Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/b4fYfIgiMl29Y4eA44p2mPzGUyQ.roa
File: b4fYfIgiMl29Y4eA44p2mPzGUyQ.roa (raw, json)
Hash identifier: aqKNFJvxUOaQTzw/0+z0DW8DJMY+vXmlPCkP9UH3L5Q=
Subject key identifier: 6F:87:D8:7C:88:22:32:5D:BD:63:87:80:E3:8A:76:98:FC:C6:53:24
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018CC64B2BD2AD2A66C3965F8A7E83F8E05B
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/b4fYfIgiMl29Y4eA44p2mPzGUyQ.roa
Signing time: Mon 01 Jan 2024 18:31:04 +0000
ROA not before: Mon 01 Jan 2024 18:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209638
IP address blocks: 80.249.112.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
80.249.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2b:d2:ad:2a:66:c3:96:5f:8a:7e:83:f8:e0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 18:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f87d87c8822325dbd638780e38a7698fcc65324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:9e:83:40:c4:6c:0a:69:7a:6a:16:f7:04:
0f:9e:b4:8a:f1:21:e8:49:aa:17:8b:ba:b8:9a:dc:
c8:14:ba:74:b7:89:45:95:14:af:5f:d8:fb:ef:5d:
b5:b5:6d:cd:85:e2:bd:21:ff:68:49:46:52:c6:be:
8b:d8:b7:02:8a:2f:12:8a:85:5e:3b:9c:64:e6:16:
f9:81:3e:ff:be:9e:01:7b:64:af:f3:66:8f:79:48:
11:84:20:50:42:80:04:a9:00:f2:8b:70:f8:5c:7f:
a1:41:45:18:1d:ff:3d:5f:8f:b3:de:0d:50:c5:50:
2e:e0:0a:54:ca:53:2e:a0:43:cb:be:4e:86:6a:51:
07:fa:d5:71:35:df:0d:c7:c0:03:28:39:ed:1a:7b:
57:9d:89:b9:48:aa:2f:84:0c:d4:7c:21:c3:0e:dc:
4d:6a:65:be:14:b6:c1:4d:b4:50:33:3e:fe:96:4b:
93:a3:d8:8a:67:6b:1e:60:61:db:71:19:fd:52:da:
f1:81:9b:7c:78:a4:a8:ce:aa:5d:8f:c7:97:72:bc:
1b:dc:13:00:79:f8:15:e1:db:e1:f0:f7:9d:fe:a3:
2e:4a:2f:1f:35:5a:ce:1c:b4:7b:a6:71:13:ea:77:
46:fb:27:51:1a:4b:f7:9a:6d:78:4a:eb:d2:6e:e3:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:87:D8:7C:88:22:32:5D:BD:63:87:80:E3:8A:76:98:FC:C6:53:24
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/b4fYfIgiMl29Y4eA44p2mPzGUyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.112.0-80.249.114.255
Signature Algorithm: sha256WithRSAEncryption
38:c6:f9:d7:71:41:a1:ef:e8:28:95:17:78:88:16:dc:78:43:
bd:c4:9a:a6:f5:a2:3a:2d:d0:4e:8d:64:95:96:c5:3b:82:00:
17:ec:56:ca:a8:a4:53:0d:49:3b:ca:b2:fa:10:02:41:84:35:
ab:c8:c5:99:17:61:7e:95:60:8c:0c:a5:e5:f8:60:fd:fb:9e:
b9:c5:f2:28:e5:a5:24:78:7c:7b:4f:25:cf:ab:ab:b8:6f:83:
6f:7e:1c:72:46:8e:50:54:3c:b5:90:f7:9a:58:bd:0c:c7:04:
ed:72:90:6e:99:40:c1:92:54:4c:71:89:76:76:f1:96:e3:32:
d6:37:45:6b:c6:b8:1a:49:d0:b0:b8:2e:bd:8b:ba:57:77:dc:
f8:0b:b1:9c:dd:20:e3:a4:af:52:f1:ae:60:e5:59:50:50:bb:
92:13:3e:60:43:37:5d:26:88:dd:92:28:0d:66:88:6e:27:99:
75:65:ca:5a:6c:c0:33:d7:7f:65:f2:7d:22:35:f3:92:97:a4:
2b:2d:42:ca:3e:32:7f:17:d6:3f:3e:6e:35:9d:dd:07:e3:24:
e0:2d:cd:69:b3:f3:93:1e:42:ac:0a:32:d9:4e:e8:fa:d9:0f:
a7:35:da:16:59:18:41:8f:6f:d6:ef:0e:b0:bd:e2:9c:de:d1:
a5:81:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:20 2024 by rpki-client on console-fra.rpki-client.org