Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/83Gu0dtJuFZBe-loHFuPr5SJG_w.roa
File: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (raw, json)
Hash identifier: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=
Subject key identifier: F3:71:AE:D1:DB:49:B8:56:41:7B:E9:68:1C:5B:8F:AF:94:89:1B:FC
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019422FB8BD8377AB0C835EB84C99318CDEB
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/83Gu0dtJuFZBe-loHFuPr5SJG_w.roa
Signing time: Wed 01 Jan 2025 17:48:18 +0000
ROA not before: Wed 01 Jan 2025 17:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55222
IP address blocks: 185.80.124.0/22 maxlen: 24
2a05:7c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8b:d8:37:7a:b0:c8:35:eb:84:c9:93:18:cd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Jan 1 17:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f371aed1db49b856417be9681c5b8faf94891bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:92:f2:e9:cd:22:64:3b:eb:57:18:70:77:
16:32:fc:82:f4:6a:c5:1e:a0:69:63:73:f8:fc:fc:
a7:93:c7:07:c3:dd:bf:c4:c1:22:9e:13:cf:9a:c8:
ee:66:54:8a:42:06:06:8b:86:64:6a:9b:4c:c4:8d:
03:f7:0a:11:71:e6:1f:4a:92:0e:52:87:6c:da:51:
19:55:9a:49:fd:86:00:11:35:1d:bd:85:5d:b2:4a:
19:df:c0:03:7f:9b:3f:bf:51:9a:77:1e:44:c0:26:
d3:11:0f:24:ea:c1:85:16:23:9c:64:0d:0b:0b:e6:
f4:e3:ef:49:61:69:d5:39:f0:64:60:b2:da:2a:6a:
40:00:33:60:ab:9f:ef:15:7a:a0:8f:8b:34:f2:f0:
62:b9:c5:99:41:98:0a:da:be:6c:d1:8f:49:b1:38:
2b:02:f9:27:d4:0e:98:37:74:6b:bc:87:d5:83:c3:
4b:62:15:d7:f9:57:d0:a2:31:2f:4b:a6:02:21:21:
db:27:70:5e:f3:23:19:44:d5:75:b5:0a:22:02:21:
09:6e:b7:34:11:63:e9:fe:3a:9b:03:17:b8:56:ca:
82:a7:a2:8d:c4:d2:ed:8f:1a:38:34:00:ac:0c:bc:
d7:e8:d1:fa:c9:ec:c7:3a:62:95:45:bd:81:80:2e:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:AE:D1:DB:49:B8:56:41:7B:E9:68:1C:5B:8F:AF:94:89:1B:FC
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/83Gu0dtJuFZBe-loHFuPr5SJG_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.124.0/22
IPv6:
2a05:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:6a:e1:48:00:0a:16:17:d3:71:7c:0d:5d:98:e8:02:8e:1d:
55:da:82:73:05:fa:2e:f6:3e:1d:ae:d5:c4:22:ea:e4:74:65:
af:ea:2c:4b:86:50:66:c9:01:97:c3:cb:c1:51:20:d1:e3:10:
94:6e:19:b9:50:09:5d:a5:f6:01:ba:e2:a5:7c:b1:5e:c8:d4:
26:c4:27:94:5f:f7:1d:62:2e:95:f5:c6:83:07:84:92:52:d5:
1b:51:8e:7f:41:4f:db:9f:f2:4b:de:2b:2d:84:fc:8b:9e:be:
30:33:a1:25:ee:15:8c:d6:9b:18:67:ea:7e:81:86:d1:12:5d:
2d:ba:4f:54:5b:7d:34:28:ab:dc:17:5f:b8:35:8e:6b:8a:62:
ac:f7:59:0f:63:97:1e:bf:9d:ab:49:40:32:70:c8:0c:13:af:
ae:6c:65:20:78:8b:6b:ea:a5:25:fa:ff:9d:af:6c:d2:04:37:
fc:4e:6f:71:5e:28:21:57:2b:0b:42:7a:96:38:48:6c:8c:d2:
a9:2b:46:f9:ef:d4:b1:04:1b:bb:b9:74:f3:26:69:cd:3a:cb:
3f:ae:f2:b3:15:4b:73:9b:0c:1a:cc:bb:b4:ec:dd:07:3d:0e:
c8:cc:8c:46:8b:52:83:83:db:8f:a7:67:9e:dd:8d:e8:c1:27:
02:c0:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:09:26 2025 by rpki-client