Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa
File: VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa (raw, json)
Hash identifier: cehPDwufBxU4/kiVLRiGeuXvq0MlYpc57MWfPb+PZlg=
Subject key identifier: 54:82:00:E5:56:69:8B:34:C8:1B:15:B3:1F:2A:FF:64:D0:D5:DD:C0
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 01942827D1C134EC0845712F62741662B7E9
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa
Signing time: Thu 02 Jan 2025 17:54:45 +0000
ROA not before: Thu 02 Jan 2025 17:54:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39357
IP address blocks: 193.84.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:d1:c1:34:ec:08:45:71:2f:62:74:16:62:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Jan 2 17:54:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=548200e556698b34c81b15b31f2aff64d0d5ddc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:2f:a0:e4:90:5f:2c:da:ed:87:46:eb:00:
0a:05:99:fa:91:22:e7:b1:63:02:5f:00:43:0f:13:
e7:ac:f1:32:db:14:79:1b:16:c4:33:a4:24:45:92:
d9:98:79:b6:ad:45:ae:a7:9d:32:25:5b:78:00:39:
48:2f:a7:12:bd:7d:4d:d8:1c:67:a7:7f:22:c3:f5:
ee:4b:5d:81:32:ac:57:12:e1:08:ce:16:16:4d:7a:
64:40:c2:64:f8:e5:80:fe:99:27:2d:f5:1b:65:0b:
d3:50:63:0f:73:b1:ec:48:8f:51:fd:af:24:0b:5d:
a0:bf:7f:64:bb:2d:59:d3:41:49:a1:50:d9:09:92:
16:ed:8f:26:f8:7b:d7:c6:17:1c:58:28:d8:c2:72:
05:70:c5:4b:71:42:14:d3:36:e6:7e:6f:f4:73:4f:
1a:33:48:cc:d9:c4:80:75:f7:9f:a5:6d:69:64:97:
5a:36:91:3d:b4:b7:6b:31:48:23:d8:e8:6e:06:ca:
f8:87:06:80:5b:b0:6d:fc:b4:39:ab:87:cb:78:d2:
9b:70:8c:23:0f:2d:f1:7d:ac:d5:14:76:7c:a6:9a:
2a:e1:dd:03:e8:3a:e2:55:80:0d:09:19:c4:0e:b5:
bb:f6:18:4b:17:c2:89:86:9e:79:4d:89:ed:83:7b:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:82:00:E5:56:69:8B:34:C8:1B:15:B3:1F:2A:FF:64:D0:D5:DD:C0
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a3:a9:91:09:47:87:97:14:e5:02:fe:71:27:9e:f9:3c:d2:
d3:a7:b0:16:8c:11:d5:bb:51:a3:c5:0e:56:fe:e4:e2:08:ba:
fa:30:71:60:c8:96:f9:82:4e:11:82:90:58:55:bb:96:a1:a5:
5b:93:31:80:bb:ba:c0:e1:fc:1f:9f:e4:68:c2:6b:34:83:19:
42:50:aa:aa:f0:96:eb:ca:bb:3f:b5:3f:aa:71:e1:6b:59:8c:
98:4e:c5:8a:93:a2:b9:5a:1b:d5:4d:06:e7:0d:ba:0b:31:2c:
ee:b8:62:8e:69:0f:cc:2c:e9:50:18:69:c0:3a:b4:49:53:a6:
b3:1e:a7:76:91:a0:6d:19:71:7f:64:d6:8f:d4:21:ed:ac:5f:
a0:9b:48:35:66:e1:18:a7:ac:47:92:38:25:38:b2:93:96:c9:
ef:ef:1a:eb:3a:48:11:06:ca:94:8e:be:7a:b8:f8:d4:0d:ad:
57:3b:89:d5:d5:50:b0:7d:3a:97:5a:b3:64:ab:56:e2:d5:09:
f4:ea:23:d8:77:f5:eb:67:5c:b7:16:38:94:0f:51:e0:40:34:
e9:df:1e:db:46:63:08:db:44:b2:46:45:3a:e0:71:53:a4:c5:
ba:de:b3:a0:ba:0b:09:a0:d4:f6:50:b8:a8:b7:ce:ea:f1:13:
db:c0:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:42:43 2025 by rpki-client