Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Styp8rsptuXYcoBCl04uh5P60kc.roa
File: Styp8rsptuXYcoBCl04uh5P60kc.roa (raw, json)
Hash identifier: hTkjFiv+kU7yRjGZDmSqy7IaMI+RD0MNX8dkMF3F9oE=
Subject key identifier: 4A:DC:A9:F2:BB:29:B6:E5:D8:72:80:42:97:4E:2E:87:93:FA:D2:47
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0191698052E9AA29E662ABC419C72F2A424F
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Styp8rsptuXYcoBCl04uh5P60kc.roa
Signing time: Mon 19 Aug 2024 07:18:23 +0000
ROA not before: Mon 19 Aug 2024 07:18:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 80.71.237.0/24 maxlen: 24
80.71.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:80:52:e9:aa:29:e6:62:ab:c4:19:c7:2f:2a:42:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 19 07:18:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4adca9f2bb29b6e5d8728042974e2e8793fad247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:f6:e5:fb:68:b8:54:46:1a:0e:88:75:ad:
ce:cc:2a:4f:dd:53:ac:96:ea:23:f1:55:2a:c4:4f:
06:2e:85:f2:a4:29:04:f2:06:da:41:6a:08:68:6a:
5d:e8:71:d1:a0:e0:c7:2f:e7:ae:83:9f:6e:93:c8:
11:61:3a:84:0f:e6:40:78:54:97:d2:a3:19:40:f9:
45:ac:2c:69:ec:68:4f:cc:8c:cf:26:fa:72:11:02:
32:3d:9e:f8:35:a8:fd:d1:87:9c:53:c7:99:24:e7:
f5:a9:60:ce:54:84:fd:b3:a3:90:1c:d5:3e:12:d0:
aa:c2:dd:e5:50:af:94:c4:e2:fc:a4:ae:8a:45:6f:
de:cc:6b:61:ed:67:e9:23:79:8a:f3:4f:4b:68:de:
c0:a5:11:7e:de:5d:7f:a1:8d:c3:c3:e5:b8:06:5c:
98:5a:f3:0e:5a:e7:93:2a:68:dd:1b:69:0b:5f:ba:
46:f5:00:a3:d6:3e:c5:86:91:7b:dc:e9:8f:bb:d3:
9f:64:28:38:aa:b0:ed:15:09:1a:8e:93:a8:51:a8:
d1:ac:b3:20:f4:b2:3b:41:19:0a:8c:a0:5f:c3:12:
b3:7f:f5:27:a8:3f:b6:ab:25:7e:49:fd:53:55:51:
fb:d9:bb:45:df:4f:53:e5:a7:94:2c:5d:9d:dc:cf:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DC:A9:F2:BB:29:B6:E5:D8:72:80:42:97:4E:2E:87:93:FA:D2:47
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Styp8rsptuXYcoBCl04uh5P60kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
08:43:85:bb:b4:74:b0:4b:da:e6:72:2b:87:f2:3e:17:37:cb:
5c:8c:eb:ab:73:1f:4c:c8:4e:7f:22:34:2d:b1:e7:3d:e4:eb:
aa:a5:82:2e:fc:63:76:23:1c:ac:aa:b6:cf:3e:1c:64:b0:24:
0e:b1:4c:b2:06:0d:65:2b:2e:e6:18:3c:bc:00:ad:05:b8:16:
ef:90:62:8a:6c:32:fa:90:12:b7:de:ca:ae:ed:a6:dc:cf:45:
1b:18:d1:6f:5d:50:f9:89:8c:c9:30:11:0e:cf:cd:45:f3:09:
46:fb:e9:05:7c:da:cf:1c:9f:96:1f:73:82:49:ec:82:86:ee:
6d:70:da:9a:a3:b0:2a:98:0d:e2:1a:3a:07:90:84:10:f4:db:
48:ca:ef:9b:1b:fe:a9:b6:6f:6c:86:1d:ff:2e:ab:27:59:14:
37:12:01:fa:12:27:9e:ec:60:28:15:fe:09:e8:86:62:4e:82:
e6:0d:10:a8:34:f2:56:90:f2:d2:5e:c0:08:4b:15:9f:b0:e5:
03:a1:bb:c2:84:a1:47:f5:c7:9d:7b:80:6b:9c:28:69:28:51:
65:06:8d:21:9c:a9:fc:51:14:da:47:5d:ca:78:6c:b0:5c:4e:
33:e7:8d:01:eb:bf:43:00:b7:dd:55:25:98:13:94:9e:d9:26:
61:01:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:52 2024 by rpki-client on console-fra.rpki-client.org