Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/0xDZgWnts24csgnMxUD8LWhBHU4.roa
File: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (raw, json)
Hash identifier: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=
Subject key identifier: D3:10:D9:81:69:ED:B3:6E:1C:B2:09:CC:C5:40:FC:2D:68:41:1D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019427481A0805C7FDD5A6CAD6D11C8DF0C8
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/0xDZgWnts24csgnMxUD8LWhBHU4.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41810
IP address blocks: 80.240.64.0/24 maxlen: 24
80.240.65.0/24 maxlen: 24
80.240.66.0/24 maxlen: 24
80.240.67.0/24 maxlen: 24
80.240.68.0/24 maxlen: 24
80.240.69.0/24 maxlen: 24
80.240.70.0/24 maxlen: 24
80.240.71.0/24 maxlen: 24
80.240.72.0/24 maxlen: 24
80.240.73.0/24 maxlen: 24
80.240.74.0/24 maxlen: 24
80.240.75.0/24 maxlen: 24
80.240.76.0/24 maxlen: 24
80.240.77.0/24 maxlen: 24
80.240.78.0/24 maxlen: 24
82.167.128.0/21 maxlen: 21
82.167.136.0/21 maxlen: 21
82.167.176.0/22 maxlen: 22
82.167.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1a:08:05:c7:fd:d5:a6:ca:d6:d1:1c:8d:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d310d98169edb36e1cb209ccc540fc2d68411d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:ed:b4:c2:ad:f3:ae:5e:9f:e4:0a:33:8d:
cd:c9:f9:21:d5:e0:3c:e3:10:5a:21:7a:40:a4:1d:
1c:e4:cf:0a:05:be:a4:6a:1f:19:65:55:20:8f:7e:
32:9f:d3:d8:fe:ea:f8:06:54:ad:98:65:6f:4d:30:
fd:09:c3:76:58:c5:bb:36:0b:bd:f5:db:cf:58:13:
5f:51:25:66:a5:4d:94:a0:b0:6a:68:87:6e:14:ce:
45:7c:c6:d2:b9:72:3d:c7:82:88:e6:40:7f:93:64:
00:59:09:a2:96:74:6b:0b:4c:d5:95:4b:0c:21:10:
b1:22:2a:4a:bb:f5:31:18:09:cc:f3:f4:57:62:45:
74:3a:08:2d:87:53:28:fa:e3:cf:53:30:13:f2:17:
7f:72:7c:63:47:ee:08:c2:9c:8b:f7:78:79:d4:6c:
20:09:79:02:64:f7:35:42:2d:80:63:02:3c:27:f7:
be:37:8d:71:89:bb:4a:35:96:1d:c5:ca:6f:49:ed:
f3:cc:3f:3f:36:76:45:21:27:aa:97:a0:37:c8:ab:
ec:71:b8:66:68:67:3e:51:d0:ea:8d:cf:f3:14:ce:
17:32:8c:e9:35:7a:f9:f0:c9:72:49:9b:22:27:c7:
d7:72:9e:0f:3f:82:2e:7c:a7:9b:a4:f1:22:41:13:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:10:D9:81:69:ED:B3:6E:1C:B2:09:CC:C5:40:FC:2D:68:41:1D:4E
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/0xDZgWnts24csgnMxUD8LWhBHU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.64.0-80.240.78.255
82.167.128.0/20
82.167.176.0/22
82.167.184.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:09:ec:7d:74:70:e6:dc:27:54:cc:0a:22:fc:a3:85:44:de:
c7:e7:56:41:4e:cd:49:cc:42:7f:0c:19:48:2d:96:71:b6:d2:
9f:f8:0f:b9:9e:c7:c9:6a:51:a3:e4:49:8d:b0:07:3c:74:62:
18:e2:ec:5e:6e:41:8b:d5:f1:a2:bd:2b:bd:c9:bf:cf:8e:ec:
a3:b8:0c:84:8b:3c:4c:fc:a0:ca:63:a1:ca:13:dd:c9:a3:8b:
c1:40:fe:1c:10:08:59:19:60:6e:87:63:7e:b3:43:e9:6c:d7:
d8:6d:4b:4b:ee:cc:e4:35:a1:1e:a0:b0:d6:69:54:5b:83:e6:
c0:71:34:9e:e6:97:52:5a:61:9e:81:50:f9:5b:48:ca:36:34:
4b:5a:b9:b5:eb:a0:b0:e7:c1:b9:ba:64:d0:30:51:c5:8a:fb:
c5:e6:4b:b2:d5:d7:4b:c6:63:0f:34:9f:56:d8:0d:2a:1a:ec:
3d:bb:2f:bf:7d:0a:46:26:3a:e0:8e:46:2b:45:c0:9c:5c:a6:
a9:0c:b0:4e:43:81:73:dd:17:5f:a3:5c:18:c5:a4:df:fd:dd:
ac:b4:7f:b9:fc:77:11:14:16:ce:21:85:30:dc:bd:78:79:41:
41:bc:06:38:4e:1d:4e:9b:65:07:81:73:30:c6:9b:7b:e9:89:
13:ac:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:31 2025 by rpki-client