Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa
File: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (raw, json)
Hash identifier: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=
Subject key identifier: 19:27:82:D5:19:7A:9A:92:85:72:84:CC:23:68:E2:F9:40:B3:F5:8E
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 01941FFA50E625AF8F5871250E8C93810C01
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21231
IP address blocks: 80.92.32.0/23 maxlen: 23
80.92.34.0/23 maxlen: 23
80.92.36.0/23 maxlen: 23
80.92.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:50:e6:25:af:8f:58:71:25:0e:8c:93:81:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=192782d5197a9a92857284cc2368e2f940b3f58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:24:0c:8d:87:7f:b8:92:79:8b:80:ce:3e:
3e:c9:2f:3a:3c:fd:51:7d:25:49:7f:75:7d:60:bb:
f8:b9:4b:ca:87:d3:3a:84:9a:93:4e:75:d5:5f:26:
bb:56:bd:15:6a:02:7b:70:06:35:ae:45:d9:c9:18:
c9:9d:08:e7:31:1f:64:b2:5e:cd:9b:2a:52:46:a6:
e4:9d:33:96:de:64:91:09:57:34:e4:e4:41:f2:49:
01:3a:4e:92:60:e5:dd:94:ca:7b:bd:7e:55:7b:53:
fa:8a:04:62:cc:04:e6:19:76:10:ee:f3:10:ce:49:
95:c3:af:6f:d5:60:1d:15:dd:31:08:f6:83:0c:02:
94:35:c2:71:2a:74:86:26:93:d4:72:12:ed:d9:24:
91:e9:ea:dc:1e:a9:f3:95:19:21:ad:a7:1d:27:18:
c3:b3:9e:7c:54:a4:8e:94:b5:62:a5:c9:73:20:39:
c2:18:0b:57:60:1d:87:f1:eb:e3:30:ad:67:aa:64:
d0:70:b9:2e:36:4f:b9:01:ea:46:b2:3c:cd:12:c1:
1f:35:55:fb:89:15:d0:2d:26:b5:dc:4d:3b:6c:11:
bb:8a:fb:57:36:40:1a:68:2c:47:8e:f4:47:40:aa:
47:4e:4b:ae:b8:b3:b7:f3:9c:a5:19:59:ca:ae:32:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:27:82:D5:19:7A:9A:92:85:72:84:CC:23:68:E2:F9:40:B3:F5:8E
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.32.0-80.92.37.255
80.92.39.0/24
Signature Algorithm: sha256WithRSAEncryption
35:00:a0:0a:44:62:a8:89:14:27:c5:77:84:95:ff:9d:5a:16:
b7:a1:a1:42:11:27:48:3b:2d:1a:e2:86:1c:08:c1:a2:cb:63:
55:20:06:46:67:6d:fd:1c:3c:25:ee:0e:df:cf:d7:23:d6:ef:
b5:f1:2a:ea:41:52:0f:64:11:b6:3c:b0:4b:cf:d9:d2:d8:7c:
3e:ef:bb:bb:f4:84:ab:0b:4d:9c:82:8a:42:d9:b4:a3:d3:bd:
d5:bb:7f:53:bf:cd:de:33:de:00:3f:ee:a3:21:d7:52:11:19:
bc:ae:ea:3a:a1:01:0f:62:18:f0:b3:e5:2c:44:fa:95:47:6e:
d0:e9:c7:5a:e6:c7:2b:5f:ac:45:1c:f0:8d:c5:fa:a8:20:2d:
50:b4:90:7b:d0:7c:24:5b:31:d1:92:24:97:cb:89:91:e1:5e:
50:ab:5f:de:95:a8:55:ff:fc:f6:d4:42:59:bd:7d:f8:fb:16:
55:28:06:4a:fc:98:60:cc:e3:3f:9d:23:84:7f:3d:b7:ed:63:
45:d7:b5:39:0c:91:90:29:17:89:81:8f:74:c5:eb:9a:c4:4c:
d4:d3:48:1d:29:72:6a:bf:95:17:cb:55:dc:48:0d:10:94:64:
f6:a1:cb:de:74:00:64:70:d8:ed:d0:ed:31:11:0d:d6:0b:2d:
14:73:fb:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:42:22 2025 by rpki-client