Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/GZmRGff5SY6f2maFjy40WztZsVQ.roa
File: GZmRGff5SY6f2maFjy40WztZsVQ.roa (raw, json)
Hash identifier: 0CrTdIjKS9GI6i9LLy/Cey6tOh/vSgO5QV5+zMEjuho=
Subject key identifier: 19:99:91:19:F7:F9:49:8E:9F:DA:66:85:8F:2E:34:5B:3B:59:B1:54
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 019426D96144932A0D31166F2E517A7D3B6D
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/GZmRGff5SY6f2maFjy40WztZsVQ.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212734
IP address blocks: 80.92.200.0/24 maxlen: 24
80.92.202.0/24 maxlen: 24
80.92.203.0/24 maxlen: 24
2a07:3a40::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:61:44:93:2a:0d:31:16:6f:2e:51:7a:7d:3b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19999119f7f9498e9fda66858f2e345b3b59b154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:47:4c:8c:c9:1d:00:e9:eb:8c:d0:c0:c4:
2a:cf:4c:90:8e:7b:7f:df:ab:98:8e:d7:b0:66:54:
55:ff:99:6d:e9:49:e0:e4:69:1d:26:a0:88:b6:07:
ee:fb:f6:04:02:9c:6b:85:64:6f:be:f0:eb:b9:a2:
1d:f0:e6:e2:64:8c:fe:dc:40:44:26:c9:c8:e6:6d:
14:01:cf:b8:0c:0d:7e:7f:90:b7:0e:78:50:d8:aa:
63:ab:81:41:5b:af:da:84:95:95:ce:b9:f3:62:27:
2f:77:ad:b4:b3:b7:cd:e8:c7:5e:cb:3c:c8:3e:ca:
28:5b:27:82:f9:88:80:39:6e:19:88:a3:62:0a:08:
b0:b9:58:b9:50:c3:0e:17:4b:4c:eb:26:29:fa:d0:
56:85:e6:b4:20:3f:2c:e5:04:cd:06:f3:e5:3d:ac:
a9:92:e0:ef:ec:de:10:37:bc:02:a8:40:76:92:4c:
38:c1:c2:cf:2e:1e:d2:a1:62:fe:63:1a:43:9f:f2:
49:39:70:b2:a8:39:a4:b2:fd:13:c5:de:a8:3d:66:
37:a2:3e:11:14:31:f2:0f:de:71:fe:ac:eb:42:a2:
d5:d0:71:34:ef:39:15:5b:52:99:84:33:6d:ee:7a:
71:0f:3e:fa:8e:8e:36:82:39:14:f1:5d:17:65:01:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:91:19:F7:F9:49:8E:9F:DA:66:85:8F:2E:34:5B:3B:59:B1:54
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/GZmRGff5SY6f2maFjy40WztZsVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.200.0/24
80.92.202.0/23
IPv6:
2a07:3a40::/34
Signature Algorithm: sha256WithRSAEncryption
49:db:11:c2:47:50:3c:f3:db:18:a4:ce:29:1c:0a:0d:27:0d:
c9:a6:37:03:11:a2:f8:22:0d:08:a2:2a:fe:df:c7:47:8a:0e:
14:be:bd:78:1c:e8:32:7f:be:a3:d6:bd:16:ae:f1:27:69:3c:
94:dd:ad:45:45:86:97:92:01:55:63:6a:9f:32:a8:f5:99:7d:
61:13:76:d9:50:81:84:78:59:bf:43:44:ad:12:e9:0a:95:6c:
d2:ec:e1:0c:04:07:27:84:ab:06:75:b8:2a:80:67:4a:11:1d:
4e:20:77:c1:13:5e:5a:d4:e7:0b:7c:cc:17:bc:b7:b8:a3:21:
7b:f5:c8:9b:f5:ca:c7:b6:27:d9:72:7a:35:0c:c6:be:04:79:
f6:5f:76:95:20:f0:d3:3f:4f:77:e7:b2:4a:fb:62:ef:60:12:
0b:30:a0:7a:31:89:ae:a7:6a:52:ed:c3:83:63:49:d6:f2:76:
97:97:6f:93:c0:99:2a:8a:d9:b0:d2:96:a2:67:9e:71:c9:e2:
f5:84:2b:de:7e:dc:3e:9c:33:26:7a:e0:7f:f0:d6:1e:7c:3a:
24:b2:83:21:ce:ea:b2:fc:dc:9c:e4:1f:f0:34:a4:1f:bd:b2:
d1:ef:6d:68:a1:82:11:19:cb:44:a0:62:50:4c:3b:ef:f9:7e:
f5:70:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:16 2025 by rpki-client