Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/hFGJINVEt4ftaLRW68GmieH_BnE.roa
File: hFGJINVEt4ftaLRW68GmieH_BnE.roa (raw, json)
Hash identifier: 9E4AE+rQ+a3SR9l9k7qEf9uVvkCgRfq35VdS2VefDEk=
Subject key identifier: 84:51:89:20:D5:44:B7:87:ED:68:B4:56:EB:C1:A6:89:E1:FF:06:71
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CFE3E3CE5E2BFA3CBE1710D5EFE41A508
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/hFGJINVEt4ftaLRW68GmieH_BnE.roa
Signing time: Fri 12 Jan 2024 15:15:40 +0000
ROA not before: Fri 12 Jan 2024 15:15:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 80.71.239.0/24 maxlen: 24
80.71.237.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:3e:3c:e5:e2:bf:a3:cb:e1:71:0d:5e:fe:41:a5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 12 15:15:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84518920d544b787ed68b456ebc1a689e1ff0671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:3c:87:7c:6a:85:e5:f5:51:e9:06:49:33:
7d:8f:84:ad:55:14:73:b5:2f:b1:b2:42:f9:21:9c:
54:e3:26:1f:ef:7c:99:c4:1b:d0:24:01:e7:57:a6:
c2:06:f2:d6:99:34:fb:ce:09:e6:c7:62:7a:ef:31:
21:d4:2b:c8:41:29:36:36:5e:ab:a0:7e:12:bd:5d:
ea:64:26:88:0d:83:52:e9:d0:8c:df:fb:95:0d:23:
92:51:ea:6b:8b:22:91:91:ae:80:0b:7f:10:48:c7:
79:43:5b:d9:3d:97:32:39:8a:4d:7e:23:35:3b:76:
cc:e4:a1:25:c7:83:83:ba:82:f0:b6:65:2a:17:49:
29:1f:1a:28:ab:b0:f9:19:ec:5c:9d:14:3f:6e:c6:
17:c3:a3:f5:75:51:73:bc:7c:17:28:c3:a6:07:55:
85:80:cb:35:f2:83:bc:d3:9c:c1:40:8e:ce:ac:6f:
b9:47:3b:f2:f5:cc:c5:4b:14:c5:ce:c8:cc:bd:7c:
0d:ad:06:1b:85:71:ad:31:cd:74:e3:bf:6b:ed:1d:
9c:5c:c9:8b:76:f9:b2:f7:86:30:7d:22:8e:fc:6f:
4b:0f:92:13:2a:66:42:e1:b7:0e:17:6c:a6:7c:3c:
51:70:4c:19:6a:f9:bb:1c:97:10:73:c8:48:f4:4f:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:89:20:D5:44:B7:87:ED:68:B4:56:EB:C1:A6:89:E1:FF:06:71
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/hFGJINVEt4ftaLRW68GmieH_BnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e0:28:e3:a5:c6:fb:be:97:1f:7b:6c:4d:0c:42:b0:cc:a8:
5d:ea:5d:41:fd:ec:cf:83:56:2a:b7:59:51:da:2e:ac:43:4f:
5c:dc:3b:d5:d5:8a:6d:0b:90:b1:3d:ab:a1:56:5d:dd:eb:40:
7f:bc:22:8d:b0:95:2f:da:67:f7:58:e5:da:4f:9d:99:78:ed:
e3:7c:bb:a9:74:03:75:10:b0:05:32:ab:98:0d:32:a6:42:62:
40:a2:5f:8e:b8:04:ae:78:74:61:57:28:9c:18:bd:cb:ea:33:
9f:b4:bb:dd:ef:b2:b0:f2:8e:6a:fd:4b:53:fe:1f:8d:1f:45:
be:d3:5c:35:d5:c2:ed:5f:73:16:f5:c6:5a:43:e4:d3:6b:bc:
c9:5a:fe:40:5f:ef:5b:52:38:a8:06:29:b0:ad:1f:f4:66:63:
75:c1:f5:b6:b9:9a:94:9f:da:4f:ea:5e:92:15:27:23:cb:a3:
0c:03:8a:1f:0c:a5:05:27:1d:a2:67:98:0a:7d:74:cc:82:a3:
30:4c:4d:78:d1:e6:d5:38:de:63:17:47:0b:0c:c6:2f:1c:61:
80:06:7f:84:9d:8c:bb:de:90:09:12:bc:06:ac:00:a6:10:fd:
bf:27:bf:ab:46:d5:06:17:87:a6:e6:77:24:0a:94:11:ae:7f:
6a:64:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 14:30:48 2024 by rpki-client on console-ams.rpki-client.org