Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/0wXhq5qyXfkxahUnRpc42r86Obg.roa
File: 0wXhq5qyXfkxahUnRpc42r86Obg.roa (raw, json)
Hash identifier: iJgORc5+XQ2Zcc4gwCZH8+de662Bp1/JSMzKqQ8qz0w=
Subject key identifier: D3:05:E1:AB:9A:B2:5D:F9:31:6A:15:27:46:97:38:DA:BF:3A:39:B8
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 0194228D550A8A0C0FD34F7F361FC2DFD4E7
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/0wXhq5qyXfkxahUnRpc42r86Obg.roa
Signing time: Wed 01 Jan 2025 15:47:55 +0000
ROA not before: Wed 01 Jan 2025 15:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29600
IP address blocks: 80.70.16.0/20 maxlen: 20
80.70.19.0/24 maxlen: 24
80.70.28.0/24 maxlen: 24
80.70.29.0/24 maxlen: 24
83.136.136.0/21 maxlen: 21
83.136.136.0/24 maxlen: 24
85.15.192.0/18 maxlen: 18
85.15.193.0/24 maxlen: 24
95.131.112.0/21 maxlen: 21
2a01:a880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:55:0a:8a:0c:0f:d3:4f:7f:36:1f:c2:df:d4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Jan 1 15:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d305e1ab9ab25df9316a1527469738dabf3a39b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:eb:50:6d:53:c5:da:dc:71:90:19:fa:00:
a3:34:49:82:f9:ee:ff:05:9e:ac:20:ec:74:44:3b:
1f:2f:65:d7:c8:41:4a:01:69:52:95:02:bc:43:d0:
83:b8:ec:90:fb:45:98:ce:8c:cf:0a:83:43:5c:56:
f4:60:c6:be:5f:d8:36:59:be:9d:0f:55:57:d7:fa:
b5:14:82:e4:91:e0:e8:1a:8e:28:85:c0:94:6c:e5:
27:53:fc:f1:dc:b1:00:ba:d4:f8:46:ef:df:7d:c6:
8f:0a:c1:bb:19:0e:df:50:3f:3d:fa:c7:41:6d:54:
ee:86:26:ba:01:9f:d1:f5:11:be:7c:d1:51:c7:d3:
af:1c:b1:69:0b:4b:0c:1f:38:d1:1f:de:ce:4e:77:
a2:96:ad:e3:96:b5:6d:ea:3d:b3:d1:c9:88:62:a9:
ec:78:02:0d:53:7c:fc:f7:bf:33:b2:d8:99:9b:bb:
a1:7e:bd:d6:1a:f2:3c:77:86:85:a0:82:08:08:87:
65:89:b9:ab:5c:50:66:b7:81:60:c2:f6:fc:ff:e6:
86:f9:26:b9:3e:75:30:8c:f2:40:17:38:55:c3:a9:
44:c5:49:e7:2e:25:02:85:b7:db:71:64:da:4d:df:
ab:24:30:1a:f5:48:24:b0:c0:97:6f:ba:db:e9:ee:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:05:E1:AB:9A:B2:5D:F9:31:6A:15:27:46:97:38:DA:BF:3A:39:B8
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/0wXhq5qyXfkxahUnRpc42r86Obg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.16.0/20
83.136.136.0/21
85.15.192.0/18
95.131.112.0/21
IPv6:
2a01:a880::/29
Signature Algorithm: sha256WithRSAEncryption
21:fa:71:7e:ec:b8:fa:cd:8f:7e:fc:00:74:01:fb:e5:0c:df:
0e:59:f5:50:d9:50:fd:2c:65:60:cb:af:76:f7:d2:c7:4d:cd:
c8:f0:b8:11:5d:32:d3:3b:c5:b9:82:e8:6d:c8:e7:49:b2:ed:
a8:16:cf:7f:f9:6e:24:41:6a:99:09:58:c4:1f:19:c1:70:f9:
1a:5a:60:02:ab:0b:6a:6f:44:1f:16:1e:29:12:0d:e8:34:24:
9c:14:8a:bc:27:03:c1:a5:29:3c:45:d1:e2:ff:50:a5:37:4f:
9a:62:f7:6f:5d:64:77:4e:cb:c4:85:55:f8:4d:76:6e:5c:ea:
5e:1f:d7:e6:90:a6:23:7f:88:f8:dc:11:d8:1f:c3:35:49:53:
e6:ea:52:7a:9a:43:eb:e2:9f:1f:3f:96:20:40:a7:ec:d6:db:
9f:ba:59:94:aa:7b:0a:49:55:a2:8d:2e:d6:14:4c:28:48:56:
13:6f:bc:22:e5:26:4e:01:74:9a:ba:7d:6b:54:19:a4:2e:66:
d3:28:33:73:ba:52:03:b8:71:b5:ac:c1:51:91:fb:9b:4c:35:
7f:dd:05:4d:e9:f7:f5:35:95:b7:cc:2b:53:43:41:eb:74:6e:
51:10:62:68:8d:4d:35:08:6a:c8:d4:d4:70:65:22:4b:c7:8a:
7f:a2:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:35:38 2025 by rpki-client