Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/80LgJ-bt-JVgl28q8iQu1JZiGBg.roa
File: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (raw, json)
Hash identifier: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=
Subject key identifier: F3:42:E0:27:E6:ED:F8:95:60:97:6F:2A:F2:24:2E:D4:96:62:18:18
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 0194206829025C71E0787B224E2397DE4221
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/80LgJ-bt-JVgl28q8iQu1JZiGBg.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203646
IP address blocks: 87.239.64.0/21 maxlen: 21
185.128.72.0/22 maxlen: 22
2a03:9aa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:29:02:5c:71:e0:78:7b:22:4e:23:97:de:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f342e027e6edf89560976f2af2242ed496621818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:b1:0c:58:da:86:d5:50:68:07:25:d4:e0:
1b:c0:5f:40:91:74:3e:49:91:37:a3:9c:6c:04:9b:
29:30:64:af:3e:8b:b4:9d:6c:7a:22:af:03:f1:9c:
5b:87:c7:25:e6:78:9e:01:ae:23:9e:7f:a8:9c:e9:
ba:b3:05:84:4b:0d:16:35:f8:57:3d:7d:8d:62:66:
1d:a7:77:d1:57:eb:79:d6:9e:3e:a4:c3:2f:90:5b:
0a:7a:37:e5:a0:70:58:15:10:66:27:46:d7:09:99:
bd:a2:c4:1e:88:aa:41:38:b7:dc:1f:04:55:1f:56:
02:8e:f1:fa:fa:ca:a2:a3:06:c6:32:33:62:ed:0a:
3f:33:14:50:f8:d0:1a:75:65:e4:7a:d9:35:96:51:
93:37:f3:d6:47:1a:7e:fa:88:7d:2d:5e:77:fb:6d:
24:94:16:31:5b:6b:4a:ca:54:db:84:13:26:25:b7:
ee:4d:e3:8e:47:38:7c:0e:c8:25:b3:d9:6c:a5:50:
27:bb:77:3c:d0:e8:b4:59:21:3f:ad:f0:70:8c:33:
4f:a4:0b:a0:b7:ba:c9:c5:7c:0a:6a:ca:af:4d:23:
08:51:4c:8d:27:06:1c:40:1d:b5:29:2d:9c:53:b9:
fa:56:cf:02:7d:9f:f9:33:66:f4:b4:74:fa:2b:82:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:42:E0:27:E6:ED:F8:95:60:97:6F:2A:F2:24:2E:D4:96:62:18:18
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/80LgJ-bt-JVgl28q8iQu1JZiGBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.64.0/21
185.128.72.0/22
IPv6:
2a03:9aa0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ed:6a:73:8c:61:e3:c2:8d:9f:21:e7:79:50:59:4f:ab:da:
9c:ae:ab:a7:61:7a:91:49:ab:ee:3e:47:26:06:4d:c0:25:f6:
f6:e1:5c:34:ca:d4:a0:8d:08:b4:2f:c3:a9:54:49:29:28:ba:
52:30:2e:47:16:9e:56:0c:60:f6:98:51:0b:b2:5f:c7:8f:a2:
2c:68:8d:23:6f:21:19:d0:18:a7:dc:ba:92:d3:f5:bf:99:22:
44:13:3f:16:09:96:95:05:f8:7c:e2:eb:10:34:f1:b1:37:16:
aa:de:51:80:98:75:f8:65:af:de:94:88:82:34:71:9c:53:ce:
90:82:3b:fc:42:55:b1:78:8e:0c:48:8a:68:7f:8c:48:c6:b5:
e4:a4:af:7c:0c:74:29:1b:ec:38:a7:78:53:b3:24:ac:ed:20:
d9:4a:0e:e8:df:0c:0a:6b:32:04:14:a4:4a:dc:dc:78:6f:a2:
d1:ee:49:b7:b9:58:b9:9c:2a:5c:bd:42:2d:95:d1:c7:c3:8f:
23:9b:15:33:71:36:00:d4:84:a9:c9:c4:11:20:16:94:00:96:
3d:53:3c:6b:03:14:7b:a9:97:bb:65:5e:97:2b:9d:3f:75:28:
00:20:ea:34:ad:82:0f:b1:1b:82:8a:75:83:51:5d:2a:77:12:
d3:ad:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:25 2025 by rpki-client