Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa
File: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (raw, json)
Hash identifier: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=
Subject key identifier: C1:9C:EE:9E:D2:EB:D5:0C:FC:10:44:2B:23:C8:1A:C4:DF:4F:27:39
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01942067EDEF3EB37F9F89EDE754AF974111
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49086
IP address blocks: 80.228.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:ef:3e:b3:7f:9f:89:ed:e7:54:af:97:41:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c19cee9ed2ebd50cfc10442b23c81ac4df4f2739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:83:87:16:8f:bd:af:78:1d:c9:09:c6:e7:
74:a4:c9:29:0a:66:b9:01:8f:a7:7e:99:87:db:9b:
a5:c9:25:3c:36:02:80:27:db:3c:a3:66:b1:11:4f:
da:92:dd:dc:70:56:4c:18:f0:03:f0:8b:40:df:09:
5b:f0:59:a0:46:fc:e0:1b:f8:d3:a2:a1:eb:8b:e3:
03:af:20:69:23:0c:7d:8f:47:15:e7:39:b1:0a:b3:
01:89:ac:0a:70:ea:8b:d2:af:25:e6:49:f9:bf:e2:
80:c7:33:e9:5e:2d:de:02:1e:f2:7d:20:76:a0:5f:
4b:91:3c:6a:02:9d:f3:94:46:bc:e7:19:76:84:38:
d2:9f:b7:04:91:e4:e7:4e:77:97:28:2e:2d:41:b3:
11:80:b8:d8:aa:01:93:93:ad:57:bd:39:86:07:3a:
2c:56:81:db:8e:23:75:01:44:83:39:92:b6:5f:ec:
bd:14:b4:7b:a8:26:43:ba:c6:a6:ff:42:bc:17:72:
49:80:56:28:68:3a:3d:2f:81:e2:a5:1f:18:5c:5a:
c6:e0:ff:9f:de:b0:b6:ff:f0:08:cf:1a:3f:20:89:
93:02:d2:b6:4b:ea:4b:a8:56:43:ed:90:60:f5:9a:
75:ae:f3:5b:e3:8e:c4:ad:ef:07:93:99:43:ec:74:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:EE:9E:D2:EB:D5:0C:FC:10:44:2B:23:C8:1A:C4:DF:4F:27:39
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:72:22:2b:e2:6c:ec:7e:db:cf:fa:b6:52:2f:ba:ee:ad:05:
37:45:b4:26:de:5c:d5:6a:01:80:ea:88:be:51:7a:80:4b:39:
1d:74:fb:7e:d5:4d:f8:f5:f2:c4:35:ae:4a:4d:c8:fb:55:18:
50:99:03:b4:9f:34:ea:f9:7c:a4:63:f4:75:82:d6:a8:ff:36:
d4:ab:be:a1:df:7c:de:70:52:21:c9:83:20:b4:b2:13:26:2f:
03:c0:15:2f:3e:da:61:18:db:99:1f:6a:35:04:0f:e3:2a:34:
2f:ee:7d:15:72:a0:d6:70:4f:c6:01:4f:d5:87:a7:90:eb:c1:
30:9e:3e:78:af:d7:0c:92:4b:33:47:a2:48:72:ae:7a:a5:1d:
4f:ae:96:cf:61:49:e1:29:24:a8:79:c7:35:2c:c9:9a:0a:60:
79:33:8f:a3:f6:63:5b:cd:db:1e:bf:25:dc:ab:ab:a4:c5:5e:
5c:31:a9:d0:87:6f:3f:43:1a:6e:70:43:11:d8:9c:b0:21:dc:
c2:2e:d7:c4:27:28:a2:47:10:31:b7:c8:23:14:16:a2:96:c7:
20:ce:12:f0:01:ca:a3:21:1b:15:0c:d7:9b:f5:d8:0a:f1:6c:
44:b2:d5:68:8c:20:8c:32:69:1e:c9:28:7b:35:3d:d8:bc:19:
8b:54:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:26 2025 by rpki-client