Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/h17YXZJyvSVJKfuRPJwacmnQTko.roa
File: h17YXZJyvSVJKfuRPJwacmnQTko.roa (raw, json)
Hash identifier: gCm2d2N9654aioOcioiAbPWA94RRy8WmG63hHdr1o54=
Subject key identifier: 87:5E:D8:5D:92:72:BD:25:49:29:FB:91:3C:9C:1A:72:69:D0:4E:4A
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 01942748066AF3D29F36AA480D80612A45F0
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/h17YXZJyvSVJKfuRPJwacmnQTko.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39156
IP address blocks: 80.76.224.0/20 maxlen: 20
80.76.225.0/24 maxlen: 24
80.76.226.0/24 maxlen: 24
80.76.227.0/24 maxlen: 24
80.76.228.0/24 maxlen: 24
80.76.229.0/24 maxlen: 24
80.76.230.0/24 maxlen: 24
80.76.231.0/24 maxlen: 24
80.76.232.0/24 maxlen: 24
80.76.233.0/24 maxlen: 24
80.76.234.0/24 maxlen: 24
80.76.235.0/24 maxlen: 24
80.76.236.0/24 maxlen: 24
80.76.237.0/24 maxlen: 24
80.76.238.0/24 maxlen: 24
80.76.239.0/24 maxlen: 24
109.235.208.0/21 maxlen: 21
109.235.211.0/24 maxlen: 24
2a03:5200::/48 maxlen: 48
2a03:5200:1::/48 maxlen: 48
2a03:5200:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:06:6a:f3:d2:9f:36:aa:48:0d:80:61:2a:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=875ed85d9272bd254929fb913c9c1a7269d04e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:9b:96:da:37:eb:d5:3c:d0:ab:5f:69:31:
3d:8e:c8:69:97:a5:57:b9:1b:8e:6c:b7:be:4b:59:
eb:23:9d:f1:58:9a:49:60:95:c6:3f:17:b9:2d:4a:
b9:15:6c:eb:7c:61:bf:85:2b:30:46:f0:88:aa:83:
3c:1c:87:f0:13:0c:d2:eb:a9:95:1c:8c:26:80:0c:
fd:5e:b8:94:ea:d6:56:d4:59:1d:0b:dc:75:c4:53:
4d:8c:4b:65:8b:9a:02:4c:68:db:fc:99:f8:1f:d9:
32:d5:c7:e1:af:06:62:0f:db:45:fc:06:a8:90:e7:
a1:3f:f5:58:d4:77:cb:c9:a8:93:7f:b9:d2:0c:d0:
ff:45:c0:c8:e6:a1:56:c1:f1:b2:92:dc:c5:75:b8:
84:c5:81:f7:f7:55:7e:30:01:c7:b6:ec:df:02:66:
77:7d:67:ef:07:cc:f7:24:65:72:14:6d:6e:12:42:
40:1f:9c:41:33:59:9a:b9:48:de:c4:e1:82:48:07:
14:1b:16:a9:ea:73:7f:5e:42:ca:f3:5e:d3:d5:fb:
72:7b:22:f5:83:f1:16:a6:48:d7:40:68:79:f0:5c:
42:f8:d7:89:6c:af:bc:f0:97:45:0a:fc:71:11:33:
4c:a9:ca:7a:d9:ec:b8:71:16:12:5d:21:7e:11:90:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5E:D8:5D:92:72:BD:25:49:29:FB:91:3C:9C:1A:72:69:D0:4E:4A
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/h17YXZJyvSVJKfuRPJwacmnQTko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.224.0/20
109.235.208.0/21
IPv6:
2a03:5200::-2a03:5200:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:33:11:60:7c:4b:37:dd:d7:97:12:d8:f2:fb:e8:af:53:58:
8f:e2:44:64:03:d5:5f:e6:18:39:ad:c8:c0:87:60:99:f1:86:
bd:b9:55:c9:e0:e2:58:ab:2d:bd:a4:11:53:02:e6:cd:50:2a:
d6:2e:c8:f0:57:5d:11:ac:46:e8:a2:13:e5:54:e4:52:52:38:
c8:db:ee:a9:a5:96:45:9d:17:e6:02:87:ce:d7:e3:bd:38:33:
3d:48:00:05:17:fb:e5:35:38:76:cd:f1:6e:b3:78:8a:0a:08:
bf:e5:3e:71:ef:42:95:7a:9c:50:c9:6e:3d:63:7b:da:ce:8a:
39:8d:a0:3f:ae:f9:79:0f:df:9a:97:0e:05:0e:c9:e0:9b:69:
10:f3:89:a6:27:19:b4:bc:6e:7c:5b:9e:da:a2:8a:73:ed:df:
64:aa:aa:e7:fc:2f:28:e7:3f:12:f3:0f:6c:0f:64:54:2a:74:
0a:f3:7e:f4:35:76:40:50:49:5a:98:c9:f3:2e:2c:5c:f2:ff:
9d:f6:54:06:b1:b1:fc:e2:94:6a:f5:14:97:ca:d8:ba:fc:2d:
fe:75:07:95:50:b1:f6:d9:21:10:03:c1:bc:e5:cf:36:a9:e1:
d0:f9:e5:8f:44:a1:31:bd:f0:69:0c:2d:7b:96:5b:50:14:64:
14:d1:ff:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:43 2025 by rpki-client