Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/1-p8tFLtNjdsD9js8JfdcaeXLbes.roa
File: 1-p8tFLtNjdsD9js8JfdcaeXLbes.roa (raw, json)
Hash identifier: SGKnAN0Wd2NDfYevBBpaQsdqn+ofJ6GFHE9Wy8o0+BA=
Subject key identifier: FA:9F:2D:14:BB:4D:8D:DB:03:F6:3B:3C:25:F7:5C:69:E5:CB:6D:EB
Certificate issuer: /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial: 0194221FA23AD541A26A8DB910165F37A78B
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/1-p8tFLtNjdsD9js8JfdcaeXLbes.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199516
IP address blocks: 185.13.80.0/22 maxlen: 22
185.13.80.0/24 maxlen: 24
185.13.81.0/24 maxlen: 24
185.13.82.0/24 maxlen: 24
185.13.83.0/24 maxlen: 24
2a02:f380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:3a:d5:41:a2:6a:8d:b9:10:16:5f:37:a7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa9f2d14bb4d8ddb03f63b3c25f75c69e5cb6deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:74:08:0e:94:ef:ca:f8:4a:14:74:85:97:
4f:37:8b:ee:10:4f:d8:94:d7:63:b2:46:6c:92:12:
f0:28:bc:8c:8b:1f:52:55:b6:ce:3c:6f:11:7f:b2:
bd:27:50:a6:6b:a0:b2:5c:58:5c:75:23:ca:f8:1e:
09:0e:ca:14:1e:b1:aa:e9:c8:4c:4e:42:a0:1f:d4:
ed:b6:35:49:78:54:c3:79:5b:12:d5:06:9e:e4:38:
86:4d:61:b2:c2:12:f1:c2:1a:1b:42:54:1a:5c:51:
3c:9b:b0:0b:22:dd:4f:dd:8b:11:40:4b:56:bb:d0:
3e:54:ea:f3:50:2e:f5:c4:04:38:52:f4:42:c4:bb:
2e:35:f5:ef:55:4d:0c:f0:0d:7d:34:b2:09:bb:c6:
a2:dc:06:7c:2b:b1:6a:99:33:a1:33:1c:d1:7f:31:
66:16:c4:42:03:34:e6:c8:80:fb:03:d4:be:3f:99:
17:f7:38:fc:7a:33:0a:c7:28:93:c6:27:f9:bb:ec:
d6:30:1a:c0:39:ca:64:92:52:5b:3c:6e:d5:a5:d8:
dc:9d:7e:44:36:76:e3:2e:04:24:31:aa:44:15:48:
16:c9:a5:fa:53:93:d3:e3:94:dc:95:c3:28:4b:c0:
68:17:32:28:d4:e4:59:df:1a:f8:01:d9:48:67:13:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:2D:14:BB:4D:8D:DB:03:F6:3B:3C:25:F7:5C:69:E5:CB:6D:EB
X509v3 Authority Key Identifier:
keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/1-p8tFLtNjdsD9js8JfdcaeXLbes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.80.0/22
IPv6:
2a02:f380::/29
Signature Algorithm: sha256WithRSAEncryption
01:5c:7e:73:da:af:6a:20:95:23:07:74:af:6b:46:0b:2c:43:
a7:9b:4c:76:1e:21:c4:a9:ce:31:4b:83:6d:c7:1b:32:92:ff:
53:df:da:c4:a8:bd:a2:a5:fb:6a:1d:69:91:68:e8:c5:03:4e:
9d:6d:e7:0b:97:fe:5a:37:0b:95:5b:29:ab:48:3d:f1:a9:5b:
35:9c:df:b6:af:69:e0:1f:27:60:b1:c2:2e:d8:79:c8:4e:e7:
f0:ed:fa:b8:52:9f:90:1d:2c:1d:2e:55:b7:6f:dd:ec:7a:0b:
8f:81:ec:70:65:ed:f6:08:70:08:37:60:7e:ce:8d:73:85:28:
08:ce:bb:7d:9a:92:63:85:15:ae:27:44:34:20:70:75:d0:49:
dc:b3:07:55:e2:02:2d:21:ab:9f:6e:18:82:36:63:3c:5a:29:
c8:bb:ef:de:f1:e2:1d:58:f8:2f:0c:70:4c:e4:d5:9d:4d:d8:
39:c6:e0:26:e7:6f:be:b3:c2:23:a3:d2:90:e6:41:d5:f2:21:
28:03:56:d0:db:2d:d0:34:7e:b8:f0:ef:84:c7:3d:93:a2:a7:
3d:fa:b0:88:2c:19:ec:0e:dc:81:b7:10:fa:3e:85:9e:50:49:
ec:3c:7c:a5:aa:30:cc:12:ff:0e:76:4a:2c:e3:ad:78:8f:6f:
50:d4:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:38 2025 by rpki-client