:d3:16:b5:39:5e:2a:15:62:31:a2:c7:0c:c5:
79:87:34:27:57:d3:d8:05:58:de:d2:30:22:c6:4b:
ec:ab:1d:ff:40:85:e2:c3:4a:17:36:4a:58:b5:6f:
43:57:6d:3b:8b:64:52:5f:e0:91:20:b9:7d:d7:d4:
66:8b:67:1f:01:2c:dc:f3:0e:ce:b1:f5:77:39:2c:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2F:33:3A:2C:6A:B6:F5:24:58:FD:7D:4C:6A:B1:F1:2C:A3:7C:F2
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DS8zOixqtvUkWP19TGqx8SyjfPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:23:5a:61:6e:1f:2b:0c:73:57:01:0c:5b:9e:8c:f2:99:25:
73:1b:1c:be:6c:ab:ec:e4:b4:dd:1f:ee:5d:09:e9:f3:72:01:
98:fa:84:5e:ca:9c:74:a2:df:46:3b:46:17:f8:b1:26:8e:33:
3d:ff:b8:5e:ad:08:1c:84:16:d3:45:6d:b8:0b:4e:c1:ee:f7:
2b:7a:04:ff:14:36:74:c7:71:cc:b2:ae:27:8e:b2:52:ac:e0:
e5:55:f9:7d:2b:32:bc:34:c7:70:7c:30:47:33:4e:70:61:85:
06:ce:73:4a:a7:23:c8:c8:1d:63:5b:ef:7d:2f:30:ff:ea:e0:
44:95:f2:91:0f:3d:97:be:fa:a8:e1:0b:d2:ca:aa:18:29:67:
79:62:a6:42:24:5e:49:90:b4:3c:9d:06:dc:b2:6b:33:7e:95:
cc:7c:6d:2f:d2:5c:62:8c:38:ba:f3:b6:c0:a0:53:12:85:ec:
92:8b:da:1a:6e:89:b5:8c:7f:45:f8:26:62:b4:e0:1d:0d:a3:
e5:61:48:59:5d:79:3f:7b:d5:bf:8d:30:5d:1c:75:7d:12:72:
35:00:af:ff:bb:ba:0d:c9:54:81:a9:29:6e:7c:bb:f9:e1:8c:
0f:34:08:b0:ba:d2:64:ba:bc:bb:8d:9f:6c:0e:f0:5d:40:40:
82:c2:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:52 2024 by rpki-client on console-fra.rpki-client.org