Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/c8I1j-_EdlLIZz3-7BnhuaavJno.roa
File: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (raw, json)
Hash identifier: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=
Subject key identifier: 73:C2:35:8F:EF:C4:76:52:C8:67:3D:FE:EC:19:E1:B9:A6:AF:26:7A
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 019420683A145EE16ED8515100DA9F4C7F6B
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/c8I1j-_EdlLIZz3-7BnhuaavJno.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43645
IP address blocks: 185.80.252.0/22 maxlen: 22
185.80.255.0/24 maxlen: 24
2a05:8380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3a:14:5e:e1:6e:d8:51:51:00:da:9f:4c:7f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73c2358fefc47652c8673dfeec19e1b9a6af267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:1c:7a:a9:51:63:73:f8:14:2b:8b:c2:0f:
18:4b:d4:52:de:2c:93:00:3b:ca:69:39:10:57:4f:
55:15:cb:38:8d:e7:83:30:3b:1a:49:c4:f7:17:b4:
1a:26:c0:d3:dd:17:92:8c:25:67:eb:51:34:5b:3c:
77:bb:a9:23:6e:fe:0f:2f:88:36:45:b7:b8:70:28:
84:05:3e:3b:20:83:67:cd:ff:ea:c1:02:08:0a:3d:
47:3d:a2:93:e3:36:75:63:9e:97:01:76:7e:ad:1b:
60:08:02:0d:19:2c:c3:a6:4b:6f:10:15:37:02:47:
b5:9e:64:44:43:da:fd:85:51:9f:b0:80:e6:9b:32:
b5:b5:3c:60:07:42:70:24:9d:41:7c:31:c9:25:cc:
22:1e:ec:52:cc:1a:41:dd:8a:bb:2f:13:6b:da:88:
cf:f3:18:e1:40:a8:b2:b1:f3:05:74:58:22:2d:e7:
01:ea:08:60:59:c2:5b:9e:00:6d:12:6e:31:14:3f:
c0:7b:bb:b7:14:50:c0:39:6a:56:61:79:1e:84:6d:
8a:9c:37:9c:05:67:28:a3:17:20:8b:20:ad:c3:a1:
77:11:a7:b6:38:3c:41:c1:ae:7b:76:7e:38:7d:98:
05:22:b4:2c:5e:32:90:48:fb:8b:08:66:bb:27:d8:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C2:35:8F:EF:C4:76:52:C8:67:3D:FE:EC:19:E1:B9:A6:AF:26:7A
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/c8I1j-_EdlLIZz3-7BnhuaavJno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.252.0/22
IPv6:
2a05:8380::/29
Signature Algorithm: sha256WithRSAEncryption
1f:ae:bb:e6:c6:ed:ce:69:17:0b:ba:c7:04:05:a9:d8:f3:5a:
4b:26:3c:40:42:e5:af:6d:be:d8:63:97:f7:5c:0b:ef:37:60:
5b:49:95:1a:77:5d:6c:ae:04:67:1c:88:58:1c:cd:cc:92:a1:
ab:38:d3:70:95:8f:62:52:69:fe:7a:c8:ed:7f:f4:77:72:4a:
0d:a0:03:73:a5:c5:53:bc:7e:1b:1a:2c:93:2a:14:8d:42:d5:
56:63:74:28:f2:c9:5b:db:73:9f:89:e3:bf:80:65:c3:c1:ce:
85:74:f8:6f:04:ab:10:8a:c7:86:06:8e:6c:55:94:25:35:1a:
ff:5d:18:75:e2:a9:6d:d6:91:dc:23:2b:64:63:a0:da:a6:d0:
ad:e8:5e:7f:2c:e0:01:98:be:21:c2:65:24:6d:53:c6:7d:fa:
51:de:88:26:ed:4f:be:2e:c9:57:73:24:4e:ed:d4:a8:a4:64:
c7:14:cd:f3:45:0f:00:08:cc:bd:7f:59:62:62:07:6a:a3:9d:
9f:77:40:74:ba:08:dc:c8:82:25:3f:1d:d7:78:a3:c3:8b:5a:
1b:09:48:54:df:10:6a:46:37:21:f3:99:d4:d5:d0:35:cf:e0:
36:73:62:2e:b3:6b:5c:96:70:35:02:c6:ea:91:70:3d:5f:1a:
98:84:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:49 2025 by rpki-client