Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa
File: 9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa (raw, json)
Hash identifier: e3MsAliQl7R+w6WCs9Je3nF/3YOrMW2JU+QDq2FQ+FM=
Subject key identifier: F5:96:65:12:82:7A:0C:EC:05:0C:82:5B:7F:30:61:B5:7B:9C:48:2A
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 0195D7A193484190E228D50797E13B7B4ABF
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa
Signing time: Thu 27 Mar 2025 12:44:05 +0000
ROA not before: Thu 27 Mar 2025 12:44:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20640
IP address blocks: 217.173.128.0/20 maxlen: 24
2001:4b88::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:a1:93:48:41:90:e2:28:d5:07:97:e1:3b:7b:4a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Mar 27 12:44:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5966512827a0cec050c825b7f3061b57b9c482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:c9:2a:65:7a:2b:65:90:53:80:f6:35:af:
a0:08:12:a3:4a:c3:cf:30:58:fd:0a:3a:6d:f6:c8:
86:27:d6:52:27:e1:0c:7d:42:f2:c4:bd:7d:d2:21:
3d:e6:2e:2a:7d:af:82:4c:0a:c5:70:68:09:49:ad:
35:7d:da:9b:ca:83:7f:f9:32:a5:f7:8d:e8:a4:58:
23:3a:59:f1:88:a6:6e:1d:a4:a5:8d:9d:2e:ec:e1:
20:9d:cf:6a:81:90:5c:88:62:ed:2d:73:8e:9b:b0:
1b:d8:6a:60:d7:9e:d9:68:31:c1:41:50:0f:75:df:
b0:4f:2d:ba:62:07:0c:cf:08:b0:94:bb:50:85:4b:
8e:5b:fd:c7:8d:72:e3:9f:b9:75:d9:d8:93:e5:c8:
00:2e:92:3e:73:21:22:26:ae:f2:0a:a3:37:98:de:
d0:2c:db:a2:2b:07:f8:b8:28:f7:4f:1b:45:b2:a6:
7f:48:9f:a2:7e:9e:8a:01:c6:30:ba:58:ed:80:5c:
06:9e:e1:cc:a2:ea:d6:6a:78:c8:3e:20:d1:91:51:
09:01:ff:45:2c:3e:a4:c1:e6:9d:be:ca:6e:52:c6:
5e:51:f3:cf:99:1d:8a:81:8d:bc:d9:0d:56:95:b6:
ec:d5:1d:81:2c:9e:75:6f:3d:13:e6:0c:8f:e2:0b:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:65:12:82:7A:0C:EC:05:0C:82:5B:7F:30:61:B5:7B:9C:48:2A
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.128.0/20
IPv6:
2001:4b88::/32
Signature Algorithm: sha256WithRSAEncryption
84:a2:b5:96:42:69:47:b4:94:19:33:ab:ef:c9:c0:b9:90:b8:
a4:a6:4b:04:28:0f:26:d2:b3:c3:19:0a:df:a3:70:29:18:1f:
d1:6c:ef:13:9a:7e:22:97:5a:14:5e:6e:6b:8f:9c:fa:84:08:
aa:43:c2:82:1a:49:41:fe:78:35:d1:da:99:c3:ad:9d:15:d1:
4d:01:00:2b:cd:95:e0:07:3e:7d:9a:75:29:f7:2b:b1:fe:e8:
9a:d7:12:81:2c:db:4d:7c:08:4e:c9:9d:4c:fd:b3:7b:dd:a3:
49:33:ca:cb:f6:3a:f0:39:97:2c:85:4c:95:1d:bb:28:20:1e:
d2:ba:7d:cc:b6:ed:88:a0:d6:9c:a7:4c:bb:f4:d1:b7:bd:7a:
6d:03:b1:95:b2:c2:ca:1e:c5:af:5f:77:7b:e3:76:6a:99:a8:
06:76:5a:1a:a8:1e:ae:ae:ff:9b:b0:c2:df:f7:4e:9e:7d:b6:
f0:55:79:4c:33:08:d0:48:82:6d:89:a0:3b:f8:70:2d:ab:9c:
8c:8b:02:62:49:a6:cc:ae:95:5d:fc:7b:0c:6e:5d:d7:fc:5b:
12:db:64:cd:29:9e:a1:2f:17:f6:0c:ea:63:ab:eb:fc:0b:21:
6e:5f:2b:71:95:1b:44:96:97:59:25:ad:e3:98:ff:38:0a:a5:
b9:56:0b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:21 2025 by rpki-client