Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/JA4Vnlp94dx7pdfFYivUO5bxQwE.roa
File: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (raw, json)
Hash identifier: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=
Subject key identifier: 24:0E:15:9E:5A:7D:E1:DC:7B:A5:D7:C5:62:2B:D4:3B:96:F1:43:01
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0194266C18CD663CF3E4A1B299A18D78635A
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/JA4Vnlp94dx7pdfFYivUO5bxQwE.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33517
IP address blocks: 80.231.25.0/24 maxlen: 24
80.231.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:18:cd:66:3c:f3:e4:a1:b2:99:a1:8d:78:63:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=240e159e5a7de1dc7ba5d7c5622bd43b96f14301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:9e:55:41:b9:52:cb:76:3d:50:08:1f:15:
14:3c:9f:7f:e4:a0:a5:8c:31:77:17:a6:5b:88:49:
f0:5e:60:37:68:3d:a7:bb:b1:00:be:08:96:a2:8a:
3d:87:70:70:90:e7:f7:bc:9d:ea:03:03:1d:a3:49:
cd:cc:33:08:1a:b8:67:ce:df:a8:d4:0c:46:77:1b:
15:72:29:4c:f8:66:c4:49:36:4f:5d:77:ba:8f:15:
be:ec:e8:b5:10:bb:6c:3f:07:25:d2:9a:52:ba:61:
ca:e4:0c:f5:10:6a:4e:1f:4f:f1:a5:b0:fe:08:57:
11:f4:57:ff:9e:3f:ff:0d:ab:89:0f:8b:2e:a2:97:
7c:6d:c9:85:a7:4f:ba:41:9c:99:ed:c2:ee:bc:7d:
69:cb:81:51:ce:ed:f5:2b:fe:8b:cd:4b:84:4e:16:
a9:55:09:5f:b8:40:bb:13:31:1e:88:77:a6:92:9d:
1f:f1:8f:4e:18:ce:f1:0f:34:b4:da:4c:82:3b:6e:
63:93:7d:f7:8d:85:ba:db:db:52:6f:ac:a1:f0:6c:
c5:9a:78:80:eb:0c:98:bc:15:ac:07:a2:e5:89:c0:
cc:39:f2:a3:12:7e:ee:8b:96:89:65:f1:15:61:b2:
50:df:41:bd:41:26:fe:7e:b3:8c:b7:fa:a3:9f:11:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:15:9E:5A:7D:E1:DC:7B:A5:D7:C5:62:2B:D4:3B:96:F1:43:01
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/JA4Vnlp94dx7pdfFYivUO5bxQwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.25.0/24
80.231.219.0/24
Signature Algorithm: sha256WithRSAEncryption
88:56:af:4c:ae:ba:67:5e:5c:4f:13:1f:d6:8e:0e:52:d8:02:
6e:9c:c4:86:97:5e:45:00:98:86:16:22:b9:c3:be:34:77:27:
d5:2d:92:5a:76:ee:d5:3d:67:4d:c5:65:23:c5:eb:81:cd:83:
4f:a9:b6:46:63:0d:47:16:58:68:17:47:ab:95:51:31:b2:a3:
95:a2:3a:d0:18:aa:0f:f1:ad:36:f4:d5:4b:d4:51:6e:de:16:
4d:29:4d:a0:d9:1b:ad:91:98:fe:b8:0a:c8:1e:ad:13:66:9b:
e1:ad:1a:eb:c6:1d:27:cb:63:68:f0:21:f4:ec:6a:6d:06:e9:
17:56:99:2e:0d:8b:b6:99:39:a4:b1:13:4c:e8:30:ae:b5:7d:
c1:86:08:ec:7f:b2:88:a3:b4:22:0b:71:8c:ad:a3:ee:72:2f:
63:b2:bd:09:4a:ac:9f:65:b7:d7:ec:3a:0e:04:c2:96:89:f1:
fe:f6:a5:49:73:d0:4b:e2:28:07:43:c0:9f:82:a6:6a:a8:28:
f9:ef:24:18:37:9c:78:bf:7f:7f:e6:34:2f:98:8a:6c:9e:27:
32:37:a4:4d:8d:22:49:d7:ee:fc:eb:a3:6d:85:1c:9c:7f:83:
32:c1:2c:d7:35:48:a0:0f:45:72:6f:b4:4d:69:0c:e4:f6:ec:
21:9a:8e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:33 2025 by rpki-client