Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/92v4gOX7Hd4VpBM47MNWwQITmiQ.roa
File: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (raw, json)
Hash identifier: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=
Subject key identifier: F7:6B:F8:80:E5:FB:1D:DE:15:A4:13:38:EC:C3:56:C1:02:13:9A:24
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019423D807ECCCFCCB71B7D0E0497D24D7A6
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/92v4gOX7Hd4VpBM47MNWwQITmiQ.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272877
IP address blocks: 45.80.196.0/22 maxlen: 22
45.80.196.0/23 maxlen: 23
45.80.196.0/24 maxlen: 24
45.80.197.0/24 maxlen: 24
45.80.198.0/23 maxlen: 23
45.80.198.0/24 maxlen: 24
45.80.199.0/24 maxlen: 24
103.23.62.0/23 maxlen: 23
103.23.62.0/24 maxlen: 24
103.23.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:07:ec:cc:fc:cb:71:b7:d0:e0:49:7d:24:d7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f76bf880e5fb1dde15a41338ecc356c102139a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:c1:b6:92:b4:fa:6e:fb:5f:3b:48:3e:9b:
00:96:41:cc:2d:fd:f8:a1:1b:0e:86:c6:8d:d8:3e:
37:08:6a:f9:d9:c9:73:b2:45:00:ec:7a:78:b3:fc:
dc:4e:4c:0e:12:ae:af:5b:5f:02:d8:48:47:29:3e:
1a:5b:12:dd:70:df:e0:0c:ee:f1:d4:45:85:b1:96:
c8:bb:7c:52:36:ce:bc:a3:0c:53:12:c2:46:49:52:
ee:3b:d2:5d:35:78:05:d1:23:a2:53:a6:f6:63:f0:
3f:3e:c8:4f:a5:f3:da:2b:91:d2:55:f3:81:91:bd:
86:52:09:cb:0c:c4:31:d5:a1:2a:8b:61:12:46:dc:
b6:bd:da:32:f2:2b:d4:e3:9f:e8:68:a2:38:04:b8:
80:3c:18:3e:0a:0d:48:46:29:0f:f4:4c:76:a3:49:
9f:46:c7:50:5e:bb:b6:80:94:78:58:ff:31:88:cb:
9d:6e:64:0e:82:0f:5a:85:7e:33:a5:45:9e:f6:38:
4e:69:0e:ea:dc:3e:3c:8d:a5:2f:6a:bd:d9:fa:41:
42:54:fe:ed:93:36:dc:7d:fc:8b:af:0f:1b:48:9d:
9b:bd:e3:81:1b:2a:f3:24:3d:89:3c:1a:8e:f9:48:
fe:f0:32:ab:4d:fe:de:e9:db:e9:e7:f0:34:03:90:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:F8:80:E5:FB:1D:DE:15:A4:13:38:EC:C3:56:C1:02:13:9A:24
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/92v4gOX7Hd4VpBM47MNWwQITmiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.196.0/22
103.23.62.0/23
Signature Algorithm: sha256WithRSAEncryption
63:a1:6c:4f:04:a7:2d:81:04:be:0d:f4:7b:3f:85:a8:b2:24:
37:7d:2d:3e:9d:88:a2:5d:5f:c8:b6:60:32:c1:03:55:f9:fe:
99:61:ab:38:f5:a5:75:7c:08:04:92:4e:51:a2:b2:72:2e:12:
f3:bc:18:ed:68:5d:49:10:9c:8a:fd:53:0c:fd:9a:ec:f8:6d:
c8:58:9e:20:eb:fa:99:3a:7e:77:fa:02:56:a8:6d:5d:5e:64:
78:04:ae:1a:41:ae:59:df:77:6e:d9:22:ac:de:87:17:2b:cf:
a9:55:31:1a:bb:0b:29:ff:08:ee:4f:d0:56:f8:ea:7a:2f:60:
c7:db:de:06:4d:e9:56:a1:23:b4:d7:38:27:81:52:d6:6c:47:
6b:83:4c:c3:9f:61:a3:66:38:63:ef:cd:62:d6:91:4d:a7:20:
8c:29:eb:ed:a6:6f:75:81:cc:7c:b2:ca:0b:57:75:7b:54:b7:
fe:cb:ae:7e:bf:e0:d2:28:73:3c:b8:33:58:c0:1a:ca:c0:f9:
67:2e:38:9b:b1:a3:a5:48:f0:ed:a3:34:a4:02:df:3e:55:d8:
9c:30:ba:c0:98:3c:ff:c2:48:ab:df:58:a3:67:00:25:ba:36:
c0:55:34:1e:af:9c:41:2e:a3:77:d3:54:55:0a:b2:4e:1c:99:
d0:c7:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:57 2025 by rpki-client