Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9GaPSNwKOzuQjbXuFJ168Doa7qw.roa
File: 9GaPSNwKOzuQjbXuFJ168Doa7qw.roa (raw, json)
Hash identifier: H16NAEYE7k23zDz5ppvJ99rR5O942chKHzc/EW4j8ro=
Subject key identifier: F4:66:8F:48:DC:0A:3B:3B:90:8D:B5:EE:14:9D:7A:F0:3A:1A:EE:AC
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5AB54E9B2F7F86C2ECC840890D170
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9GaPSNwKOzuQjbXuFJ168Doa7qw.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28708
IP address blocks: 80.10.4.0/23 maxlen: 24
80.10.43.0/24 maxlen: 24
80.10.46.0/24 maxlen: 24
80.10.161.0/24 maxlen: 24
80.12.66.0/23 maxlen: 24
80.12.68.0/23 maxlen: 24
80.12.70.0/24 maxlen: 24
80.12.100.0/23 maxlen: 24
80.12.102.0/24 maxlen: 24
80.12.209.0/24 maxlen: 24
80.12.210.0/24 maxlen: 24
81.253.0.0/18 maxlen: 24
81.253.64.0/19 maxlen: 24
90.84.144.0/23 maxlen: 23
90.84.146.0/24 maxlen: 24
90.96.0.0/16 maxlen: 24
193.251.116.0/24 maxlen: 24
193.253.10.0/24 maxlen: 24
193.253.78.0/23 maxlen: 24
193.253.141.0/24 maxlen: 24
193.253.142.0/23 maxlen: 24
193.253.168.0/24 maxlen: 24
193.253.169.0/24 maxlen: 24
193.253.170.0/24 maxlen: 24
194.250.131.0/24 maxlen: 24
2a01:cd00::/31 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ab:54:e9:b2:f7:f8:6c:2e:cc:84:08:90:d1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4668f48dc0a3b3b908db5ee149d7af03a1aeeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:f4:95:13:df:d4:e4:15:93:d2:fe:53:b3:
1a:38:33:54:0c:54:04:a0:92:32:d0:17:84:fa:ae:
33:ee:e9:14:66:68:5f:c7:93:b7:41:b5:45:cd:56:
09:c0:c4:3e:66:28:71:c5:47:41:20:48:60:c2:9e:
c6:62:76:90:1c:db:50:2a:0a:1e:18:6d:04:43:66:
85:23:1a:4b:c3:74:53:bf:c3:36:bb:16:5a:17:7f:
d4:7c:99:3b:3a:ce:d9:59:70:8d:1d:12:27:d9:3d:
b2:f2:a5:5e:18:32:2a:47:f1:3b:9c:8d:54:2c:ba:
79:fa:cf:ee:3c:1b:11:df:27:cc:23:fa:16:b1:ae:
67:42:dd:1e:b7:d6:64:fd:97:5e:7e:6d:c4:bf:3e:
1f:33:44:0b:72:05:56:17:21:ad:c8:48:24:bd:f1:
e6:fd:44:66:ee:47:a7:4b:6d:51:1a:3a:57:e5:da:
9c:dd:1c:98:7a:1a:dc:6b:0e:17:c7:ef:31:ea:6e:
23:a7:57:4b:e7:d0:cb:f5:a7:d2:fe:9c:83:4f:7a:
29:65:5b:50:40:b6:6d:dc:c5:dc:db:c2:36:dc:68:
56:38:78:83:a0:43:61:66:d4:c5:2e:7e:93:16:a2:
f2:39:db:c7:84:e4:71:0d:d1:9d:21:57:05:e4:34:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:66:8F:48:DC:0A:3B:3B:90:8D:B5:EE:14:9D:7A:F0:3A:1A:EE:AC
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9GaPSNwKOzuQjbXuFJ168Doa7qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.10.4.0/23
80.10.43.0/24
80.10.46.0/24
80.10.161.0/24
80.12.66.0-80.12.70.255
80.12.100.0-80.12.102.255
80.12.209.0-80.12.210.255
81.253.0.0-81.253.95.255
90.84.144.0-90.84.146.255
90.96.0.0/16
193.251.116.0/24
193.253.10.0/24
193.253.78.0/23
193.253.141.0-193.253.143.255
193.253.168.0-193.253.170.255
194.250.131.0/24
IPv6:
2a01:cd00::/31
Signature Algorithm: sha256WithRSAEncryption
12:9b:52:79:0a:7a:5c:78:42:9f:2d:37:72:83:ad:98:58:60:
5c:b1:72:92:a2:18:02:d1:75:1a:b2:9a:de:68:10:60:5c:fc:
10:2f:df:58:55:ef:9b:af:50:f3:b2:81:0e:56:3e:60:6d:e0:
d6:d1:0a:82:e5:69:ca:31:76:0a:97:e9:71:1f:d3:6e:07:f8:
a7:89:c5:5a:0e:2b:72:5c:c9:a1:68:19:57:90:0b:82:d1:4e:
60:45:94:22:9b:9e:01:b5:e6:37:e2:09:40:fd:27:43:48:6c:
4e:67:e2:09:11:6f:7d:b0:66:3b:be:ff:a4:c4:df:b2:2f:03:
5e:77:95:64:af:65:f1:46:17:9c:5f:0e:9a:64:d5:39:23:79:
6d:7c:7f:92:23:7f:fc:af:84:81:7d:64:1a:38:ff:6d:8e:12:
bc:fd:22:d6:fb:74:6c:47:06:d6:2c:c8:75:05:dd:5f:a8:29:
7d:94:4a:73:c8:28:90:af:40:81:22:ec:02:cc:94:f9:89:48:
b3:e9:7f:19:d4:7f:3b:0e:b2:be:b1:33:5f:e1:d3:dd:b1:46:
0d:40:42:a6:63:a5:ad:dc:65:f0:7e:be:d8:83:8f:f3:d2:ce:
15:5c:56:2b:0f:25:15:a3:d1:92:03:74:85:cd:4d:66:c3:e6:
2c:bb:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:06 2025 by rpki-client