Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/Ca-8iz_zQCrKysmx5A1KTglY5iE.roa
File: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (raw, json)
Hash identifier: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=
Subject key identifier: 09:AF:BC:8B:3F:F3:40:2A:CA:CA:C9:B1:E4:0D:4A:4E:09:58:E6:21
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 019426D9C2DB13F1813DD5F7703A917F75A8
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/Ca-8iz_zQCrKysmx5A1KTglY5iE.roa
Signing time: Thu 02 Jan 2025 11:49:52 +0000
ROA not before: Thu 02 Jan 2025 11:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20886
IP address blocks: 80.90.144.0/20 maxlen: 20
89.21.32.0/19 maxlen: 19
185.209.236.0/22 maxlen: 22
217.76.96.0/20 maxlen: 20
2a02:b30::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c2:db:13:f1:81:3d:d5:f7:70:3a:91:7f:75:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09afbc8b3ff3402acacac9b1e40d4a4e0958e621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:ae:25:76:35:37:01:de:34:9f:88:26:3d:
b3:1a:57:93:c1:6c:b3:35:31:d7:b1:4a:8b:03:e6:
03:b6:53:5b:69:69:9f:b1:08:0c:97:40:93:b5:62:
ea:ae:ec:48:45:3d:c3:08:dd:c7:1f:07:7a:af:d2:
d1:28:01:78:8b:af:ea:a2:b5:7f:e8:b4:a2:6f:66:
01:f1:5a:34:d7:95:d9:97:14:7f:15:26:cd:da:46:
21:74:3c:5f:89:d0:9f:da:a2:a3:2e:f1:df:81:2b:
4c:48:25:47:90:19:0d:83:0e:b4:12:56:44:1d:a5:
1b:bd:3e:11:ce:4d:08:f9:cc:87:91:9c:61:b3:9e:
a9:88:34:da:a3:b9:f4:94:58:18:1e:1f:2c:1b:ce:
21:b4:c9:f4:b2:e0:48:75:97:66:0f:72:f6:a1:d9:
48:48:29:f1:6a:0f:35:91:9a:25:8b:d3:70:2b:38:
b1:a7:fd:1a:8b:6d:03:fb:ca:f4:ea:75:ce:75:d4:
0b:0e:2c:cd:35:68:a2:5d:67:9c:8a:c3:06:c5:48:
d8:f0:18:fb:04:4a:82:cf:f8:77:c1:4e:ad:46:56:
1f:86:0e:9f:90:5f:ae:7c:0e:a3:4a:56:6f:c1:d3:
d7:b2:24:c8:f5:1f:db:ca:86:f4:85:25:52:0e:0e:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AF:BC:8B:3F:F3:40:2A:CA:CA:C9:B1:E4:0D:4A:4E:09:58:E6:21
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/Ca-8iz_zQCrKysmx5A1KTglY5iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.144.0/20
89.21.32.0/19
185.209.236.0/22
217.76.96.0/20
IPv6:
2a02:b30::/32
Signature Algorithm: sha256WithRSAEncryption
8b:97:2c:97:ed:78:30:d0:ca:90:97:18:4a:e0:90:7c:9b:d4:
48:ef:a7:6d:da:24:85:f0:f9:18:94:d5:a3:3a:6b:41:c4:c8:
44:07:8f:3c:64:c8:e2:fc:91:ff:77:95:fa:5e:f7:57:c7:ef:
31:44:a2:e5:d7:9b:5a:ce:0c:e9:9a:55:af:e2:c2:5f:4d:02:
7b:eb:4a:ca:d4:d9:fb:c9:de:4c:7e:8e:d3:d4:6c:69:53:9d:
b9:58:69:af:7b:30:ba:4d:ed:03:75:55:c3:90:f2:50:72:a0:
59:f5:30:22:88:b2:12:21:6c:2d:cb:0a:92:e8:1a:7e:96:be:
92:cd:ae:9a:6c:de:2a:d3:5e:7e:f8:62:c2:89:f0:a2:95:76:
45:c6:f6:dd:9f:7e:ed:83:b7:df:7d:e0:64:8d:f5:0e:f4:96:
e3:fa:d7:57:23:e9:35:a7:0e:e5:00:62:da:ec:a7:ec:8f:09:
5b:83:7f:55:05:95:bd:a9:50:1b:3f:35:fc:2d:a4:c2:5f:5a:
eb:58:ab:ed:2f:d5:35:d7:65:df:eb:17:45:3d:45:62:87:5c:
60:13:7c:ef:5e:a0:c4:bd:24:24:13:0d:f6:ba:92:90:d0:a8:
26:b4:39:58:bd:10:87:33:79:20:50:e5:c7:7f:1c:ab:69:b3:
15:96:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:07 2025 by rpki-client