Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa
File: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (raw, json)
Hash identifier: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=
Subject key identifier: 7D:F3:E3:AD:55:6E:EE:51:6B:22:B4:FB:69:21:1E:68:ED:80:5F:A6
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 01942067FD0691A9962E8A561CB6EDC21F11
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21453
IP address blocks: 80.84.112.0/20 maxlen: 20
80.252.128.0/19 maxlen: 19
88.84.192.0/19 maxlen: 19
94.253.0.0/17 maxlen: 17
94.253.0.0/18 maxlen: 18
94.253.64.0/20 maxlen: 20
94.253.96.0/19 maxlen: 19
95.183.64.0/18 maxlen: 18
178.57.224.0/19 maxlen: 19
178.167.0.0/17 maxlen: 17
178.167.0.0/18 maxlen: 18
178.167.64.0/19 maxlen: 19
178.167.96.0/19 maxlen: 19
185.5.148.0/22 maxlen: 22
212.7.224.0/19 maxlen: 19
2a01:4200::/30 maxlen: 30
2a01:4200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fd:06:91:a9:96:2e:8a:56:1c:b6:ed:c2:1f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df3e3ad556eee516b22b4fb69211e68ed805fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:e1:8c:25:4b:39:49:01:3e:8e:69:46:b5:
65:39:ba:59:68:07:6b:5f:2a:58:7f:e1:24:ae:3f:
3f:e9:c3:d3:9e:09:f2:64:52:32:2b:17:d0:53:c9:
5f:39:4a:69:31:ba:3e:62:6b:d5:cd:48:94:dd:a8:
9d:ca:11:71:63:ef:f0:40:25:0c:c3:4a:4c:65:61:
af:90:da:94:bf:f1:5c:3c:0e:6f:7d:6e:1e:2c:7c:
34:fc:06:a4:4e:a7:49:61:5f:27:d8:9c:c5:42:76:
0e:a7:5a:32:89:fa:19:78:46:5e:2b:1c:02:ef:77:
bd:21:0a:48:a9:6b:01:c1:55:ac:5e:69:a4:86:f9:
ea:52:1c:94:4d:7e:d8:34:67:c1:03:6b:b2:f3:97:
24:9c:7e:3b:a6:7a:e6:57:f5:68:fc:2f:35:4c:18:
7c:7b:a0:bd:40:f8:e9:56:1e:80:1e:3b:9c:27:fe:
b7:fd:7a:6e:9e:8e:fc:bd:8c:58:52:04:ec:05:97:
4c:a2:e9:fb:82:9a:5a:c9:1e:25:2d:6a:b8:12:94:
57:dc:cc:e2:89:6a:6f:25:02:e6:df:ae:df:cd:d1:
bd:dd:cf:1a:dd:d5:8a:b9:07:31:d7:98:47:7e:41:
49:4c:e3:b7:82:5a:80:80:33:15:5a:02:ba:f4:21:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F3:E3:AD:55:6E:EE:51:6B:22:B4:FB:69:21:1E:68:ED:80:5F:A6
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.112.0/20
80.252.128.0/19
88.84.192.0/19
94.253.0.0/17
95.183.64.0/18
178.57.224.0/19
178.167.0.0/17
185.5.148.0/22
212.7.224.0/19
IPv6:
2a01:4200::/30
Signature Algorithm: sha256WithRSAEncryption
2c:67:0f:a0:0c:89:ab:89:27:b8:a1:1a:76:9c:8e:94:ae:9b:
85:67:0b:1a:42:a2:73:8d:96:d7:4c:e2:6c:a2:54:c4:ad:25:
0c:8e:3b:4a:24:ba:fc:d7:ec:c7:dd:53:51:74:67:3e:dd:59:
c5:94:97:09:a5:35:92:f8:96:0b:ae:82:58:20:c6:e1:4e:4d:
fa:b0:d6:d3:cc:56:27:4c:19:e9:ec:1d:3f:f4:6c:4e:17:51:
bf:8d:50:55:93:07:d3:f2:9e:b1:f4:c2:08:fb:c7:5d:f8:6d:
3f:eb:a1:c8:8b:2e:6e:92:c6:bc:ba:30:bf:95:6e:18:13:b7:
41:21:cf:20:7f:3c:6d:25:69:e2:24:68:ba:17:61:f7:39:db:
ac:63:cd:eb:12:c2:0f:fc:cc:47:b4:5a:4e:f3:f4:17:bb:79:
be:01:64:0c:20:0d:2d:c9:0d:74:a6:93:f9:d4:a8:9f:ad:e0:
98:4b:2c:8d:86:6a:57:7f:03:64:22:3b:21:73:aa:7a:5a:5b:
24:c3:8e:a3:e4:83:89:a3:27:6c:bb:f7:de:bb:50:64:22:de:
7b:88:c6:d5:3b:f4:c0:a4:21:af:c5:ab:e1:8d:0d:67:f5:4d:
10:87:47:eb:83:41:b0:e8:8e:be:f1:8b:dc:03:1c:f2:16:e8:
c2:c8:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:44:46 2025 by rpki-client