Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa
File: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (raw, json)
Hash identifier: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=
Subject key identifier: 18:96:02:2C:DD:22:6F:D3:83:AA:30:BF:E2:EF:5A:28:68:C7:88:0B
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019424B28CC98BC598F6ACDA96D4E6A86D3D
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa
Signing time: Thu 02 Jan 2025 01:47:48 +0000
ROA not before: Thu 02 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 80.82.0.0/24 maxlen: 24
80.82.1.0/24 maxlen: 24
80.82.2.0/24 maxlen: 24
80.82.3.0/24 maxlen: 24
80.82.4.0/24 maxlen: 24
80.82.5.0/24 maxlen: 24
80.82.6.0/24 maxlen: 24
80.82.7.0/24 maxlen: 24
80.82.8.0/24 maxlen: 24
80.82.9.0/24 maxlen: 24
80.82.10.0/24 maxlen: 24
80.82.11.0/24 maxlen: 24
80.82.12.0/24 maxlen: 24
80.82.13.0/24 maxlen: 24
80.82.14.0/24 maxlen: 24
80.82.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:8c:c9:8b:c5:98:f6:ac:da:96:d4:e6:a8:6d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jan 2 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1896022cdd226fd383aa30bfe2ef5a2868c7880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:48:ac:61:0f:62:28:6c:97:f9:58:99:52:
b4:56:84:39:94:2e:8a:f7:e5:5b:87:79:81:06:70:
96:c0:91:b2:40:c9:e7:b8:a0:db:bc:40:be:09:f1:
43:62:f8:e0:4c:f0:03:18:fc:0f:bd:04:b9:09:18:
00:fb:dc:62:e1:dd:04:d2:2a:3e:2f:04:c3:a1:e7:
34:1f:97:99:5a:9f:77:9d:57:b8:31:bd:ae:e0:1d:
b2:61:b4:ab:9f:09:21:25:ca:18:c0:6a:b6:b4:6e:
08:9b:df:15:b0:ad:ae:fe:67:83:f9:3a:d3:40:9d:
6c:2c:32:b6:a1:4a:9b:81:41:1c:52:99:2c:2f:38:
d5:57:5c:ab:2f:0d:f9:a1:9c:cb:72:7a:3b:59:5c:
d4:4d:cf:d1:0b:ae:bb:70:5a:b6:52:1b:bd:98:96:
7f:c7:f8:f2:0e:29:55:6a:92:dd:fb:37:98:85:06:
3d:20:16:41:fa:91:8a:0c:73:15:94:f4:88:86:c7:
b0:a0:36:53:13:4f:97:27:e9:05:50:1d:9f:7a:d5:
5a:4c:cf:02:9b:73:63:b9:6d:23:72:af:0c:9c:ab:
93:db:f8:18:1e:18:98:ab:5f:62:ab:2f:8f:52:d4:
f9:3e:6d:7f:25:ed:65:2a:f5:5f:2b:fd:fd:fd:c9:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:96:02:2C:DD:22:6F:D3:83:AA:30:BF:E2:EF:5A:28:68:C7:88:0B
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.0.0/20
Signature Algorithm: sha256WithRSAEncryption
58:ee:69:cc:52:41:54:fa:6c:5e:f3:b4:39:04:bd:19:f4:d4:
52:bc:f6:e2:23:2d:df:83:d5:7d:e2:b8:88:7b:61:fa:f0:51:
92:c4:df:20:80:9a:d6:bc:cc:06:44:43:8e:54:2a:45:52:1e:
9c:40:b1:17:57:f6:25:e1:0d:f0:ba:ad:6c:91:db:59:c3:21:
df:86:ec:e5:5c:36:13:4d:4a:ab:65:c9:e8:1b:9b:dc:12:4e:
50:fa:bc:b6:56:24:a1:7e:a9:f2:ef:67:69:46:7e:5e:87:a1:
7f:3e:30:d5:79:e5:0e:17:fb:03:5a:01:d7:fd:1e:4e:43:f5:
e9:c6:95:78:28:82:85:7a:70:67:fc:8d:4e:6e:71:f4:35:3a:
98:bb:78:2e:31:24:43:65:00:2c:ba:a1:b0:1f:fb:af:88:8f:
21:6f:b8:25:d3:cf:68:0e:fb:39:2e:7d:92:29:3f:33:28:ad:
2c:8b:d0:85:97:a8:9b:48:67:d2:a7:c2:00:ae:81:6f:1e:4b:
64:ae:68:fe:8d:ba:f3:70:51:92:84:bc:83:e0:2b:21:b3:b6:
9a:f5:40:8e:cb:06:a4:0c:83:c3:2a:38:e0:a4:7b:93:eb:cd:
0f:eb:22:e1:f3:c7:38:56:b0:87:61:02:0c:8c:8f:a0:d1:93:
ec:b1:c5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:53:46 2025 by rpki-client