Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/AzqwEnHg1SyZac2xM8YrOrTBmKs.roa
File: AzqwEnHg1SyZac2xM8YrOrTBmKs.roa (raw, json)
Hash identifier: bWS77EdYPn213uSVuq+Rq1Onu0IbUZI9gFRwi3wlTog=
Subject key identifier: 03:3A:B0:12:71:E0:D5:2C:99:69:CD:B1:33:C6:2B:3A:B4:C1:98:AB
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 01957293BDA24D90B843C9F5197E4573237A
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/AzqwEnHg1SyZac2xM8YrOrTBmKs.roa
Signing time: Fri 07 Mar 2025 21:47:19 +0000
ROA not before: Fri 07 Mar 2025 21:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 80.93.220.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
217.195.197.0/24 maxlen: 24
2a05:3040::/29 maxlen: 29
2a05:3040::/32 maxlen: 32
2a05:3041::/32 maxlen: 32
2a05:3042::/32 maxlen: 32
2a05:3043::/32 maxlen: 32
2a05:3044::/32 maxlen: 32
2a05:3045::/32 maxlen: 32
2a05:3046::/32 maxlen: 32
2a05:3047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:72:93:bd:a2:4d:90:b8:43:c9:f5:19:7e:45:73:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Mar 7 21:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=033ab01271e0d52c9969cdb133c62b3ab4c198ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:ff:48:30:6f:d4:4b:9c:15:70:93:d5:60:
a8:66:c9:c9:23:1c:a5:d5:53:8c:f7:b3:48:db:96:
3b:bb:81:e5:c7:f2:89:d2:14:bb:0d:74:6d:6b:37:
4f:cd:2a:3c:3b:27:ff:e3:e5:a1:12:b9:a6:8b:94:
01:06:b6:c6:dc:aa:87:05:6b:5a:c5:e1:fc:b8:5f:
b3:c8:18:a7:0a:8f:5f:0d:80:c4:48:01:72:0a:7e:
4e:a3:12:6f:72:20:f9:13:e1:14:1a:28:d5:06:94:
13:09:fe:57:77:2f:48:04:eb:0e:6f:8a:dd:6c:d3:
a7:71:6e:c3:a7:d4:5e:01:8a:f4:4b:32:c7:51:5e:
78:be:ba:f9:e6:6e:61:90:e8:ba:27:5c:0f:00:83:
b9:9f:3d:7e:d3:10:4c:0a:ae:07:10:fe:83:c6:55:
38:3d:22:44:0e:b1:08:49:c1:f2:2b:7f:e5:87:f9:
92:7a:17:b4:e8:ee:76:43:dd:1e:8f:c1:ea:37:4e:
82:6d:67:75:4a:e5:ab:59:22:0b:de:f2:31:68:2e:
ae:2d:cd:7f:d6:81:d6:99:0e:88:5b:9a:cf:2a:f9:
44:40:1e:f8:3c:68:66:4c:9e:22:0c:c2:17:19:37:
a0:c5:c3:1c:c6:08:f9:c7:51:be:dc:d4:1d:44:89:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:B0:12:71:E0:D5:2C:99:69:CD:B1:33:C6:2B:3A:B4:C1:98:AB
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/AzqwEnHg1SyZac2xM8YrOrTBmKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
IPv6:
2a05:3040::/29
Signature Algorithm: sha256WithRSAEncryption
67:58:d5:b2:b3:65:d6:82:35:90:93:a3:d0:34:f8:fd:9b:8c:
c6:fc:20:1f:b8:7a:9b:6e:61:cb:24:0d:7a:bb:15:f1:17:1a:
11:2b:81:a4:57:33:a6:6c:72:3d:66:ea:7d:dd:62:74:02:f3:
6e:0c:bc:df:b9:fb:46:0b:ce:33:76:6a:01:ad:82:02:d8:d1:
28:67:80:5d:c5:7f:27:d5:07:95:57:ae:46:07:6f:e0:f1:56:
3b:2f:ff:8a:9d:c3:8b:48:f2:96:55:b4:24:89:4a:98:86:7d:
fd:23:a8:ff:13:bb:7c:a5:b6:7f:f9:3f:5b:cf:84:4c:ec:58:
2e:d5:78:94:4b:9c:e3:30:f8:2a:f8:ac:da:f1:45:6c:a4:2f:
a1:4a:c6:1f:8b:3f:a4:2e:32:16:42:b1:c6:17:ca:2a:4d:0d:
1e:73:60:dc:0e:27:54:d8:2a:e7:90:5a:ee:95:6b:47:23:61:
21:f2:d4:f6:ab:5f:06:a5:ce:d8:7d:6f:83:07:df:08:ad:4f:
22:98:a9:f8:7f:86:18:76:2f:29:99:3c:60:f0:3d:05:c9:be:
08:22:c5:2b:46:68:81:a4:23:c9:43:55:a0:23:28:f1:89:e3:
cd:8b:8c:8f:3b:ec:15:d0:d1:73:c5:a1:33:f3:f9:e5:8f:d8:
48:65:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:28 2025 by rpki-client