Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/pEFxP8vI0PKe_stqXUAdFiorUXQ.roa
File: pEFxP8vI0PKe_stqXUAdFiorUXQ.roa (raw, json)
Hash identifier: XJ7DBwkkSSwgly2JK+83gWkWa+T8sNrECn3yoE80Gos=
Subject key identifier: A4:41:71:3F:CB:C8:D0:F2:9E:FE:CB:6A:5D:40:1D:16:2A:2B:51:74
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01956AFB2AF8F98C7DA22AE840093CD10319
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/pEFxP8vI0PKe_stqXUAdFiorUXQ.roa
Signing time: Thu 06 Mar 2025 10:23:20 +0000
ROA not before: Thu 06 Mar 2025 10:23:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:fb:2a:f8:f9:8c:7d:a2:2a:e8:40:09:3c:d1:03:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Mar 6 10:23:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a441713fcbc8d0f29efecb6a5d401d162a2b5174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:e2:6c:a1:ab:92:47:9f:2d:85:c9:6e:0e:
84:83:62:25:c2:18:87:3e:b7:6b:5f:41:5c:6b:3b:
90:ba:f1:da:4e:fe:5a:a2:dc:3b:fe:d4:de:aa:cd:
a7:07:57:88:b1:31:a3:72:92:33:be:e9:3c:32:0d:
41:b2:42:7d:7b:9d:a9:b1:77:17:15:0c:fe:e9:b6:
29:c2:37:9d:5b:6b:88:5a:ca:5e:ab:4e:c4:84:ce:
39:f5:d2:bb:ba:20:16:40:44:88:40:02:89:87:77:
ca:59:d1:60:b7:1d:e3:ad:cd:7c:77:55:83:b9:39:
1c:b7:1d:6e:d1:8a:f5:32:35:23:d9:d7:53:fc:37:
ee:f8:b7:ee:82:b7:44:25:51:42:23:7c:4d:08:98:
e5:ea:67:fc:3c:52:c0:df:43:7e:8f:ef:b3:2b:dc:
a4:c1:df:aa:84:67:bc:44:fb:34:31:6c:22:de:61:
da:d8:e8:68:ea:97:39:6a:ff:5d:80:00:2a:c1:8e:
e5:e7:e5:cf:1a:a1:4d:03:d4:8d:4c:e6:72:96:90:
17:ed:1a:48:be:49:22:01:21:51:e4:2f:74:b1:99:
9f:56:f6:30:08:41:c6:24:7b:06:02:62:76:76:9f:
a2:26:50:7a:51:af:cc:04:d1:7d:6a:11:88:28:0b:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:41:71:3F:CB:C8:D0:F2:9E:FE:CB:6A:5D:40:1D:16:2A:2B:51:74
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/pEFxP8vI0PKe_stqXUAdFiorUXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.206.0/23
Signature Algorithm: sha256WithRSAEncryption
06:46:d4:48:bf:4b:3b:9e:70:a8:64:9e:49:85:5a:7d:57:a8:
96:e3:63:61:79:19:2f:d3:33:f4:5b:7e:79:ab:c3:cc:52:7d:
49:ef:ba:60:9b:b9:db:b8:6e:3d:8c:e4:30:63:53:e0:bb:65:
d0:68:e2:0d:1b:ce:25:96:40:ba:4e:8d:8e:55:ce:47:25:34:
14:b6:c6:60:9a:3a:c1:c7:8a:34:94:9c:9d:47:0d:e0:88:8b:
8c:6f:f2:77:8a:c3:8c:b5:e6:32:73:06:6e:8c:0b:df:46:07:
e6:5c:bb:68:54:64:80:e2:1e:8a:97:78:04:35:17:b4:93:44:
91:1b:3b:d3:1f:43:41:49:4e:ec:9f:9f:a1:8a:03:3d:f0:0a:
fc:cc:9e:7b:84:43:98:be:96:1f:d6:9a:ed:41:b6:b6:29:e7:
c0:3e:d1:45:1e:29:12:22:d8:94:4d:5d:ec:b6:a2:91:72:75:
93:ef:8a:d5:0c:ca:31:0f:36:53:3f:18:1d:ac:f9:b0:8e:0d:
13:94:23:8e:c1:dd:45:63:15:1e:91:59:6a:3a:d5:7d:5c:f3:
a9:64:81:01:e7:92:4f:11:2f:8b:f9:93:df:96:17:9f:4b:b2:
54:8e:27:02:ec:cc:7c:86:af:0e:0d:0d:87:07:3f:fe:e1:be:
ec:f9:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:11 2025 by rpki-client