Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa
File: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (raw, json)
Hash identifier: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=
Subject key identifier: D5:91:51:0A:3A:0B:8B:F9:7F:56:59:C3:6F:CA:3C:B4:95:88:6B:61
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 019426D9CDDED78B0101FA01013E51E33693
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48937
IP address blocks: 95.140.160.0/22 maxlen: 22
95.140.160.0/24 maxlen: 24
95.140.161.0/24 maxlen: 24
95.140.162.0/24 maxlen: 24
95.140.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cd:de:d7:8b:01:01:fa:01:01:3e:51:e3:36:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d591510a3a0b8bf97f5659c36fca3cb495886b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:da:13:66:4d:a8:db:50:f0:f7:3a:21:65:
4b:fa:0a:8c:11:a3:5b:a4:52:1c:28:14:52:6b:df:
0d:26:59:be:bb:54:05:07:26:4c:48:aa:20:05:b2:
39:f3:48:31:bc:b1:b9:d1:13:0b:a5:08:24:36:2e:
59:01:6d:2d:73:6d:01:98:de:66:85:3b:3a:c3:03:
20:0e:e1:b2:b6:a1:e6:ba:5b:0b:57:6e:d4:77:dc:
e3:41:95:5c:9e:2c:eb:53:8f:28:fa:48:ca:82:01:
bb:10:a2:8c:03:45:69:65:a7:9c:a9:1d:cf:aa:e9:
66:78:da:f5:20:1e:38:6b:98:70:66:b4:76:c8:92:
31:11:1d:6d:e3:36:15:4d:32:3d:0e:e2:a5:94:64:
86:c8:c6:f0:1c:3e:12:9a:e4:f4:b7:fa:eb:cb:ea:
f1:b3:72:5e:37:11:57:7a:9e:f0:5b:ac:03:d9:45:
4b:b7:f0:6f:70:6a:23:a1:63:e5:01:52:7e:fc:9f:
91:fb:39:e7:0e:8e:01:47:10:00:34:15:3d:7e:5a:
a6:8a:33:ca:21:7a:16:f7:4f:6f:c9:e9:9d:67:0a:
08:d2:d0:c9:96:3d:aa:20:a3:bb:b0:57:9c:cc:cc:
51:89:18:01:89:8e:07:0b:ae:41:7e:10:63:86:60:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:91:51:0A:3A:0B:8B:F9:7F:56:59:C3:6F:CA:3C:B4:95:88:6B:61
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b4:26:35:b3:ea:69:1c:0e:a6:db:c5:27:59:7c:a4:1c:74:
f7:a8:77:8b:99:88:b2:9e:1e:77:05:75:10:d4:82:e8:e8:6b:
2d:51:bb:47:a6:79:6f:30:67:ca:7e:92:c0:9a:a6:84:9e:e6:
28:20:44:54:ad:71:ca:53:c9:27:5e:e3:e4:44:f3:2d:3b:57:
14:7d:93:e4:70:4b:ce:de:2a:30:f0:fd:44:a1:0f:a8:03:36:
b9:7c:9a:1a:48:58:3f:ed:48:c4:5c:0e:b3:a4:01:e4:45:d8:
e5:15:f5:e5:6c:ed:23:62:80:bf:84:7e:8d:3e:2b:d7:9c:7d:
ca:a1:4d:ac:a2:64:f4:1b:8f:ef:8c:8d:63:8d:5c:33:fa:bc:
12:48:03:bb:c2:91:3e:66:12:97:67:8b:95:b5:56:0c:da:24:
94:02:54:03:97:ae:05:70:33:fe:0e:26:4e:e5:ed:e1:9f:9c:
02:1b:b9:41:04:22:b4:5e:01:55:b9:c4:09:6e:4e:dc:12:1f:
a3:a8:3a:23:90:d8:c0:71:ef:08:4c:a8:1c:51:98:0a:fd:d9:
62:63:95:8b:65:be:6d:c3:bb:5f:68:0f:04:75:a8:20:ff:bd:
05:fb:63:82:a9:78:d9:61:21:0f:24:76:c7:aa:6e:32:4e:f4:
79:b7:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:02 2025 by rpki-client