Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa
File: OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa (raw, json)
Hash identifier: amgbjuIRYLpnsd8z61aY9wLmq9odfVbwcJCZF+luhjo=
Subject key identifier: 38:00:B9:57:79:E0:91:91:46:E1:C6:DC:7F:04:EA:80:2D:11:6D:4C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 0194DB18121AF4895906627002CBE6D0A9C3
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa
Signing time: Thu 06 Feb 2025 11:49:35 +0000
ROA not before: Thu 06 Feb 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34170
IP address blocks: 80.69.48.0/24 maxlen: 24
80.69.49.0/24 maxlen: 24
80.69.50.0/24 maxlen: 24
80.69.51.0/24 maxlen: 24
80.69.53.0/24 maxlen: 24
80.69.56.0/24 maxlen: 24
80.69.57.0/24 maxlen: 24
80.69.60.0/24 maxlen: 24
91.135.240.0/24 maxlen: 24
91.135.241.0/24 maxlen: 24
91.135.242.0/24 maxlen: 24
91.135.243.0/24 maxlen: 24
91.135.244.0/24 maxlen: 24
91.135.252.0/24 maxlen: 24
91.135.253.0/24 maxlen: 24
92.39.90.0/24 maxlen: 24
92.39.91.0/24 maxlen: 24
92.39.92.0/24 maxlen: 24
92.39.93.0/24 maxlen: 24
92.39.94.0/24 maxlen: 24
158.181.34.0/24 maxlen: 24
158.181.37.0/24 maxlen: 24
158.181.38.0/24 maxlen: 24
158.181.39.0/24 maxlen: 24
158.181.44.0/23 maxlen: 23
158.181.46.0/23 maxlen: 23
185.92.224.0/24 maxlen: 24
185.92.225.0/24 maxlen: 24
185.105.196.0/24 maxlen: 24
185.105.197.0/24 maxlen: 24
185.105.198.0/24 maxlen: 24
185.105.199.0/24 maxlen: 24
212.47.154.0/24 maxlen: 24
212.47.155.0/24 maxlen: 24
212.47.156.0/24 maxlen: 24
212.47.157.0/24 maxlen: 24
212.47.158.0/24 maxlen: 24
2a05:8200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:18:12:1a:f4:89:59:06:62:70:02:cb:e6:d0:a9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Feb 6 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3800b95779e0919146e1c6dc7f04ea802d116d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:3f:98:77:91:7b:1b:8b:bb:9d:68:57:c5:
02:1e:61:ff:bb:aa:f9:6b:8f:a6:c7:6a:19:5f:7a:
2d:48:1b:24:22:37:f8:35:2b:ca:68:79:30:16:ac:
75:6a:64:e8:82:9d:28:42:2e:e1:54:62:3b:d6:8a:
f7:bb:ae:99:3b:8d:7f:bc:98:de:86:6e:43:75:21:
80:c4:12:54:39:95:53:c3:01:57:67:ed:43:75:e7:
b5:0a:eb:92:c8:63:b6:2d:a9:97:f1:b0:b1:f6:59:
10:22:f4:9c:0c:9f:3d:56:31:5e:8a:5a:0f:a6:a0:
56:a6:fb:18:4d:c7:54:4e:ce:f4:71:d3:16:01:99:
ed:45:30:1d:31:ff:f7:c2:6f:98:b1:05:74:2d:90:
fc:90:ef:97:25:af:16:3a:eb:9d:1a:e8:d7:b4:64:
30:69:0a:56:1b:18:a7:36:eb:95:bd:f4:d2:d5:6a:
9f:98:e6:87:75:05:e1:b1:be:ae:a6:0b:ac:e0:0a:
f2:08:b1:a6:e6:c2:ff:c8:95:bb:6d:d6:fe:02:85:
84:d1:43:d4:7c:de:16:b5:de:4a:70:4a:72:8b:8b:
26:90:11:ab:20:c1:7c:9b:91:a7:b7:4f:b1:b6:31:
6a:79:2b:6d:bc:77:89:fa:3b:ea:49:65:77:5f:f2:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:B9:57:79:E0:91:91:46:E1:C6:DC:7F:04:EA:80:2D:11:6D:4C
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.48.0/22
80.69.53.0/24
80.69.56.0/23
80.69.60.0/24
91.135.240.0-91.135.244.255
91.135.252.0/23
92.39.90.0-92.39.94.255
158.181.34.0/24
158.181.37.0-158.181.39.255
158.181.44.0/22
185.92.224.0/23
185.105.196.0/22
212.47.154.0-212.47.158.255
IPv6:
2a05:8200::/29
Signature Algorithm: sha256WithRSAEncryption
3e:16:b2:41:40:02:6e:f4:2b:da:9e:3a:8d:f7:95:3d:a4:23:
6d:b5:ca:d8:ae:12:2b:0f:57:f2:4c:ad:96:5b:46:39:55:76:
22:5d:40:29:d9:f4:fa:27:90:4d:9a:08:d2:16:1e:f4:26:10:
d2:58:d1:52:02:5c:55:89:76:cb:fc:03:7c:94:1e:3a:cd:b2:
de:65:7b:da:bc:80:23:88:dc:0d:04:9e:69:34:74:23:6e:1e:
80:a3:7a:ac:ed:18:6c:f9:5f:42:37:ac:78:b8:aa:2f:2b:3a:
85:f3:32:48:a5:d9:8f:e2:f7:d0:78:d5:b0:40:fc:82:43:31:
06:bd:cf:b3:80:3b:92:60:60:ee:7e:8b:5a:1e:ec:9b:44:4b:
d3:7a:02:b6:6a:ab:22:93:c4:c9:63:1c:1d:55:0d:eb:d6:9a:
6a:bf:54:dd:42:62:3b:eb:8f:13:b6:84:ff:a3:2a:3f:2c:c6:
30:65:e5:3d:94:9a:eb:32:03:f3:2e:4e:f8:5f:10:c0:ac:4e:
ae:0d:0b:0a:22:10:a3:a4:63:c4:6c:6d:93:ec:2b:6e:02:d4:
f9:72:48:63:03:55:25:3d:7c:06:93:fd:ff:29:2a:af:d5:bd:
90:54:e3:5a:76:62:bc:09:ba:24:e7:bd:9b:c6:28:b6:79:05:
0c:0f:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:15:33 2025 by rpki-client