Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/xGfGnzNZn4HUZigqa5Ok1nkmfsE.roa
File: xGfGnzNZn4HUZigqa5Ok1nkmfsE.roa (raw, json)
Hash identifier: XpFkMfmlY0imCtGtKPRW/lTcymGc5XbfGzDPyUvzl8w=
Subject key identifier: C4:67:C6:9F:33:59:9F:81:D4:66:28:2A:6B:93:A4:D6:79:26:7E:C1
Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial: 019425221200793A56FBC527729B8B71C4B2
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/xGfGnzNZn4HUZigqa5Ok1nkmfsE.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39875
IP address blocks: 80.247.16.0/20 maxlen: 20
185.147.108.0/22 maxlen: 22
2a02:308::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:12:00:79:3a:56:fb:c5:27:72:9b:8b:71:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80235937adf4dab8925d58045a3371816c980531
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c467c69f33599f81d466282a6b93a4d679267ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:ba:5d:52:a9:a3:fa:1b:5a:37:d5:a9:a5:
de:37:12:2c:6a:34:a8:ee:57:8d:e0:26:66:24:71:
dd:22:5d:4c:43:91:0f:b2:00:a4:62:37:76:fc:41:
4c:fc:17:00:6e:b4:b1:5c:bd:43:33:a7:8f:e1:05:
80:0e:76:5b:fa:57:dd:51:96:88:3e:40:97:08:a9:
51:62:64:62:f0:a7:29:ec:90:9d:d3:cc:68:2f:b2:
cf:15:9e:04:b0:25:cd:74:59:01:8c:1b:34:af:ef:
d8:94:b5:b1:ef:4d:ab:53:8d:ec:88:58:f3:8a:5f:
7d:f0:de:b5:11:70:e8:08:4e:d1:6e:f1:fa:30:79:
0c:47:ac:91:09:36:e2:7b:d1:3d:1e:d1:f1:69:68:
2e:89:5a:22:c4:20:81:df:df:e5:fd:fd:e3:38:35:
a0:cf:ef:bf:d3:23:e6:0b:cb:7a:5a:d6:8a:48:d3:
00:e1:08:e3:5e:17:7c:88:b1:76:16:c8:95:3a:ce:
c8:14:7e:3b:5f:04:42:0a:63:52:e6:bd:b7:a5:19:
2d:f2:85:6c:86:cc:78:eb:4d:cb:2a:3d:2a:44:ff:
f5:e9:48:ef:eb:4c:56:2b:81:51:51:d1:58:a2:2b:
4b:0a:e4:17:89:c1:aa:25:ed:4c:c7:61:50:63:ff:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:67:C6:9F:33:59:9F:81:D4:66:28:2A:6B:93:A4:D6:79:26:7E:C1
X509v3 Authority Key Identifier:
keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/xGfGnzNZn4HUZigqa5Ok1nkmfsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.16.0/20
185.147.108.0/22
IPv6:
2a02:308::/29
Signature Algorithm: sha256WithRSAEncryption
4f:72:cb:56:6b:06:bd:51:fe:77:91:81:96:aa:40:3f:63:b6:
af:83:96:a4:a6:2c:db:2e:fd:3c:1b:1f:03:9b:26:3d:d6:e2:
52:ec:73:45:1d:c4:d4:40:47:3f:1f:91:79:7a:6a:e1:31:df:
a0:c0:6a:4f:b3:3c:08:97:ed:90:cf:ea:2b:1a:86:db:40:12:
f3:e5:c0:b4:b4:64:ab:cf:4f:bc:b7:d0:f0:28:5e:76:ec:63:
c0:aa:33:4e:b5:a2:9e:58:df:ad:26:73:b3:39:4f:9d:d2:4f:
c4:2d:89:5c:65:34:11:6b:70:2d:31:4c:9d:39:02:18:40:58:
f7:23:31:66:6b:7c:47:b6:9b:e9:d3:83:2c:b2:05:91:1c:1b:
26:f9:f2:19:f1:b8:58:2b:0f:88:62:95:f9:96:b6:87:93:29:
b7:53:f7:73:2d:2b:5b:2e:e7:68:0a:96:27:80:66:f0:5c:9d:
60:4b:72:b0:3e:a4:07:e1:70:88:be:5f:a3:d0:f9:bb:99:c1:
31:34:70:68:c9:3f:df:70:53:7d:1b:31:3e:c1:9a:9e:df:ba:
62:98:1e:f7:aa:1b:c7:34:0c:95:87:e1:7c:c9:ce:b1:32:81:
b6:f0:77:2c:62:72:6d:e1:b3:88:3f:9a:26:a4:4e:4c:9a:23:
20:3d:34:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:44 2025 by rpki-client