Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/80-bvR7xaLNhoFQ79M7PNy2xA7E.roa
File: 80-bvR7xaLNhoFQ79M7PNy2xA7E.roa (raw, json)
Hash identifier: Sp38tF9SDEC7VF/ireARdMx9CT1to3aySetzveDoZdM=
Subject key identifier: F3:4F:9B:BD:1E:F1:68:B3:61:A0:54:3B:F4:CE:CF:37:2D:B1:03:B1
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 018CC8DFA52F944D0460A7985B3C5E6DD7B2
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/80-bvR7xaLNhoFQ79M7PNy2xA7E.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3360
IP address blocks: 2a03:5000:22::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:1::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a5:2f:94:4d:04:60:a7:98:5b:3c:5e:6d:d7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f34f9bbd1ef168b361a0543bf4cecf372db103b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:ca:ac:58:a0:78:b3:e9:4b:f1:e4:79:db:
aa:aa:47:10:b4:5f:48:f9:45:01:2a:ec:b5:0b:e7:
d6:cd:0e:76:36:38:5f:41:ab:05:f9:0f:de:62:3a:
41:ff:c4:71:3e:3a:f6:3e:ac:ff:5c:10:63:b5:e8:
fa:57:34:d3:27:6d:90:7b:d7:3c:e2:e0:cf:97:f2:
b7:3e:b7:77:98:fe:1e:14:84:2e:17:67:5b:c3:78:
f8:58:b4:73:f1:69:d7:11:f5:cf:21:53:e8:ac:3e:
1c:db:96:b9:ed:b0:a8:fa:a7:aa:f2:43:f5:30:3e:
fc:33:31:b6:87:3c:d0:cb:53:11:f2:38:11:f2:7d:
2c:62:54:6b:16:c6:43:1c:0d:64:cf:07:1c:3d:a3:
62:13:01:fd:e0:98:cf:45:c4:26:b6:4e:14:5f:78:
4c:ce:c1:b3:6f:e3:e4:3b:51:5f:9e:c6:7a:9c:76:
3c:a3:14:77:39:e5:1e:bc:7c:b0:6d:2c:4f:89:b7:
66:01:6e:38:e3:3a:17:8c:e3:c6:da:e2:8a:02:cf:
eb:08:63:78:cc:56:71:c9:13:d9:51:80:65:6b:0c:
9e:eb:3d:61:4e:dd:59:36:45:84:2a:2b:de:d1:b3:
db:bd:80:1e:02:c3:86:c7:66:d5:e1:62:7e:fb:29:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4F:9B:BD:1E:F1:68:B3:61:A0:54:3B:F4:CE:CF:37:2D:B1:03:B1
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/80-bvR7xaLNhoFQ79M7PNy2xA7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a1:17:56:a3:67:de:7d:e3:20:b2:77:dd:b4:76:1d:e7:95:fa:
f3:cd:6a:07:fa:28:36:05:a5:0b:b7:22:09:20:07:7e:5c:11:
79:f1:d5:9f:fd:cd:37:a0:7f:1d:27:98:9e:25:0d:ef:e7:ba:
bd:1d:db:ec:47:4c:5c:6f:31:e9:74:2e:ad:5c:cf:da:1c:80:
54:80:df:ad:63:6b:75:cc:06:72:f1:71:52:ec:a5:ab:87:17:
70:c5:56:ab:48:05:bf:ad:e6:19:6d:ee:8b:eb:f1:cb:8f:0c:
8d:df:a7:57:40:63:a4:33:c7:24:76:a9:0a:31:84:6e:d6:58:
03:82:c6:db:58:d4:4f:a9:e4:f3:46:51:28:74:f4:7a:b0:1a:
22:db:50:c2:df:d4:c4:61:39:7c:97:ad:d3:a5:5c:03:5d:5e:
dc:ab:7f:db:d3:1a:f6:c4:7d:07:3f:7a:88:3f:09:d8:23:90:
d0:7a:8f:82:3c:50:45:bc:01:ae:83:2d:10:50:2b:70:4b:57:
39:4a:2b:f1:22:aa:6e:a5:a0:09:ab:59:86:49:d6:2c:80:91:
12:6a:d0:db:26:f8:90:11:a1:5d:d6:77:ce:03:20:a8:4c:10:
81:95:82:24:39:70:1c:44:d3:7e:82:44:a1:74:e3:53:0b:46:
31:1b:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:29:02 2024 by rpki-client on console-fra.rpki-client.org