Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-G4IIVyKIAWDcNlAH4M7OplWxzA.roa
File: 1-G4IIVyKIAWDcNlAH4M7OplWxzA.roa (raw, json)
Hash identifier: oT8Poygnv0rjYVxLmepAxLPR4mcqcm1+1GHnaCupbjE=
Subject key identifier: F8:6E:08:21:5C:8A:20:05:83:70:D9:40:1F:83:3B:3A:99:56:C7:30
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01945F0BBB36F2614382BABA4B0A0F03341C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-G4IIVyKIAWDcNlAH4M7OplWxzA.roa
Signing time: Mon 13 Jan 2025 09:43:11 +0000
ROA not before: Mon 13 Jan 2025 09:43:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 80.240.85.0/24 maxlen: 24
89.213.229.0/24 maxlen: 24
109.176.243.0/24 maxlen: 24
213.218.215.0/24 maxlen: 24
217.145.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:0b:bb:36:f2:61:43:82:ba:ba:4b:0a:0f:03:34:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 13 09:43:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f86e08215c8a20058370d9401f833b3a9956c730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:b3:51:0c:b1:1b:d5:9f:e5:73:cf:ef:e0:
2c:da:ff:80:08:10:8f:ed:71:f5:21:c1:5f:28:59:
38:be:95:d7:7b:62:2b:39:47:46:0b:37:25:06:7e:
24:74:2d:2a:73:9a:4d:3f:85:36:66:15:b1:a5:ac:
ec:ae:4c:a3:80:90:62:93:c0:d7:76:3e:72:78:bd:
49:d1:77:88:ae:af:6d:0f:e7:a5:62:af:21:7e:34:
97:f0:d3:00:e3:08:e1:f5:a5:6f:41:f2:9b:99:43:
16:d7:94:98:64:0d:0a:37:41:4a:cf:c4:c0:d0:dc:
3b:c5:b1:ed:73:0f:bc:e2:57:e7:e5:18:40:07:48:
e8:82:73:a1:08:f4:e6:a6:fe:11:21:1d:9c:4d:7c:
4a:21:29:cf:95:ac:b1:f1:61:cd:13:6f:6c:13:fa:
61:de:66:13:ca:23:d0:67:70:bd:cf:bb:18:7c:e2:
97:d7:1b:10:46:d4:4b:df:ec:f4:31:0a:97:29:b4:
5c:ab:41:3d:a7:bf:fa:77:be:d4:e6:54:34:2b:c0:
28:3a:22:1d:c4:34:32:fa:14:d5:54:ab:fa:97:bb:
fc:d1:92:ef:8a:90:3b:af:44:52:b9:64:2a:2d:c1:
f6:f7:63:87:e0:10:69:ca:df:03:a8:38:51:89:00:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:08:21:5C:8A:20:05:83:70:D9:40:1F:83:3B:3A:99:56:C7:30
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-G4IIVyKIAWDcNlAH4M7OplWxzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.85.0/24
89.213.229.0/24
109.176.243.0/24
213.218.215.0/24
217.145.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3e:17:84:0b:82:56:34:d6:25:6a:84:0c:59:b2:a1:09:a6:
33:a7:d1:cb:d5:da:50:38:55:91:1a:0b:9c:b1:42:55:ab:2e:
b1:67:8a:72:e6:53:4f:25:15:ea:5c:46:9b:90:48:74:d4:9e:
20:8a:2f:7a:00:91:cb:1d:07:e4:b9:67:d5:b9:0b:df:f4:43:
d9:a9:91:0c:e9:6a:b1:15:25:06:91:d0:0e:f2:29:a2:31:58:
b6:00:c2:9b:ec:75:ea:56:56:51:1b:55:dc:3c:5f:b3:3b:f8:
d2:64:bd:68:f3:cd:d9:d8:18:e5:ee:aa:77:fb:93:9e:1c:f6:
61:e9:e4:43:0a:72:a9:a4:65:da:dc:9e:89:5c:97:64:71:1e:
6d:57:80:d9:c1:73:18:65:f1:ab:3e:46:3e:f3:15:c8:f6:df:
d0:28:c6:3a:5d:1e:f6:15:ad:76:62:d2:0a:a7:40:e2:d2:b9:
cc:7f:82:2a:cc:54:6b:e5:a9:73:50:23:00:cb:39:b6:c8:72:
51:43:88:c2:64:e5:a9:be:39:64:bb:99:02:24:cf:67:75:fa:
15:c7:89:ea:2d:67:ce:e4:e5:cd:59:f0:67:fa:83:c9:2b:c8:
c1:8e:a1:f1:a8:c1:bd:50:44:d2:e5:e4:a5:63:d4:c2:85:68:
76:a8:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:55:20 2025 by rpki-client