Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dLcfPXOkUyaJAz6yvNwrvTF49QA.roa
File: dLcfPXOkUyaJAz6yvNwrvTF49QA.roa (raw, json)
Hash identifier: IdspiRr9Qf58xpjeb+/ZJwYUNN4mVb5h2FIV74w6JSQ=
Subject key identifier: 74:B7:1F:3D:73:A4:53:26:89:03:3E:B2:BC:DC:2B:BD:31:78:F5:00
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0195A86423932E1143353D8563DB7D6E16B4
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dLcfPXOkUyaJAz6yvNwrvTF49QA.roa
Signing time: Tue 18 Mar 2025 08:34:49 +0000
ROA not before: Tue 18 Mar 2025 08:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39640
IP address blocks: 45.80.82.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
167.160.31.0/24 maxlen: 24
178.19.32.0/23 maxlen: 23
201.49.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:64:23:93:2e:11:43:35:3d:85:63:db:7d:6e:16:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 18 08:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74b71f3d73a4532689033eb2bcdc2bbd3178f500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:9d:88:8d:49:28:6c:3b:8d:c1:bd:1c:f5:
f2:64:71:a2:44:ca:48:29:5f:7c:3c:a6:ba:5d:d0:
9b:d3:0d:39:97:ab:70:a9:ea:e6:aa:f4:25:99:3c:
7f:40:fc:d5:24:41:5c:07:42:18:32:69:45:ab:41:
bc:fa:58:1e:49:37:5f:d2:1f:fe:41:02:b7:01:93:
61:b9:b4:63:1c:f6:41:53:ca:1d:fb:7d:2a:85:2e:
93:ef:56:36:89:71:d5:52:96:d4:52:18:0e:d2:5b:
ae:36:a3:41:71:da:cc:e0:78:25:a9:ea:60:58:0f:
45:fe:8a:a0:5f:b9:9a:bb:1f:6a:ab:1f:8e:64:cd:
86:02:2c:2f:77:8e:d7:87:d4:ca:34:9c:4e:a4:8f:
fd:de:0a:98:e1:4b:df:3e:38:9e:bc:c7:27:12:84:
09:9d:bb:ad:f4:08:96:9f:2b:48:d6:81:f2:1d:7f:
13:68:d8:e8:ba:e9:b3:16:b5:7e:ab:28:b0:a2:77:
02:7b:f2:a6:bc:2c:cd:e6:87:45:70:71:40:06:ad:
87:20:ce:f8:9c:7c:9c:7b:44:87:3b:50:19:35:4e:
ee:e6:91:b1:72:62:f6:1b:76:43:27:81:37:12:ab:
f7:3f:1d:b5:78:a5:43:ee:d7:6b:dc:83:6d:f1:d5:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:1F:3D:73:A4:53:26:89:03:3E:B2:BC:DC:2B:BD:31:78:F5:00
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/dLcfPXOkUyaJAz6yvNwrvTF49QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.82.0/23
167.160.31.0/24
178.19.32.0/23
201.49.188.0/22
Signature Algorithm: sha256WithRSAEncryption
36:82:32:cb:f3:c8:02:fd:36:44:58:5e:7b:c5:3b:f7:1b:fd:
f1:2b:be:24:88:1b:8c:dc:52:71:97:a7:4e:f2:a6:87:5c:a2:
a2:35:6b:eb:cf:78:38:4d:8f:d4:52:83:b2:6e:0a:68:5e:54:
69:d7:0e:f8:bf:b7:f0:2b:ae:8e:e4:9c:05:79:58:e7:ff:22:
32:74:97:91:2f:76:ff:f1:e4:b3:2f:e6:7b:ff:79:35:4f:f2:
a2:ea:2c:88:e2:fb:9d:52:32:b0:ad:ce:41:11:8c:51:46:5f:
81:9c:9f:2e:5d:e2:55:d2:47:5a:5f:28:40:71:0c:79:73:86:
f9:9d:d8:0c:00:f1:f7:09:d5:9e:f2:bb:72:40:38:fd:38:c8:
2e:2b:ae:a8:d8:c8:fd:32:55:b2:62:36:a4:1f:11:c3:93:60:
08:ff:5e:3d:f2:03:57:91:4d:8e:71:21:35:3d:0e:84:85:2e:
e3:91:67:cb:0c:2f:e4:9c:ea:68:1e:6e:61:62:dd:70:4a:c3:
41:fa:43:9c:d8:c1:31:ae:89:ac:05:30:67:f6:b1:ac:a1:21:
a2:c3:3b:f0:35:1c:9f:fc:16:ac:50:c2:0c:b9:82:a7:1c:af:
93:ff:ee:f5:ec:75:4a:53:f1:47:9e:b4:49:68:a9:30:4b:d0:
87:81:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:24:35 2025 by rpki-client