Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa
File: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (raw, json)
Hash identifier: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=
Subject key identifier: 4C:DB:A8:55:02:CC:A0:2B:CF:C3:DA:6A:6E:FD:65:07:54:7A:59:3A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 01942068083C568A59B3C953054634E9F19A
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 80.245.0.0/24 maxlen: 24
80.245.1.0/24 maxlen: 24
80.245.2.0/24 maxlen: 24
80.245.3.0/24 maxlen: 24
80.245.4.0/24 maxlen: 24
80.245.5.0/24 maxlen: 24
80.245.6.0/24 maxlen: 24
80.245.7.0/24 maxlen: 24
80.245.8.0/24 maxlen: 24
80.245.9.0/24 maxlen: 24
80.245.10.0/24 maxlen: 24
80.245.11.0/24 maxlen: 24
80.245.12.0/24 maxlen: 24
80.245.13.0/24 maxlen: 24
80.245.14.0/24 maxlen: 24
80.245.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:08:3c:56:8a:59:b3:c9:53:05:46:34:e9:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cdba85502cca02bcfc3da6a6efd6507547a593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:0b:f6:47:a8:e2:50:eb:e2:4d:9c:4d:eb:
a3:bd:a5:2e:d7:1e:9d:42:f8:8c:52:30:17:fb:77:
45:1e:8c:4e:63:a0:86:e3:ce:70:26:70:b7:a8:64:
b1:28:7c:78:52:8a:3b:ee:ac:37:f9:91:47:ca:08:
33:69:c5:70:95:97:a3:df:91:32:e5:d7:3b:aa:cf:
dd:64:96:96:e3:7e:ab:fc:d6:dc:8c:c9:fa:59:cc:
fc:d0:d4:26:a2:a1:30:bd:a2:46:41:6b:8a:dd:7e:
b0:4b:16:b1:9e:d6:df:b4:81:f1:1f:ee:02:6d:f1:
9f:42:19:74:26:0e:d6:dc:67:ae:e2:3e:a2:03:7a:
2c:69:e6:b9:f8:24:39:c5:cb:9f:57:53:86:78:d0:
de:4b:1e:01:dc:fc:cd:8e:9c:a7:4b:a0:1c:2f:2f:
48:f0:3b:d3:e9:83:fd:4e:d9:39:8b:8f:d2:37:6d:
f1:36:27:96:48:d1:3a:f6:dd:c6:3c:7b:3c:d4:62:
70:cf:51:04:01:a5:c6:c0:88:f2:2c:1b:03:3b:d2:
6d:6d:fb:3e:27:55:4d:0c:1e:22:f3:b4:57:98:f1:
c6:75:0d:b7:a2:9c:91:dd:39:e8:4e:8b:71:bd:35:
46:f6:69:9e:e8:88:8d:75:cb:39:67:fd:bb:ef:42:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:A8:55:02:CC:A0:2B:CF:C3:DA:6A:6E:FD:65:07:54:7A:59:3A
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.0.0/20
Signature Algorithm: sha256WithRSAEncryption
96:5c:e5:8f:17:25:ca:7f:71:8d:3a:cf:c3:f9:cb:97:a9:24:
d9:00:fd:a9:44:59:24:0c:a7:ba:87:16:83:5f:b1:a7:a8:52:
e7:d8:e9:16:33:fc:9e:22:45:6d:f7:cc:6b:65:e5:98:df:e5:
f2:0c:71:bd:2c:e9:cd:79:2d:dd:bf:c0:0b:13:0f:94:15:4b:
07:d3:77:dd:26:21:89:cf:65:72:f1:bf:dc:ae:4c:d6:a8:b2:
a1:21:ad:11:af:de:4c:b6:ed:8f:0b:40:69:29:a3:5d:9d:c7:
43:dd:3a:b9:55:e3:2e:66:a3:e0:e0:2e:bf:02:df:b0:cb:a2:
e7:92:49:77:a0:84:77:40:bb:70:e6:d5:55:b0:76:45:ee:2a:
47:6e:ee:37:8a:b1:15:a4:4b:e7:2d:55:6a:87:a1:cb:ba:f0:
91:ab:4d:3e:11:22:82:ea:19:f0:09:61:86:57:1d:75:66:e2:
a0:c8:55:c9:3c:c0:0f:96:7a:44:0f:14:5a:ab:6e:3b:ab:7c:
e0:3e:b2:49:1a:13:a6:a0:fe:c9:ef:d6:cc:c5:43:a5:eb:f5:
f4:c5:59:79:fa:68:a0:a0:75:d1:36:c6:d4:67:6a:d8:47:1e:
aa:2e:0f:e3:a5:00:0b:0f:e0:33:10:b9:ae:80:8a:35:c1:09:
88:99:24:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaAg8VopZs8lTBUY06fGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjBmMTA4MzJjNDliYWQ2ZjE1YTk2MDU4YzViYTE4NTcy
YWM1MmEwHhcNMjUwMTAxMDU0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2RiYTg1NTAyY2NhMDJiY2ZjM2RhNmE2ZWZkNjUwNzU0N2E1OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X0L9keo4lDr4k2cTeujvaUu1x6d
QviMUjAX+3dFHoxOY6CG485wJnC3qGSxKHx4Uoo77qw3+ZFHyggzacVwlZej35Ey
5dc7qs/dZJaW436r/NbcjMn6Wcz80NQmoqEwvaJGQWuK3X6wSxaxntbftIHxH+4C
bfGfQhl0Jg7W3Geu4j6iA3osaea5+CQ5xcufV1OGeNDeSx4B3PzNjpynS6AcLy9I
8DvT6YP9Ttk5i4/SN23xNieWSNE69t3GPHs81GJwz1EEAaXGwIjyLBsDO9Jtbfs+
J1VNDB4i87RXmPHGdQ23opyR3TnoTotxvTVG9mme6IiNdcs5Z/2770IWQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEzbqFUCzKArz8Paam79ZQdUelk6MB8GA1UdIwQY
MBaAFNAg8QgyxJutbxWpYFjFuhhXKsUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGIt
MjcwMWQ1OTFkZWFlLzEvVE51b1ZRTE1vQ3ZQdzlwcWJ2MWxCMVI2V1RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGItMjcwMWQ1OTFkZWFl
LzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUPUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCWXOWPFyXKf3GNOs/D+cuXqSTZAP2pRFkkDKe6hxaD
X7GnqFLn2OkWM/yeIkVt98xrZeWY3+XyDHG9LOnNeS3dv8ALEw+UFUsH03fdJiGJ
z2Vy8b/crkzWqLKhIa0Rr95Mtu2PC0BpKaNdncdD3Tq5VeMuZqPg4C6/At+wy6Ln
kkl3oIR3QLtw5tVVsHZF7ipHbu43irEVpEvnLVVqh6HLuvCRq00+ESKC6hnwCWGG
Vx11ZuKgyFXJPMAPlnpEDxRaq247q3zgPrJJGhOmoP7J79bMxUOl6/X0xVl5+mig
oHXRNsbUZ2rYRx6qLg/jpQALD+AzELmugIo1wQmImSTe
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:29 2025 by rpki-client