Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xK4UStYZpxl5WaBqzM4Z1Ma_r4g.roa
File: xK4UStYZpxl5WaBqzM4Z1Ma_r4g.roa (raw, json)
Hash identifier: AtvX/iaf8g7CiAoITeIvKvEKZQTERVLHMHXffA7KZCw=
Subject key identifier: C4:AE:14:4A:D6:19:A7:19:79:59:A0:6A:CC:CE:19:D4:C6:BF:AF:88
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D894C542DDDCEECFA1AEE38F255A
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xK4UStYZpxl5WaBqzM4Z1Ma_r4g.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 80.71.237.0/24 maxlen: 24
80.71.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d8:94:c5:42:dd:dc:ee:cf:a1:ae:e3:8f:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ae144ad619a7197959a06accce19d4c6bfaf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3a:cd:f7:34:dc:3f:35:65:1f:09:11:15:40:
fe:e5:f2:7e:51:b3:7e:4c:a6:c0:dc:17:6a:be:c5:
79:33:e8:80:09:e1:6d:6c:9b:60:54:43:64:0a:23:
7d:86:bd:00:4e:0f:d1:83:f3:b9:6a:36:21:c8:f6:
46:fe:1b:d5:e2:8c:37:26:a2:8c:37:f1:75:1c:7c:
17:ed:d9:64:64:43:37:4d:54:21:1a:14:8c:83:4f:
c4:d5:8d:83:9e:b7:40:58:a5:24:9f:40:40:79:2c:
e8:60:2f:a4:8e:3a:c7:c1:7f:41:5d:a1:35:b5:09:
a0:98:cd:19:1a:3c:d0:e7:ef:00:9e:1c:4a:9c:f9:
62:b0:5c:53:da:cf:77:6d:2f:77:ee:56:5a:37:92:
5a:95:3e:74:0b:f8:83:9f:1c:46:39:28:5d:03:7a:
df:ab:a8:5c:30:e4:6d:7f:2f:ec:7e:24:04:d8:3d:
ce:c9:7e:94:b0:07:09:72:67:88:92:d2:bd:8e:5b:
64:4b:f1:95:97:12:5c:cb:9f:5a:0e:69:95:5f:c4:
1c:28:5d:d8:a1:09:5d:fb:82:f2:93:43:d5:cf:8e:
c9:d6:76:3f:87:39:e4:10:a1:38:c2:29:96:ef:84:
d6:c3:9a:90:15:23:b1:11:a4:4f:ab:61:34:6c:90:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:14:4A:D6:19:A7:19:79:59:A0:6A:CC:CE:19:D4:C6:BF:AF:88
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/xK4UStYZpxl5WaBqzM4Z1Ma_r4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7f:50:d1:dd:81:ac:8b:13:97:5e:3d:3c:d9:13:d9:36:5b:
ca:47:3e:77:9c:ab:38:78:81:37:ed:61:5c:4b:37:fd:14:ff:
15:ae:14:c4:b2:29:e6:3f:63:3f:d3:32:17:23:43:35:c7:ea:
56:cb:1d:a2:53:1f:b7:83:c1:05:d4:30:8e:ee:3d:91:64:e3:
d9:74:e0:37:bd:c2:de:47:80:77:39:49:9e:5d:6f:28:dd:ea:
78:31:44:5d:5f:cd:45:be:8e:88:18:54:55:7b:2c:f5:12:ce:
db:f8:69:c3:26:6d:7f:8b:86:2d:cc:f9:35:38:c9:a8:e3:20:
16:33:4b:04:32:eb:97:1b:a3:fb:08:8a:2b:4a:32:39:f9:5d:
23:77:4d:d3:00:47:26:2d:23:ab:51:1f:de:7f:8d:08:4e:ba:
69:a0:36:14:cd:e5:23:e8:2c:84:2a:5b:aa:28:61:3d:91:d5:
ba:93:9a:1b:f3:db:61:31:10:a8:b2:6c:b8:af:d4:4f:e7:51:
49:92:ce:50:15:5d:12:4e:0a:47:b4:25:2c:37:90:8a:97:c4:
a4:86:9e:11:1a:f5:b0:e5:fd:52:f8:4d:c5:dd:80:c0:f6:49:
31:7e:1d:ee:2a:8d:5c:77:d7:e8:6d:da:f4:f8:64:2f:c5:a3:
92:96:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:44 2025 by rpki-client