Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/W00xBD91CIN8dXZ5AMvwMZKAj7E.roa
File: W00xBD91CIN8dXZ5AMvwMZKAj7E.roa (raw, json)
Hash identifier: W71k5Ty54QTQy1zzm6WiQ5UlzJ7wtv9wzwbgHIVk10c=
Subject key identifier: 5B:4D:31:04:3F:75:08:83:7C:75:76:79:00:CB:F0:31:92:80:8F:B1
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D947DFCCF84ECDC8E121FB85A244
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/W00xBD91CIN8dXZ5AMvwMZKAj7E.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216159
IP address blocks: 80.71.237.0/24 maxlen: 24
80.71.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d9:47:df:cc:f8:4e:cd:c8:e1:21:fb:85:a2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b4d31043f7508837c75767900cbf03192808fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:e9:b1:4e:20:3e:9c:f1:c9:09:c5:96:01:
17:43:de:58:a7:d5:df:00:4f:af:45:45:2b:1e:26:
ea:62:14:83:e6:40:a8:9c:ff:2b:00:13:eb:35:37:
ba:e7:7b:89:18:74:93:cb:65:3b:d8:9f:a6:90:52:
26:43:95:4e:2e:ad:3b:06:40:be:7d:e8:51:37:0a:
5c:48:cd:17:31:65:1a:93:8b:8e:9e:15:6e:f1:07:
34:9a:c6:d4:c5:42:24:ef:05:83:ab:89:5f:bf:20:
da:a0:8a:37:14:05:ba:25:43:19:11:bb:8a:ab:c7:
f3:62:64:db:6c:ed:33:5c:a0:07:22:0f:c6:41:1a:
33:b4:29:46:f5:83:69:8c:1f:94:be:fd:21:a2:ba:
b7:fc:c0:72:3c:19:c9:91:2e:1d:d0:a9:3a:50:d1:
c3:6d:11:36:99:46:6d:67:95:fc:89:6f:01:eb:af:
26:ff:0d:00:2d:eb:6b:a9:e6:d4:96:0e:92:33:7f:
83:4b:cb:31:d2:c0:24:ab:54:95:10:d5:7b:61:67:
b0:36:05:09:3b:73:62:ce:c7:43:0c:47:5b:12:08:
2d:b4:41:af:8e:fd:12:eb:6a:c3:60:23:4d:6a:92:
29:2e:65:69:87:12:22:cc:e9:a4:a1:e3:f7:3e:3e:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:31:04:3F:75:08:83:7C:75:76:79:00:CB:F0:31:92:80:8F:B1
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/W00xBD91CIN8dXZ5AMvwMZKAj7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
51:00:2c:0d:5b:90:4f:dd:ab:c1:52:e8:b1:c1:85:68:1b:93:
03:08:1d:17:0f:f6:f0:74:34:b0:4c:9e:3b:42:89:30:bf:89:
04:34:c8:8f:0c:e8:b9:6e:a3:4f:36:13:02:fc:b9:66:f8:50:
df:a0:ae:d2:8c:33:3f:b7:d3:45:5e:e8:45:be:58:6b:d0:e0:
7a:bc:08:7c:87:89:b9:5b:05:3e:af:e1:5d:5c:8f:f0:2e:b1:
ba:a3:89:0a:44:ae:26:43:bc:69:b1:87:56:fc:93:6d:b8:42:
ff:59:c9:2a:26:19:c4:70:c7:71:32:ef:70:41:7d:bf:f6:81:
f7:fd:d5:98:c3:6f:4c:e3:35:c7:31:24:7f:ab:fc:22:c6:73:
6e:06:ae:e7:e0:04:0c:ef:71:1a:f1:75:c2:27:8c:0e:1c:9e:
87:85:76:55:b6:eb:1b:30:b2:e2:b4:75:d0:67:c1:1e:81:20:
aa:bc:15:c3:30:ed:bc:57:53:c5:ba:db:31:9a:4c:7a:8e:c4:
55:01:0e:07:a4:06:d3:4e:57:3f:5f:5c:d9:e0:b7:e4:b4:2d:
39:7b:5e:6e:55:48:42:07:ab:51:7f:04:e8:d4:bc:34:78:ff:
2f:9d:28:81:70:7b:c1:52:74:80:1e:00:5d:a0:e8:64:a3:53:
3d:df:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:52 2025 by rpki-client