Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa
File: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (raw, json)
Hash identifier: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=
Subject key identifier: 65:C4:91:7F:41:F1:9D:61:D0:23:0E:4C:20:07:FF:58:BF:68:63:A0
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019425209DD397BBE9D25157E3B5820A50CB
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa
Signing time: Thu 02 Jan 2025 03:48:02 +0000
ROA not before: Thu 02 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29093
IP address blocks: 193.143.128.0/23 maxlen: 24
195.234.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:9d:d3:97:bb:e9:d2:51:57:e3:b5:82:0a:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Jan 2 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65c4917f41f19d61d0230e4c2007ff58bf6863a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:f4:a4:c9:c3:d8:01:a8:32:19:8d:ab:a2:
8f:e1:3c:1e:65:58:38:b5:5e:b3:ae:14:32:24:a1:
a9:76:78:3e:e5:03:f0:51:a9:7c:de:14:c5:e3:55:
ca:ce:07:61:5f:a5:05:a8:d8:42:1e:4c:10:5f:aa:
4b:80:41:37:31:2a:3d:fd:ba:bd:64:e7:53:63:a4:
4f:1a:82:e2:b4:00:04:66:23:09:7b:a4:7a:e9:b1:
55:74:0c:a9:d9:02:72:ae:34:2e:5c:c4:c6:34:62:
8f:2b:84:22:9c:6f:4a:2e:02:2f:1f:2d:43:a8:25:
16:5f:a9:a0:e7:bc:c7:15:3d:35:5a:25:37:89:75:
33:0d:61:d4:b0:84:eb:0a:35:d3:6f:34:a7:cb:e6:
77:0e:25:7b:28:ff:b4:32:25:a1:1c:dc:6e:79:06:
a5:4c:ff:51:d8:4f:bd:94:51:48:c5:db:bb:01:ce:
34:80:06:b7:b5:94:ff:1f:dd:1b:cc:61:cb:16:b4:
59:3a:f6:37:ea:82:f0:25:ad:52:07:7e:4d:ae:4c:
04:3b:99:8e:76:16:8e:cf:67:f3:13:62:b0:72:0f:
e6:7d:2c:65:c3:c9:80:a7:e6:57:23:fa:6f:11:04:
55:8f:3a:98:31:d6:90:ad:3e:c5:dc:1a:62:54:da:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C4:91:7F:41:F1:9D:61:D0:23:0E:4C:20:07:FF:58:BF:68:63:A0
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.128.0/23
195.234.135.0/24
Signature Algorithm: sha256WithRSAEncryption
90:1b:97:97:51:32:9e:c7:0a:15:10:aa:f0:e9:30:04:0d:1f:
1b:b8:24:1a:bd:fb:ac:fb:98:c8:18:28:47:d9:17:ee:b4:1f:
2e:22:3f:6c:a6:ea:fe:49:e7:b7:d1:27:1e:70:7f:8a:82:2a:
58:0c:c0:2d:51:cc:82:d8:ba:bf:26:fe:5c:d1:82:23:15:3c:
50:2a:e5:cc:4a:39:3e:62:36:54:51:de:2d:0b:bf:3c:29:18:
eb:fe:7e:f9:98:a2:71:3e:d6:3d:a8:22:7b:ef:ec:ab:40:67:
73:47:d6:a0:42:f1:d6:ba:16:4d:c6:b9:bc:94:df:da:4a:c8:
22:e4:6a:0c:7a:13:66:c8:99:fb:0a:4e:c6:34:aa:b5:7c:0d:
ed:b6:ed:3f:13:a6:7b:7e:25:5c:dd:99:28:37:5c:b3:89:0e:
da:77:f6:06:9f:08:90:fb:56:47:c6:a1:02:ce:18:9b:1b:08:
34:4e:96:9f:34:5d:12:25:61:92:3a:7b:3b:8c:8f:29:06:36:
07:fc:c7:33:33:4c:af:3f:ac:ab:49:f7:21:14:e0:11:23:62:
fc:ed:90:c9:07:8d:bd:18:22:32:62:f7:87:e3:ba:0b:03:10:
3d:61:ad:93:d4:ac:85:81:5b:a0:a8:13:5e:cc:42:21:ff:0b:
37:1d:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:40:14 2025 by rpki-client