Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zMQFHIh_qGACvzwcqgoLlgK4R2M.roa
File: zMQFHIh_qGACvzwcqgoLlgK4R2M.roa (raw, json)
Hash identifier: ojIMRjpgvvA5DlL0pZpJ3duGski3zYIyMZh8cq/6rw0=
Subject key identifier: CC:C4:05:1C:88:7F:A8:60:02:BF:3C:1C:AA:0A:0B:96:02:B8:47:63
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B6C3B5A8FFC2DAA0FF8E860AF3F80576
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zMQFHIh_qGACvzwcqgoLlgK4R2M.roa
Signing time: Thu 30 Jan 2025 10:31:06 +0000
ROA not before: Thu 30 Jan 2025 10:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213527
IP address blocks: 5.83.136.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
5.83.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 08:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:c3:b5:a8:ff:c2:da:a0:ff:8e:86:0a:f3:f8:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 30 10:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccc4051c887fa86002bf3c1caa0a0b9602b84763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:51:d4:79:ab:1c:82:90:c6:1a:1f:f2:c7:
1c:50:34:d5:f1:a5:85:f9:85:7b:82:1a:c2:a9:72:
5b:8a:85:82:d9:24:52:9b:89:14:4b:82:af:cc:df:
5a:9b:2d:79:25:e6:41:4a:82:a7:03:b7:4b:73:88:
15:21:36:b7:24:5a:cb:21:53:7b:69:2c:8d:ec:da:
9b:99:9c:e0:ca:50:ba:a7:a6:83:5a:6a:af:1a:f7:
2c:58:db:89:c8:25:6a:a5:2a:11:6e:36:5f:5d:f1:
a3:78:7b:4d:5f:6f:46:03:3a:78:a0:2e:4e:22:0b:
52:0f:56:a9:8b:a4:d1:11:3b:e9:98:2c:f5:f0:d9:
b0:32:33:16:81:48:16:ec:7d:94:fe:de:5f:5c:2d:
64:f1:0f:0c:01:bb:64:9a:32:65:5b:e1:24:8f:38:
9b:5d:0e:de:c7:d4:45:02:75:41:6b:c5:95:31:ae:
0f:ad:eb:87:f5:22:0c:8c:6e:4d:93:67:72:d5:41:
70:85:a6:07:19:c1:47:e8:44:6b:2b:86:43:3e:a6:
45:33:ff:67:d7:dd:23:d2:a4:1e:50:5e:24:25:75:
a3:4a:cc:42:4c:c3:4d:89:cf:d5:13:24:87:e9:f5:
38:ce:78:00:17:0c:f0:ed:47:44:f0:21:9d:4e:e6:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C4:05:1C:88:7F:A8:60:02:BF:3C:1C:AA:0A:0B:96:02:B8:47:63
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zMQFHIh_qGACvzwcqgoLlgK4R2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.136.0/24
5.83.139.0/24
5.83.159.0/24
Signature Algorithm: sha256WithRSAEncryption
98:71:79:45:93:46:29:8c:2b:ad:10:6f:72:b7:f6:ae:85:fb:
60:6a:1b:fb:38:84:41:4b:77:da:05:21:e7:e0:a3:63:ab:ca:
1a:c3:65:1c:34:a0:b9:53:1d:df:03:bd:7d:fc:d0:6b:56:77:
2a:3f:da:40:87:f8:dd:fa:51:6a:6c:d6:7d:60:3c:eb:60:a4:
2d:ea:a1:1d:b6:61:a5:41:b3:61:65:5f:89:ec:f8:46:98:5d:
b9:37:54:e5:ce:77:3c:13:6f:fb:f0:80:2f:00:44:4e:6d:94:
8c:b4:ab:b6:14:b8:4f:ba:cd:12:94:b8:43:c1:5a:0e:80:29:
77:79:bf:1c:21:0f:ad:47:f6:11:7e:de:08:85:83:73:d3:9f:
ef:b2:4c:e3:39:77:1e:d8:b4:aa:85:a0:ee:0b:a1:52:c6:78:
7c:98:ec:fa:62:09:5d:4f:80:68:95:66:36:b4:71:29:85:93:
b9:7e:1b:25:c6:18:5f:17:f3:51:42:e8:62:b8:43:bc:0e:07:
66:c5:ee:69:96:fb:ff:70:7c:67:30:dd:89:8e:bb:69:f2:5f:
7f:04:e8:c0:c0:b7:67:33:9b:23:e7:e3:1f:18:01:e3:91:e8:
7f:38:0c:a3:dd:d2:be:f8:75:df:00:ed:67:6e:ce:dd:61:85:
a3:70:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 16:07:38 2025 by rpki-client