Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa
File: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (raw, json)
Hash identifier: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=
Subject key identifier: 19:D4:CC:48:11:E6:31:73:4C:64:5C:F0:B7:9F:EE:BD:7B:5D:62:C3
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 01942747C12C0E69E0B6187448DB2322F0C7
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51324
IP address blocks: 185.80.144.0/22 maxlen: 24
2a05:7dc2:1000::/36 maxlen: 36
2a05:7dc2:2000::/36 maxlen: 36
2a05:7dc2:3000::/36 maxlen: 36
2a05:7dc2:4000::/36 maxlen: 36
2a05:7dc2:5000::/36 maxlen: 36
2a05:7dc2:6000::/36 maxlen: 36
2a05:7dc2:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c1:2c:0e:69:e0:b6:18:74:48:db:23:22:f0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19d4cc4811e631734c645cf0b79feebd7b5d62c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:84:7f:71:5f:6e:e1:c3:51:4d:06:aa:29:
ac:d4:6a:73:2f:9d:d8:e0:7c:b7:05:5f:08:70:69:
c0:eb:00:1c:7d:a2:01:51:64:a3:53:bd:8a:b5:16:
3f:01:41:3e:68:bc:f4:b3:d1:4a:a5:cb:d7:3a:25:
dc:71:f6:f4:35:29:f2:dd:ee:61:e4:b4:c2:13:cd:
34:9c:25:51:6c:e1:ce:dc:fd:61:16:d4:95:f4:76:
ef:62:79:1a:77:ee:cd:08:be:0d:d8:ca:50:67:ef:
6b:19:c2:5d:65:15:f0:11:47:9f:04:a5:74:b0:09:
57:9b:14:62:bb:06:3c:1a:c7:5a:1a:61:9f:7b:f0:
7b:8b:ad:62:6b:53:ad:b2:54:8b:76:e7:85:3e:8f:
74:3e:5e:18:9c:6d:af:0d:0f:85:b4:4b:4a:1b:18:
fe:ea:4f:81:e1:f3:82:cd:56:7d:ee:bf:e1:5e:80:
88:3c:69:6e:c6:cc:99:b3:84:29:22:78:46:25:f5:
92:cc:a5:e0:62:b9:fc:2c:6f:dc:60:3e:22:0c:64:
82:26:fe:38:4b:60:a1:fa:8a:99:27:7d:90:08:c9:
12:cd:3b:11:0e:47:10:ec:07:8d:ea:ea:b8:ad:c9:
e9:71:c3:0c:c4:cd:3c:e5:71:f5:d8:b8:c4:01:01:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D4:CC:48:11:E6:31:73:4C:64:5C:F0:B7:9F:EE:BD:7B:5D:62:C3
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.144.0/22
IPv6:
2a05:7dc2:1000::-2a05:7dc2:7fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ca:c7:78:dd:e2:a2:db:48:ae:ad:c3:a6:6f:b5:89:8e:ce:ce:
d8:63:38:c2:ae:aa:b7:70:da:e4:33:19:14:a0:e2:f4:d7:b4:
9e:ed:f2:3d:b4:99:a4:58:ee:57:1a:5d:03:2c:79:48:bd:f2:
f2:88:19:50:9a:3c:b7:45:17:cf:cd:74:87:fb:e8:af:59:3f:
be:b3:07:20:99:98:34:1a:c5:2b:a8:24:8d:2c:52:fe:c5:22:
3e:f8:c5:b3:de:59:a8:ac:eb:cf:72:32:a4:42:99:a4:6e:ce:
d9:06:d3:2d:37:47:24:f5:92:95:07:7b:60:68:23:82:89:84:
0d:73:72:e6:31:c1:01:d1:3c:37:21:04:c3:33:2f:fe:b8:f1:
b5:aa:d1:2b:0a:ba:37:7b:e6:4c:d2:61:46:96:18:19:14:10:
51:94:59:06:0c:b8:c8:62:6d:a6:e4:53:c3:ee:b1:64:9f:e8:
68:ab:39:9e:28:b7:0d:80:2b:f1:74:f7:0f:36:8e:6f:0f:35:
3d:cd:e9:4d:47:e5:af:9d:e9:b1:26:bc:38:2a:56:7d:8b:15:
58:4c:e7:53:2b:f7:21:de:3e:b4:47:7f:4d:d8:85:47:14:14:
56:b5:cd:27:51:d3:0a:d4:3a:94:a6:d9:b9:13:73:9d:96:1d:
72:b6:13:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:26:05 2025 by rpki-client