Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/gACG_CZ-Iug99I2lwvBj2F9-h5o.roa
File: gACG_CZ-Iug99I2lwvBj2F9-h5o.roa (raw, json)
Hash identifier: nmlBka4iP6DO0ZjdL5pCRw7PZdQRFau0PkO/pT9dD0g=
Subject key identifier: 80:00:86:FC:26:7E:22:E8:3D:F4:8D:A5:C2:F0:63:D8:5F:7E:87:9A
Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial: 019424459A00D263789EE3D4DB7C7A85D289
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/gACG_CZ-Iug99I2lwvBj2F9-h5o.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201261
IP address blocks: 185.80.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9a:00:d2:63:78:9e:e3:d4:db:7c:7a:85:d2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=800086fc267e22e83df48da5c2f063d85f7e879a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:e8:cc:42:bc:7f:3a:1e:ca:6a:75:bc:cd:
b9:1f:bb:a1:d1:7b:04:e2:f3:cf:3b:ec:60:b5:87:
b1:1e:99:7c:8d:5d:43:fd:f4:13:a6:c7:da:9f:61:
89:cd:ef:d4:c7:81:2d:96:86:66:b7:d6:60:ae:0e:
f0:96:25:53:41:bf:14:a0:db:4c:cf:21:01:d1:f0:
0e:9d:31:bc:e5:5e:a8:f6:6f:e8:96:c6:f8:d2:3e:
cb:56:b7:12:6f:b8:45:1c:20:e2:56:ff:81:6e:75:
cf:82:b2:b8:aa:86:20:50:d7:81:39:73:03:d9:4c:
e5:c7:3f:bb:79:07:e4:66:3b:25:ee:91:d7:30:c8:
b0:8b:9b:24:b1:3f:e1:b3:21:2f:90:40:89:24:20:
5a:7a:5d:3b:90:c2:f1:dd:5e:4a:36:e4:0d:84:0c:
14:4c:d6:d2:7b:0a:d5:62:32:71:27:41:f8:ab:60:
14:61:3a:ee:31:b7:97:40:17:a7:7d:04:3d:9a:2d:
8e:f7:72:67:2d:bf:ce:74:6c:e3:f1:16:03:68:9a:
f2:e9:26:0a:e0:a6:f7:49:70:56:c4:1e:77:a0:6d:
35:cb:fc:bc:24:d4:5b:d1:ba:42:9d:6f:b8:03:9d:
e2:d1:42:88:57:aa:5a:ac:f1:5f:bf:7d:2e:b6:2d:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:86:FC:26:7E:22:E8:3D:F4:8D:A5:C2:F0:63:D8:5F:7E:87:9A
X509v3 Authority Key Identifier:
keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/gACG_CZ-Iug99I2lwvBj2F9-h5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:1b:f0:5b:20:4e:58:bd:4d:12:67:a5:19:e7:59:da:55:b3:
d2:72:f7:f8:20:8c:45:8a:6f:29:6e:a7:18:55:05:21:e9:b4:
6f:2b:f3:5f:e3:7d:f4:a2:49:3c:e8:a5:5b:7a:26:96:b4:a1:
3e:89:5a:73:08:57:6a:76:aa:71:d0:71:48:56:ff:5c:fd:1c:
62:b6:e6:24:56:21:d0:95:53:29:4f:76:1d:1d:1a:56:f4:1f:
27:6e:8c:bc:1f:98:bc:07:1c:0b:c1:d1:a8:d9:5e:a8:60:8e:
00:13:72:21:a3:5c:53:5b:24:45:79:d0:f7:7e:5d:34:cc:c3:
1d:e1:88:c1:42:86:be:c6:08:9e:da:df:95:ee:53:52:f8:f7:
57:d0:70:54:ee:6b:5a:35:06:5f:45:e4:ea:82:10:e6:d0:95:
08:92:06:9d:3f:73:77:cc:b0:1b:27:4b:ef:24:b8:6f:e7:5f:
31:75:2c:70:28:9d:a9:9f:78:66:9d:7d:0b:6e:3a:42:17:4d:
4d:0b:f5:3a:e9:ac:4e:66:33:e8:e5:bc:6b:17:e1:cd:92:32:
70:ca:25:19:e8:41:c2:a1:a8:7a:b0:2d:85:ab:bf:f2:83:09:
36:23:e7:89:c4:71:13:fc:9f:e8:9b:fb:6b:48:17:35:4a:a6:
9a:24:db:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:36 2025 by rpki-client