Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/gzExvZYYOzm2RnwUhxd8N3zJRC4.roa
File: gzExvZYYOzm2RnwUhxd8N3zJRC4.roa (raw, json)
Hash identifier: k4X6/64laKsRS3FbZuffVGXFOuObJIthvx6pW0mz4l4=
Subject key identifier: 83:31:31:BD:96:18:3B:39:B6:46:7C:14:87:17:7C:37:7C:C9:44:2E
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 018CC425235029C33780E7E9D5DEC2D87C6E
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/gzExvZYYOzm2RnwUhxd8N3zJRC4.roa
Signing time: Mon 01 Jan 2024 08:30:17 +0000
ROA not before: Mon 01 Jan 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39046
IP address blocks: 80.254.48.0/20 maxlen: 20
80.254.56.0/24 maxlen: 24
80.254.52.0/24 maxlen: 24
80.254.54.0/24 maxlen: 24
80.254.58.0/24 maxlen: 24
80.254.63.0/24 maxlen: 24
80.254.61.0/24 maxlen: 24
185.77.8.0/23 maxlen: 23
185.77.10.0/24 maxlen: 24
2a03:51a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:23:50:29:c3:37:80:e7:e9:d5:de:c2:d8:7c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jan 1 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=833131bd96183b39b6467c1487177c377cc9442e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:19:f0:6c:58:89:71:c1:24:65:da:de:c7:5c:
b4:83:74:5d:0c:19:11:9d:66:4a:8b:2a:70:5c:e4:
4a:1d:b0:d7:56:58:0b:96:fa:7d:78:14:3a:68:47:
9c:f3:62:ca:a1:cd:95:d1:ab:45:92:77:79:0c:ec:
f4:35:ec:81:c3:64:75:76:9e:6f:08:a4:d6:75:cb:
60:97:56:22:5a:3e:93:3e:c0:f3:fd:ca:b7:b6:a8:
51:39:72:e1:ef:9d:e9:95:b0:93:64:d0:f2:bc:15:
05:18:3a:43:7f:af:68:82:6a:10:c5:bb:a2:9e:4b:
5e:f5:2f:17:17:25:3d:5f:8f:6d:2d:01:91:77:47:
dd:a1:4f:f9:c6:0a:f7:90:cc:4c:73:13:89:dc:29:
6d:d0:76:b7:bd:7b:c1:b0:fa:7e:17:ab:ee:ba:8b:
59:5d:7f:ed:8b:cc:7c:52:e4:ba:c1:ac:b5:b5:c1:
bc:5f:7c:b2:c9:cb:c1:ec:e6:48:83:82:a0:7f:c6:
50:bf:8c:27:d0:a6:24:d8:71:56:36:b9:fc:8e:f4:
28:f3:de:47:2a:86:d2:88:fb:f0:1e:3d:cf:47:30:
79:01:ef:0d:79:3c:05:27:12:1e:81:29:f1:2a:7d:
00:41:6d:e4:95:f2:d7:1b:e5:da:6d:1c:a2:f2:0e:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:31:BD:96:18:3B:39:B6:46:7C:14:87:17:7C:37:7C:C9:44:2E
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/gzExvZYYOzm2RnwUhxd8N3zJRC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.48.0/20
185.77.8.0-185.77.10.255
IPv6:
2a03:51a0::/32
Signature Algorithm: sha256WithRSAEncryption
e9:f4:cb:5f:c5:70:e4:be:cb:71:62:b1:e6:ec:f2:77:41:b2:
64:a7:e0:67:07:d8:0f:f2:b1:01:c1:10:46:3a:cb:db:f2:c9:
fb:d1:79:06:a7:56:e3:00:22:33:bf:d9:b3:6c:29:3b:96:97:
49:60:4f:76:c7:26:41:c8:f3:cd:ad:6a:a7:d7:56:af:f4:4b:
16:7a:88:05:23:c2:3b:8e:24:64:ab:ec:d4:aa:3a:b7:fb:1a:
fe:60:90:86:08:57:4b:1b:1e:c8:79:9b:36:f7:9e:e1:0f:ba:
4d:39:c7:c4:f3:e6:35:5a:9f:24:be:a5:0e:4c:5d:93:5f:42:
f8:67:a6:9f:f1:bd:dc:89:c0:8d:60:f4:80:74:e1:7b:52:6b:
86:6d:29:ec:3f:d7:c9:14:a7:d3:fe:e5:69:41:ee:76:8e:e1:
27:31:2d:8f:a4:fd:ba:c2:88:e7:6b:b3:b6:d7:f6:29:98:e0:
c7:ce:a9:45:b7:23:63:34:6f:6d:4b:d1:84:05:b0:d2:2c:30:
86:05:f4:46:f0:e7:2a:00:d0:73:be:b3:ff:89:1a:5a:61:65:
3e:00:70:ec:16:3f:77:b7:ef:8d:df:09:d0:88:41:b8:0e:76:
da:c2:d0:ab:42:10:d4:25:cd:b2:fa:16:97:b6:88:d9:d3:02:
90:c9:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 13:39:00 2024 by rpki-client on console-ams.rpki-client.org