Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/zWctF490hB_hw_nmdFUFC_bPmMM.roa
File: zWctF490hB_hw_nmdFUFC_bPmMM.roa (raw, json)
Hash identifier: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=
Subject key identifier: CD:67:2D:17:8F:74:84:1F:E1:C3:F9:E6:74:55:05:0B:F6:CF:98:C3
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 019427B654DE72A86B0517F463C079FF3B9C
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/zWctF490hB_hw_nmdFUFC_bPmMM.roa
Signing time: Thu 02 Jan 2025 15:50:48 +0000
ROA not before: Thu 02 Jan 2025 15:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41901
IP address blocks: 194.34.12.0/24 maxlen: 24
194.169.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:54:de:72:a8:6b:05:17:f4:63:c0:79:ff:3b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Jan 2 15:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd672d178f74841fe1c3f9e67455050bf6cf98c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:1c:32:12:ee:50:06:f1:e5:81:1f:4f:2e:
80:94:08:d2:24:bb:56:21:67:b6:1d:9f:dd:94:94:
04:4c:68:12:da:7e:c5:d2:92:75:75:b7:0b:00:96:
38:41:09:42:b5:82:a9:97:5e:19:09:f7:3f:c3:20:
f9:b7:8e:00:b5:bc:ba:33:82:ab:48:1a:5d:0b:8f:
47:0d:a3:be:10:4e:1d:3d:e5:38:e5:05:d6:37:93:
e3:0f:80:8f:ea:7d:3d:e5:14:5b:7e:db:f2:79:f0:
2a:17:47:5f:4f:c4:e2:1d:48:23:79:a3:eb:8f:fa:
7b:5c:bc:57:67:62:3b:9b:9a:39:ec:67:f7:f7:70:
ed:46:a4:7d:91:c5:07:45:ac:85:ba:5f:3b:3d:18:
da:cb:df:95:d3:fe:c3:53:ec:e1:8a:bc:6f:15:58:
a2:f7:64:09:ce:38:42:40:94:42:13:0e:fe:d6:5d:
81:5a:d5:8f:70:3e:04:4b:4e:77:ef:47:f5:46:6a:
d3:cd:0e:fb:20:ae:9b:68:96:e8:89:e7:64:42:4b:
bb:20:0f:df:c7:da:9c:bc:7f:a4:55:e3:94:a3:3e:
2b:c9:d6:ff:81:4f:c3:76:57:97:be:a6:50:db:1d:
1c:08:71:04:06:b8:2d:e4:b6:61:91:25:bb:b5:30:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:2D:17:8F:74:84:1F:E1:C3:F9:E6:74:55:05:0B:F6:CF:98:C3
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/zWctF490hB_hw_nmdFUFC_bPmMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.12.0/24
194.169.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:96:b2:ec:35:8e:82:e7:0d:e1:92:93:36:0b:bf:09:9b:26:
fc:36:84:76:72:e9:9f:af:eb:8f:87:f8:fd:ab:5e:17:3c:8f:
4d:63:76:8d:4c:7b:14:5b:ad:75:d2:d9:32:5e:68:a9:43:30:
cd:2e:a5:2a:51:98:41:95:25:20:1a:69:c0:ab:ab:f6:86:28:
ce:ba:53:9c:b2:ae:1b:94:df:97:f3:ea:8a:72:ae:4b:f0:9b:
24:df:e2:03:ef:f3:e4:c3:7f:6b:66:82:81:83:0c:56:11:2f:
8c:0b:1f:c0:69:ca:4a:28:ec:d3:9a:a0:df:20:47:dd:ce:c4:
cf:95:fe:9e:97:9a:55:b2:44:ca:fc:3c:3e:d1:98:56:a2:db:
0b:0a:7d:4d:70:e3:ef:1f:6a:45:30:74:7a:b3:ee:7b:2c:39:
04:2f:fa:45:ad:d1:45:c2:1f:1c:8b:0b:a4:8a:69:10:37:e3:
ed:b1:70:b3:5f:73:0b:ae:07:25:98:d3:ad:b8:56:42:14:8b:
ad:e4:57:46:99:e6:20:94:e2:25:00:d1:d2:8a:0c:ab:4a:1b:
11:7c:f4:ac:ba:6f:c7:40:69:7a:29:38:e0:03:82:bf:45:3b:
99:ef:a5:06:f3:8f:bf:bb:c2:58:6c:61:03:58:52:ff:74:24:
7a:52:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:49:23 2025 by rpki-client