Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/IPVqTow4BPog0VgWrmL6j3UlRyc.roa
File: IPVqTow4BPog0VgWrmL6j3UlRyc.roa (raw, json)
Hash identifier: yHocQSt6Dh1L30jflXp+Oc+mQ08tmbAfLa5FFYWt/64=
Subject key identifier: 20:F5:6A:4E:8C:38:04:FA:20:D1:58:16:AE:62:FA:8F:75:25:47:27
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 01942143863985FB4F73CF96C86F652532F0
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/IPVqTow4BPog0VgWrmL6j3UlRyc.roa
Signing time: Wed 01 Jan 2025 09:47:40 +0000
ROA not before: Wed 01 Jan 2025 09:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62429
IP address blocks: 80.87.144.0/20 maxlen: 20
91.195.16.0/23 maxlen: 23
91.197.160.0/22 maxlen: 22
185.18.90.0/24 maxlen: 24
185.35.116.0/22 maxlen: 22
2a00:db20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:86:39:85:fb:4f:73:cf:96:c8:6f:65:25:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Jan 1 09:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f56a4e8c3804fa20d15816ae62fa8f75254727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:18:bc:6a:af:4b:71:c8:fb:8b:27:bb:e8:
40:48:1b:64:5a:4f:6c:55:83:ef:99:96:7b:91:0a:
fb:3a:a5:37:b1:8d:e3:ad:25:73:0a:76:04:f8:00:
0e:5f:d0:1d:44:40:fc:29:03:b0:ef:27:f7:e7:3c:
00:5e:4b:90:52:42:e7:8d:aa:38:30:4c:21:47:83:
36:d7:c6:c8:56:41:29:a1:5e:98:4c:2f:ac:7a:7b:
89:97:7d:b0:c5:d9:19:ee:c2:b3:be:df:ab:be:01:
9d:fe:b5:54:42:97:3c:4a:db:cd:f5:1e:47:d1:28:
26:21:ab:ac:f1:aa:d6:ca:85:c4:b9:48:d7:5d:9d:
e9:9e:8e:1f:f2:68:cb:02:2b:0d:3d:69:a5:50:ea:
2b:61:ff:4f:6b:4c:20:1e:98:0b:eb:f5:fa:f5:ec:
75:a3:6f:c0:3c:6e:79:1f:f1:61:4e:f3:30:40:8f:
c8:ad:9c:bd:ee:3f:dc:ac:e8:c0:d3:5b:e5:f3:8c:
ae:e3:ef:4f:5c:6e:bd:93:47:90:df:01:6e:9f:23:
69:a8:46:25:a7:26:93:48:d7:92:4f:55:06:f2:c8:
6e:5e:b7:e9:a9:09:53:af:83:42:aa:ec:50:61:3c:
03:89:e7:33:6f:87:ec:4a:44:29:fa:ac:38:14:07:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:6A:4E:8C:38:04:FA:20:D1:58:16:AE:62:FA:8F:75:25:47:27
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/IPVqTow4BPog0VgWrmL6j3UlRyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.144.0/20
91.195.16.0/23
91.197.160.0/22
185.18.90.0/24
185.35.116.0/22
IPv6:
2a00:db20::/32
Signature Algorithm: sha256WithRSAEncryption
45:78:4a:5a:5f:12:72:2a:00:51:fb:42:89:c0:db:fb:4c:88:
53:7a:71:35:bb:a2:a2:a3:d5:9c:7e:d7:da:40:6d:bb:8c:14:
40:5c:bb:58:38:f3:5b:15:ec:fc:a2:75:cd:42:bd:7c:da:0b:
17:a0:37:d9:bf:3d:6b:76:81:27:76:c1:39:5e:5f:6a:86:6b:
e7:62:a2:0b:7c:ad:14:f0:3a:b4:8a:e8:ab:e2:7c:a6:f1:58:
98:e6:dc:fa:fb:59:44:b4:85:80:25:48:3c:4d:2f:de:1a:c0:
76:c7:c5:41:ff:bd:15:3a:6e:80:e0:ce:8b:bc:a4:71:6a:45:
3b:29:e4:4e:c2:e1:2e:f0:69:79:b8:d1:ff:5b:4f:7f:18:7f:
08:1f:c1:e8:b0:d7:d8:52:d2:14:6a:aa:52:0f:f4:c8:33:10:
5b:f3:46:46:16:ad:c8:c2:c9:ca:b4:9c:ad:f2:80:3c:13:47:
78:68:b9:61:8e:4e:8c:a1:b9:f8:e4:3e:1c:d2:0e:58:f8:44:
00:63:7f:77:84:cf:18:3d:fe:8a:7d:b5:e6:dc:28:85:c0:a6:
28:59:e1:01:53:e9:c2:6d:ef:b0:95:9a:e8:28:57:b9:d1:83:
99:57:de:7a:d3:2c:0c:53:0d:28:85:21:b8:50:f4:69:89:95:
ac:e2:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:11 2025 by rpki-client