Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/cadUElPbaF409FA_2Wg_Q_GYDPU.roa
File: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (raw, json)
Hash identifier: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=
Subject key identifier: 71:A7:54:12:53:DB:68:5E:34:F4:50:3F:D9:68:3F:43:F1:98:0C:F5
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 0194221FC523CB4C978FB775280E8FC49011
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/cadUElPbaF409FA_2Wg_Q_GYDPU.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35197
IP address blocks: 80.83.16.0/20 maxlen: 20
80.83.16.0/22 maxlen: 22
80.83.16.0/24 maxlen: 24
80.83.17.0/24 maxlen: 24
80.83.18.0/24 maxlen: 24
80.83.19.0/24 maxlen: 24
80.83.20.0/22 maxlen: 22
80.83.20.0/24 maxlen: 24
80.83.21.0/24 maxlen: 24
80.83.22.0/24 maxlen: 24
80.83.23.0/24 maxlen: 24
80.83.24.0/24 maxlen: 24
80.83.25.0/24 maxlen: 24
80.83.26.0/24 maxlen: 24
80.83.27.0/24 maxlen: 24
80.83.28.0/24 maxlen: 24
80.83.29.0/24 maxlen: 24
80.83.30.0/24 maxlen: 24
80.83.31.0/24 maxlen: 24
109.110.98.0/24 maxlen: 24
109.110.99.0/24 maxlen: 24
109.110.100.0/24 maxlen: 24
109.110.101.0/24 maxlen: 24
109.110.102.0/24 maxlen: 24
109.110.103.0/24 maxlen: 24
109.110.104.0/24 maxlen: 24
109.110.105.0/24 maxlen: 24
109.110.106.0/24 maxlen: 24
2a0d:6340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c5:23:cb:4c:97:8f:b7:75:28:0e:8f:c4:90:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71a7541253db685e34f4503fd9683f43f1980cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:97:e8:24:f4:0d:68:f5:d4:0f:43:16:9e:
3b:4f:7a:47:a8:ab:b0:93:20:17:39:a3:ad:d4:32:
19:f6:b9:ae:3f:ef:89:2c:e3:de:aa:66:d3:6c:f7:
57:d8:ee:b1:66:e0:95:f1:24:67:10:94:95:e4:a1:
0c:07:f0:6c:73:08:73:7b:9e:bd:b5:42:94:cd:b0:
09:0c:d3:13:f4:ca:17:2d:35:f8:60:d3:a0:8b:b1:
1e:80:5c:2a:5b:6f:9f:60:0f:7b:ab:5d:e1:55:50:
62:71:cb:3e:70:e8:de:c6:6b:71:60:df:df:84:d4:
7e:23:c1:76:ad:c1:53:14:fb:94:d5:6f:83:36:76:
b5:3c:96:2f:83:24:a6:21:5a:d4:03:ea:23:5d:02:
6b:e8:4e:60:31:86:9b:20:43:58:6c:00:67:3d:07:
e8:42:9a:3d:f9:ca:6e:b1:38:1f:34:75:ad:05:0f:
03:90:26:75:11:ed:9c:0d:df:d1:80:29:52:9f:f6:
e8:e4:8d:61:e2:ca:b8:73:ee:91:64:9d:59:55:f0:
d9:0c:ec:b4:08:e4:6f:14:7d:39:1f:d8:a1:e5:50:
54:dd:63:22:06:43:1e:bf:bb:68:92:bc:17:8c:37:
60:87:29:71:db:73:35:bd:4c:c0:89:3f:87:f7:99:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:54:12:53:DB:68:5E:34:F4:50:3F:D9:68:3F:43:F1:98:0C:F5
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/cadUElPbaF409FA_2Wg_Q_GYDPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.16.0/20
109.110.98.0-109.110.106.255
IPv6:
2a0d:6340::/29
Signature Algorithm: sha256WithRSAEncryption
a1:b9:72:ac:2f:b0:8e:29:54:b0:f3:3a:50:13:f4:9f:75:72:
cc:56:34:64:8d:ee:c9:b9:22:3f:8a:ad:ec:ce:5c:20:e8:12:
e4:93:27:a4:14:df:9a:55:c7:d4:26:df:2f:08:0a:53:6b:98:
29:f4:08:0c:44:09:dc:a6:4c:26:4c:30:12:de:c2:92:de:cb:
ea:f4:57:1a:ab:5d:a3:cf:79:6a:2e:27:b9:4b:30:e5:8e:20:
6e:86:cc:81:09:ad:40:a7:07:39:ef:6a:e2:7f:89:de:68:ca:
b0:8c:a1:33:9a:da:f7:e6:b0:eb:76:03:7c:30:ee:95:b0:6e:
ae:91:c4:d0:99:6b:36:e5:74:fc:03:54:02:a9:65:7f:97:32:
14:8b:45:38:6d:5d:1e:05:9b:35:c8:a5:06:d1:9e:04:d7:12:
23:36:e3:2d:ee:8a:39:0c:10:81:c4:56:f1:53:ed:02:3a:14:
d8:a8:c2:fb:66:26:7c:a1:57:e0:e4:15:0d:2b:22:12:9a:20:
5d:e7:51:c8:6c:8a:2f:4d:da:b5:81:a9:94:4e:e3:01:0a:79:
8b:4b:ab:fd:3e:f4:61:20:96:52:41:ce:01:0d:a3:92:2c:80:
ab:6a:fd:16:50:46:15:2d:e2:9a:a8:05:a7:ee:8e:7c:f7:b8:
c1:4b:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:39 2025 by rpki-client