Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/bA_e5br1PmSxWsqLddr2vRjon7w.roa
File: bA_e5br1PmSxWsqLddr2vRjon7w.roa (raw, json)
Hash identifier: K7HaBSLbX+bu7BjrpU1/OOqg8JnIXozOGz2JaJqaEA0=
Subject key identifier: 6C:0F:DE:E5:BA:F5:3E:64:B1:5A:CA:8B:75:DA:F6:BD:18:E8:9F:BC
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019425FBF5E108351F046A06C0F225C66EB2
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/bA_e5br1PmSxWsqLddr2vRjon7w.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208549
IP address blocks: 80.64.220.0/24 maxlen: 24
80.64.221.0/24 maxlen: 24
80.64.222.0/23 maxlen: 23
80.64.222.0/24 maxlen: 24
80.64.223.0/24 maxlen: 24
2a0d:1cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f5:e1:08:35:1f:04:6a:06:c0:f2:25:c6:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c0fdee5baf53e64b15aca8b75daf6bd18e89fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:65:d5:57:6a:7e:84:04:c4:9a:75:93:92:76:
fa:db:c7:b0:22:4e:43:4a:c8:41:aa:c1:de:2e:d1:
ff:d2:9c:5b:cd:e8:e7:2b:c6:bf:de:06:b9:6d:1d:
ac:c9:7c:cf:04:7d:30:45:97:7b:dc:a7:20:3f:83:
c8:59:27:cf:8c:56:50:e6:37:e9:df:b5:8c:5f:4e:
dc:44:b3:90:82:91:32:d3:c4:0f:38:1b:a3:df:a5:
36:04:0f:65:e6:e8:e7:85:7c:b6:46:b7:04:c8:81:
cc:e8:5e:25:3e:83:f8:f3:4a:a0:fd:9a:16:63:60:
5c:97:cf:fd:e9:67:d6:bb:7c:41:4e:37:26:8d:d4:
14:1c:ab:f8:3a:3b:3a:5e:af:fb:97:33:1a:c6:53:
8f:2a:3f:26:69:b0:35:ec:6c:94:eb:bb:7f:8a:cb:
ee:01:5b:16:80:0b:79:57:38:4e:ee:67:6d:8d:aa:
41:13:53:2c:d3:b7:4d:33:e7:2e:a7:f7:6b:0e:9c:
52:5c:40:8d:28:8a:77:96:da:b3:8a:59:ee:a0:d5:
25:fb:04:e2:2b:aa:b1:26:10:62:ac:92:fa:0c:f0:
22:92:83:84:79:52:d0:f8:47:54:eb:b2:4e:a3:77:
da:c2:59:96:69:2e:86:c8:37:41:fd:ad:79:18:70:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:DE:E5:BA:F5:3E:64:B1:5A:CA:8B:75:DA:F6:BD:18:E8:9F:BC
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/bA_e5br1PmSxWsqLddr2vRjon7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.220.0/22
IPv6:
2a0d:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
28:54:39:fc:91:68:6b:d4:5a:bf:c6:81:a0:24:68:ad:83:3f:
fb:98:ef:46:ee:69:2a:f8:7d:0a:71:33:33:1f:2b:36:19:d0:
14:79:35:8c:60:7f:36:d0:9a:3a:e2:8b:ac:e9:71:b2:28:f6:
37:e1:52:e1:52:68:47:01:c8:f0:b7:3d:1a:90:29:3e:03:d8:
9c:eb:fe:0e:e8:54:85:5a:97:3d:d9:2e:e4:46:66:99:32:33:
91:7d:c4:cf:04:b8:51:1f:b2:38:0c:97:33:1b:0f:4e:02:9a:
4e:5d:29:94:85:57:41:1e:ed:e0:fe:07:6f:8c:85:29:d9:35:
12:e1:b1:ee:71:c1:d8:71:18:b5:cd:3a:c7:7b:96:33:8f:b3:
8d:cf:9f:99:2f:53:d9:80:fd:ca:37:8b:f1:b8:ef:ed:34:01:
58:48:4f:e4:d9:b6:6c:a7:62:82:0c:28:1a:d7:4e:0c:a5:ff:
28:48:ca:67:c6:d7:30:80:46:77:63:77:52:c7:b2:84:27:92:
47:ff:8f:7e:3b:3f:9b:17:e7:90:33:9b:3a:6a:1c:55:03:58:
07:87:b2:41:1e:b4:79:b5:41:c6:8f:af:0e:31:4c:aa:34:1a:
cc:db:92:03:d0:60:40:47:46:3d:db:47:a3:fa:8e:67:ab:74:
49:51:32:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:43 2025 by rpki-client