Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/eADzDJE6P-qH0r5TYUNn_ncYKzA.roa
File: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (raw, json)
Hash identifier: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=
Subject key identifier: 78:00:F3:0C:91:3A:3F:EA:87:D2:BE:53:61:43:67:FE:77:18:2B:30
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 01942747EA35B3D8A84017DB088048DBD135
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/eADzDJE6P-qH0r5TYUNn_ncYKzA.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28854
IP address blocks: 80.84.32.0/20 maxlen: 24
88.206.128.0/17 maxlen: 24
185.60.128.0/22 maxlen: 24
2a04:f40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ea:35:b3:d8:a8:40:17:db:08:80:48:db:d1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7800f30c913a3fea87d2be53614367fe77182b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:6c:c3:14:9b:f4:e1:07:85:d2:69:92:39:
3d:1d:07:ea:70:12:80:d8:d0:87:42:f2:18:c4:b3:
a7:d5:8c:9c:49:f4:84:d5:8a:2f:a9:13:2c:c6:92:
f0:33:4d:d1:96:93:dc:f1:78:22:4e:29:e2:a0:aa:
38:ec:f5:db:4a:30:93:71:83:a2:59:e3:69:e0:cf:
f6:09:73:d5:02:8a:12:2e:a3:1c:2d:2f:04:00:16:
d7:9e:6f:2f:1c:18:5a:4f:c8:5c:92:17:c2:d8:2c:
26:9e:da:8c:d4:92:05:0f:0f:61:07:6b:68:0a:a9:
66:d8:83:2a:7e:20:53:0b:29:a4:89:df:b8:1e:65:
5f:40:cf:96:07:b8:96:90:3d:49:86:f7:c4:12:d7:
c9:f1:69:6c:e7:13:6a:48:60:25:e7:a9:f2:dd:57:
ec:f2:4b:07:3c:b3:b7:7c:c1:c7:e3:5a:2f:44:ac:
65:db:c5:a6:b3:9b:4e:19:0f:ed:36:5e:12:e2:37:
2a:1f:61:8a:63:ea:ba:d7:69:21:42:bd:be:ac:b0:
e5:3c:80:b6:5b:37:9e:07:c2:1e:69:6a:e5:ca:c6:
80:ef:73:f8:36:ad:58:d6:d1:fc:68:bd:2b:56:80:
6d:ad:2b:1b:37:05:e5:07:12:36:9d:39:4f:6e:b9:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:00:F3:0C:91:3A:3F:EA:87:D2:BE:53:61:43:67:FE:77:18:2B:30
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/eADzDJE6P-qH0r5TYUNn_ncYKzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.32.0/20
88.206.128.0/17
185.60.128.0/22
IPv6:
2a04:f40::/29
Signature Algorithm: sha256WithRSAEncryption
57:5f:73:80:0b:64:23:1f:09:2e:b7:50:a9:7a:45:c2:e1:b1:
cf:cb:9d:e2:8e:1e:5f:e2:28:e6:5e:c6:c3:d2:4d:33:2d:76:
8f:d8:0e:91:74:5d:e9:ee:80:60:02:5c:b8:d0:f7:7a:ee:c3:
26:24:d1:0b:a5:a9:a9:36:69:2f:24:35:6a:70:b0:fc:9b:44:
35:fe:75:64:6f:4f:8d:98:3c:51:4c:1f:10:77:6d:01:4d:e2:
35:c0:34:0d:0a:7d:d4:b6:19:73:04:2f:14:e8:c8:23:39:f9:
89:54:30:f5:e5:e6:73:05:2e:72:be:44:1d:ac:4f:e5:7c:ee:
eb:1b:91:90:95:5d:ca:7c:93:7b:0a:96:17:92:26:a1:a5:4c:
2a:64:7b:94:7b:66:9e:89:69:ea:0d:39:c2:58:2b:75:de:e8:
60:19:cb:a9:55:c1:f6:37:a4:5c:1c:5b:d7:86:b6:68:03:3f:
f3:73:60:94:15:09:a2:dd:a3:9f:36:58:e6:6c:67:21:69:0f:
db:23:a3:09:f1:12:07:b1:4c:67:cb:1a:67:4f:d4:6b:8e:79:
e2:7e:c7:29:64:51:e9:c1:8b:c9:43:de:e2:45:7e:60:ce:24:
b3:0e:9f:10:1f:2c:03:c8:80:e3:48:91:cf:2e:6f:4c:55:c7:
be:2a:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:47 2025 by rpki-client