Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/N994a833bc2uIsA--2ZFV_U7vK0.roa
File: N994a833bc2uIsA--2ZFV_U7vK0.roa (raw, json)
Hash identifier: y5YvusL5mCqgFNDXvaktcHZW0AUoplzITf8148wwjn4=
Subject key identifier: 37:DF:78:6B:CD:F7:6D:CD:AE:22:C0:3E:FB:66:45:57:F5:3B:BC:AD
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B68183F9CE34642BCDB56AEAF8396E
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/N994a833bc2uIsA--2ZFV_U7vK0.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35994
IP address blocks: 80.67.67.0/24 maxlen: 24
80.67.75.0/24 maxlen: 24
80.67.80.0/24 maxlen: 24
193.108.155.0/24 maxlen: 24
195.245.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:81:83:f9:ce:34:64:2b:cd:b5:6a:ea:f8:39:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37df786bcdf76dcdae22c03efb664557f53bbcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:45:c2:2f:7f:7b:b4:40:27:0d:d7:1d:51:
39:a8:6f:47:1e:35:0c:01:b9:85:df:4f:be:80:d8:
35:d8:8a:42:ad:d0:13:b4:21:4a:b7:63:a1:7a:bc:
61:5b:55:b3:aa:b0:77:f2:c3:6d:53:b5:32:23:5b:
c7:31:52:9e:cf:e9:96:15:03:ce:c6:6d:9e:36:d6:
6d:e2:fe:eb:d5:f3:72:a0:2d:c9:68:ff:99:78:8d:
36:58:3e:e4:f5:0b:84:45:64:2f:9a:b2:cf:c0:63:
67:b4:94:57:de:b2:4f:26:8a:0b:c6:57:2b:78:fc:
00:2c:ba:fc:bc:03:63:78:c3:68:88:2c:41:bd:5b:
1b:d6:9c:8f:e2:fd:e3:1d:6b:7d:09:72:30:b1:3a:
90:f7:50:8d:8d:78:e0:10:48:6c:40:05:87:a2:43:
3d:3c:64:06:92:72:54:75:66:e6:af:05:02:ef:11:
43:bd:5b:04:20:0c:a9:b1:2f:64:5d:a8:58:ad:6f:
42:b9:9e:7d:18:fb:ec:15:14:38:65:7d:80:ca:dc:
76:3e:35:b4:7e:f2:1e:83:a8:de:10:02:6f:3c:87:
eb:4c:b9:c2:58:df:61:bd:7e:66:a1:dc:73:fa:3d:
4e:70:13:a3:fd:84:be:79:18:e6:e5:ef:6d:6f:2b:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:78:6B:CD:F7:6D:CD:AE:22:C0:3E:FB:66:45:57:F5:3B:BC:AD
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/N994a833bc2uIsA--2ZFV_U7vK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.67.0/24
80.67.75.0/24
80.67.80.0/24
193.108.155.0/24
195.245.124.0/24
Signature Algorithm: sha256WithRSAEncryption
28:5c:47:ee:69:eb:9d:91:48:4d:5c:ed:59:f4:d0:c2:50:d0:
2b:c9:d7:07:9a:c9:f8:5f:59:66:cb:1e:2b:1a:c6:18:44:ca:
c0:3b:eb:8b:a5:c2:b9:32:a3:54:37:48:8d:82:b2:e1:8c:ef:
f4:77:ca:52:60:af:19:59:3d:f7:7d:e7:90:38:84:ae:41:a2:
51:c3:0b:0a:90:a2:6c:b8:9e:b0:c7:40:f2:39:49:32:61:0d:
81:a0:d7:0d:fc:25:ec:b6:30:2d:f0:9d:26:0a:e2:8b:c8:54:
97:a8:3d:3e:bd:22:ba:3d:0d:f7:ea:f2:f5:40:68:99:57:ea:
a9:33:c1:f3:03:b5:ea:e0:56:56:e8:e3:27:21:08:15:de:51:
9f:b6:88:3c:2f:d6:71:f9:73:9f:42:c0:9c:d0:d1:78:36:b5:
54:5a:b6:07:b2:fd:97:e9:37:01:b6:d6:5a:ad:fb:90:84:ee:
55:3c:9f:aa:b7:7d:c7:70:e2:56:66:94:ee:8f:35:c1:b6:d1:
33:23:aa:3a:a3:ab:1c:61:ed:26:37:b8:0a:1c:2f:f4:84:bf:
f0:de:76:f4:c6:5b:b5:d5:78:91:35:23:37:2d:77:d1:f6:be:
a6:95:57:af:d2:dd:96:c9:e9:b3:13:bc:aa:bd:af:1d:73:38:
e1:1c:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:13:21 2025 by rpki-client