Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa
File: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (raw, json)
Hash identifier: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=
Subject key identifier: CB:67:C5:7A:E6:78:00:B3:66:6F:13:85:F9:32:42:D9:EC:FD:03:F0
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01942825A7F58551F79D1DF6AB2A86C0B458
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa
Signing time: Thu 02 Jan 2025 17:52:23 +0000
ROA not before: Thu 02 Jan 2025 17:52:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 80.83.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a7:f5:85:51:f7:9d:1d:f6:ab:2a:86:c0:b4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 17:52:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb67c57ae67800b3666f1385f93242d9ecfd03f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:7d:05:52:fb:87:d0:75:d0:a7:c9:64:3f:
cf:e1:92:1a:be:c1:2c:d0:c9:51:d3:74:24:80:e0:
75:12:27:b1:a3:bb:41:b9:cf:0f:7e:09:6e:d5:b2:
96:ab:dc:bc:d7:28:f4:8c:46:d0:ef:fe:b5:ec:18:
bc:54:bd:b4:bb:08:32:07:ff:6d:75:08:dd:07:14:
ef:3a:75:26:1e:36:ea:9c:bf:ef:b6:19:d2:48:94:
8c:93:c6:f8:e4:83:52:ac:ab:34:4a:83:61:9b:61:
07:6e:2d:55:fb:1d:e8:29:d4:74:5d:02:0d:f4:16:
96:b9:fb:a3:13:7b:f8:8d:c6:88:f5:83:64:b3:72:
b2:5b:56:ff:88:49:98:d5:f6:5e:eb:b0:ed:aa:8c:
99:90:a6:16:51:83:1c:89:70:4b:76:b7:10:b9:9d:
f9:08:4c:a9:1b:b6:17:b6:0a:44:41:f9:fe:4a:57:
f5:e3:c2:94:58:02:3d:b6:3f:de:d0:6b:87:e7:69:
f0:31:92:15:33:30:4a:e6:7f:a4:7e:e8:de:ec:13:
a9:e2:97:01:0b:81:b4:d7:0f:8c:c2:f0:dd:ea:c2:
18:9b:ed:70:fa:21:3d:77:14:3a:01:96:d3:87:7a:
b7:b0:3d:53:15:3a:dd:bf:01:fb:15:5b:33:b5:d8:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:67:C5:7A:E6:78:00:B3:66:6F:13:85:F9:32:42:D9:EC:FD:03:F0
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.80.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:c2:6b:39:13:01:b5:ca:56:56:33:b7:61:8c:93:88:40:36:
2a:5a:aa:19:04:cc:ed:5c:90:e8:7b:a9:52:94:63:9e:d4:eb:
1c:c3:86:75:ad:86:00:bc:ea:49:b4:0f:00:d4:6e:0b:0a:91:
f1:23:a3:46:fd:7c:fa:83:0a:65:ac:38:2c:01:57:80:1d:e0:
10:16:33:5c:dd:51:c8:0a:f2:5f:7f:7a:de:5f:8f:57:7d:6b:
e0:af:86:cf:59:2c:a6:3c:ca:b7:4e:20:b4:50:c1:82:49:d4:
0a:5e:4c:29:13:96:a8:7a:9a:ce:8b:36:ae:91:de:88:ae:4e:
79:79:51:4a:ee:ba:a8:ed:c0:9b:b0:08:7f:f5:ae:a5:bb:42:
fc:47:3a:4e:3f:6f:28:14:39:0a:46:ca:37:a0:0d:05:dc:61:
1c:4e:90:81:4f:d3:25:e1:f3:8d:27:5c:e2:a0:31:1c:3e:72:
3b:41:9d:05:89:0b:9c:0d:b8:29:d6:96:fe:d2:89:30:ed:11:
aa:85:93:95:31:b6:03:5e:31:11:cf:a6:f4:06:fe:40:f5:a3:
2e:38:b9:65:84:0e:3e:5d:35:dd:5c:0c:ba:3f:3c:16:8e:28:
b9:fd:be:50:fa:65:c4:9a:ca:6f:7e:13:d3:27:b8:7e:a6:45:
09:24:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:44 2025 by rpki-client