Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/80f3liyVJLGfppCXuYzpX9AuM48.roa
File: 80f3liyVJLGfppCXuYzpX9AuM48.roa (raw, json)
Hash identifier: q/IexruqXdLe77z0qfFiSoXRl61cfkQa5J9IFpEv2PE=
Subject key identifier: F3:47:F7:96:2C:95:24:B1:9F:A6:90:97:B9:8C:E9:5F:D0:2E:33:8F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019585F390B039424CC1F54890555A9D8CB5
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/80f3liyVJLGfppCXuYzpX9AuM48.roa
Signing time: Tue 11 Mar 2025 16:04:46 +0000
ROA not before: Tue 11 Mar 2025 16:04:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211659
IP address blocks: 77.83.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:f3:90:b0:39:42:4c:c1:f5:48:90:55:5a:9d:8c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 11 16:04:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f347f7962c9524b19fa69097b98ce95fd02e338f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:ba:14:a3:a4:15:d4:3e:28:a3:26:a2:4a:
7b:34:8f:b7:7d:e2:76:e0:4c:21:84:d6:9f:02:39:
c5:96:91:fd:c5:88:e4:f6:26:9d:64:7a:4e:75:8a:
a9:65:82:7d:e6:f3:9c:be:03:e3:93:91:38:9a:66:
88:22:e9:9a:65:c7:00:67:14:48:0a:7b:eb:f3:54:
d5:0d:0d:b2:67:95:c9:f3:cc:ab:df:49:31:24:50:
fd:7f:8e:fb:79:73:ce:e2:96:6a:cb:a6:00:45:2c:
cc:44:a7:b3:aa:04:93:80:dd:1a:85:e3:2c:d6:b9:
ea:32:e9:63:12:4b:65:6a:06:dc:43:d9:8c:4a:30:
c5:4d:98:35:d6:c2:8f:49:24:85:58:59:b0:97:d5:
24:d1:92:c2:60:b8:ac:76:a3:ac:af:99:f0:3c:69:
a6:f6:f6:2a:81:47:44:c5:1f:8b:86:15:05:f7:06:
a2:6c:07:84:ca:4f:97:ab:05:4a:03:63:f3:07:e8:
be:bd:c8:06:04:bd:80:b4:f5:78:1d:b5:dd:04:7e:
95:27:da:6d:1d:6a:fe:cf:10:14:91:26:14:6f:15:
25:5c:af:6a:b2:b0:10:8b:8f:6d:2b:01:8f:83:29:
86:97:0c:99:89:85:b5:47:a2:f1:4f:ae:d0:f1:dc:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:F7:96:2C:95:24:B1:9F:A6:90:97:B9:8C:E9:5F:D0:2E:33:8F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/80f3liyVJLGfppCXuYzpX9AuM48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.206.0/24
Signature Algorithm: sha256WithRSAEncryption
31:47:79:5f:0a:d7:6d:c3:ca:d5:3f:ed:12:02:29:cd:74:29:
29:42:b2:2d:da:42:a8:4a:15:91:00:cc:41:a8:63:17:e2:40:
07:16:d2:0d:2e:7d:58:2c:02:c6:6c:09:f2:ff:7f:2f:f6:76:
f7:a6:c2:2e:48:6f:81:66:bd:bb:1e:4d:ce:f3:df:d4:d1:17:
f2:86:ce:8a:25:c9:97:b7:33:4e:49:c2:b2:f2:9f:d7:bb:ee:
74:da:cb:db:18:56:dd:e4:73:d3:3d:62:f0:ce:0c:ab:53:02:
48:7d:15:fa:26:19:d0:51:83:16:1b:56:b6:cf:d3:50:27:b2:
94:b9:bf:2c:32:5a:31:f9:f2:e5:92:bc:ba:89:81:95:06:eb:
19:17:34:07:f4:d9:8c:c0:a4:4b:e1:88:68:f6:dc:56:99:87:
5b:f2:66:90:0c:83:40:a0:e3:50:61:6a:86:aa:53:4f:8e:4c:
ca:2d:c6:9e:d7:05:b7:19:85:53:a3:bb:c4:be:92:91:45:ed:
71:5b:7b:e4:6e:6f:5a:88:be:7f:ca:bd:48:2c:3a:15:a3:28:
f7:72:e0:94:1a:4b:b3:63:4b:bb:89:6e:42:ab:5d:04:b8:b2:
34:a8:7d:ee:13:2f:fd:93:65:ee:75:cd:5a:a4:12:67:cd:8c:
0d:de:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:10 2025 by rpki-client