Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/A8xcoz0CxVsQV59nDwDYQFIr0lo.roa
File: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (raw, json)
Hash identifier: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=
Subject key identifier: 03:CC:5C:A3:3D:02:C5:5B:10:57:9F:67:0F:00:D8:40:52:2B:D2:5A
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 019423D7E2D7953588C7D1F3831E9518AB01
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/A8xcoz0CxVsQV59nDwDYQFIr0lo.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16039
IP address blocks: 31.177.48.0/21 maxlen: 21
31.177.48.0/24 maxlen: 24
31.177.49.0/24 maxlen: 24
31.177.50.0/24 maxlen: 24
31.177.51.0/24 maxlen: 24
31.177.52.0/24 maxlen: 24
31.177.53.0/24 maxlen: 24
31.177.54.0/24 maxlen: 24
31.177.55.0/24 maxlen: 24
82.199.32.0/20 maxlen: 24
82.199.32.0/24 maxlen: 24
82.199.37.0/24 maxlen: 24
82.199.38.0/24 maxlen: 24
82.199.39.0/24 maxlen: 24
82.199.40.0/24 maxlen: 24
82.199.41.0/24 maxlen: 24
82.199.43.0/24 maxlen: 24
82.199.44.0/24 maxlen: 24
82.199.45.0/24 maxlen: 24
82.199.47.0/24 maxlen: 24
82.199.48.0/20 maxlen: 24
82.199.48.0/24 maxlen: 24
82.199.49.0/24 maxlen: 24
82.199.50.0/24 maxlen: 24
82.199.51.0/24 maxlen: 24
82.199.52.0/24 maxlen: 24
82.199.53.0/24 maxlen: 24
82.199.54.0/24 maxlen: 24
82.199.55.0/24 maxlen: 24
82.199.56.0/24 maxlen: 24
82.199.57.0/24 maxlen: 24
82.199.58.0/24 maxlen: 24
82.199.59.0/24 maxlen: 24
82.199.60.0/24 maxlen: 24
82.199.61.0/24 maxlen: 24
82.199.63.0/24 maxlen: 24
193.42.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e2:d7:95:35:88:c7:d1:f3:83:1e:95:18:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03cc5ca33d02c55b10579f670f00d840522bd25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:68:be:7a:91:4d:fd:a2:a0:ca:d8:d9:37:
3a:e8:3e:d0:81:6c:ae:a8:bf:0e:b8:5e:9c:bd:7f:
4b:d0:5f:ab:2c:8d:77:7b:23:9b:2e:8f:4f:ce:16:
ac:31:2d:92:a0:03:04:7c:9d:63:56:42:dc:23:25:
8c:90:d7:01:4b:1e:67:73:c4:01:df:57:40:85:bd:
5d:7c:b7:b7:ba:7d:f3:6f:01:5d:71:91:f0:b6:b1:
6e:67:a0:ca:ad:26:91:65:5a:62:bc:a0:64:54:6d:
ad:64:d3:e0:0f:1b:50:29:ff:73:ba:f5:b1:92:f1:
d8:a2:9a:1c:ba:09:1c:14:28:fc:7b:dc:14:1b:51:
93:e5:88:34:e3:64:32:3d:db:69:0d:ea:ae:1a:db:
c4:c6:61:06:1d:c5:b6:1b:2f:6f:b5:45:30:4e:ed:
47:a0:b9:cb:a2:e4:92:59:95:ea:5c:d8:df:59:b4:
d8:0f:68:cb:08:12:69:31:21:90:58:9a:41:a0:22:
0f:0b:48:8c:c6:02:4a:b6:fe:a5:39:e3:f6:b3:f6:
17:09:00:d6:52:2e:d1:23:8d:a7:43:b0:08:c3:19:
55:eb:37:2f:98:e5:0e:ad:8f:ba:13:d9:7a:67:e9:
3d:2f:a2:30:b3:00:da:2d:45:d2:c2:30:a8:44:06:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:5C:A3:3D:02:C5:5B:10:57:9F:67:0F:00:D8:40:52:2B:D2:5A
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/A8xcoz0CxVsQV59nDwDYQFIr0lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.48.0/21
82.199.32.0/19
193.42.28.0/22
Signature Algorithm: sha256WithRSAEncryption
28:0a:b8:44:7a:29:d2:09:8f:c7:1c:11:da:97:99:32:17:76:
0b:1a:52:ba:c5:6b:67:5d:a2:28:3a:16:82:ad:51:8e:70:f5:
6b:ca:e5:32:b7:00:38:99:54:b5:e7:19:7b:e6:df:2e:9b:84:
a8:b3:f4:24:2d:b2:6f:a0:a1:c8:43:07:4f:1c:67:cb:38:40:
6c:fd:71:7d:57:8d:a5:f4:f6:7c:02:eb:a4:89:29:e8:7f:91:
93:26:70:10:8a:9c:f3:00:46:5d:98:9f:68:45:1a:54:a0:58:
db:4a:b7:5c:8c:8e:c9:ed:b9:cc:ac:25:e3:01:57:5e:7c:bc:
05:2b:d1:9e:9d:8e:65:09:65:9d:41:be:d4:9a:49:b0:d1:c2:
fc:70:1d:04:0a:84:dd:e3:bd:13:8a:8e:57:15:96:e0:d4:7f:
28:85:49:12:38:da:a3:80:d6:34:5f:cb:38:c9:12:d6:fb:47:
66:19:d3:1d:77:0e:eb:75:1d:83:c0:27:02:f0:b4:fb:ca:1b:
91:8b:ab:d9:d3:f4:50:6d:a9:87:1c:2a:30:33:fa:98:fe:e6:
c8:41:c1:04:d8:6a:f2:64:70:eb:93:6b:63:56:4b:03:79:a6:
be:af:08:4d:df:b4:4d:89:7d:02:0b:bc:52:5e:8a:5a:4e:ec:
c9:e7:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:36 2025 by rpki-client