Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_KZgYDE7SLVfGGE5Y6Cp49Y0-CI.roa
File: _KZgYDE7SLVfGGE5Y6Cp49Y0-CI.roa (raw, json)
Hash identifier: +Q1CofoM7se8biShwrA5H16Zza0c+lLUG7Bfgan9by8=
Subject key identifier: FC:A6:60:60:31:3B:48:B5:5F:18:61:39:63:A0:A9:E3:D6:34:F8:22
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067CD9F2872CC329549B70920AECC9E
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_KZgYDE7SLVfGGE5Y6Cp49Y0-CI.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50734
IP address blocks: 194.209.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cd:9f:28:72:cc:32:95:49:b7:09:20:ae:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fca66060313b48b55f18613963a0a9e3d634f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:18:46:21:6f:ad:c2:34:cf:55:38:03:2f:
65:d6:93:3f:d4:4c:8c:7c:4a:4d:e3:d3:42:e1:b8:
1c:70:9f:ba:4c:22:f3:7f:83:f2:8b:c1:f9:63:8a:
79:38:90:d5:08:03:70:e0:70:0d:db:b0:6b:98:fa:
b5:e2:2a:bc:76:38:fd:53:d4:f2:0e:87:f2:43:77:
b9:de:f7:c3:ad:19:a9:33:37:ac:98:78:0d:e2:11:
ce:ee:9d:05:62:d6:10:e1:95:10:73:1b:3d:2d:b4:
cb:3d:c9:35:93:47:e1:81:80:36:f9:ca:34:b2:ab:
39:7d:76:52:e2:7e:63:80:e3:13:c0:91:5b:fa:26:
99:65:2f:ba:df:a6:60:af:b6:c1:82:80:9d:53:fd:
57:f6:25:2f:14:12:62:77:13:40:9b:7b:d4:e7:3d:
e9:00:df:34:b0:5e:ae:1b:7d:93:ac:02:dc:63:72:
de:9d:53:88:30:1f:83:15:f1:a7:4d:38:e7:42:62:
a6:e8:69:2b:4a:35:d0:26:98:5a:55:2c:b8:6f:07:
c4:3c:d0:6b:71:a2:41:e5:df:6c:0a:4c:86:01:08:
8b:82:56:b2:3f:70:9b:40:ef:94:2b:f0:d6:f9:19:
ca:89:82:89:f9:eb:ba:10:d9:4f:e5:c1:e3:65:7a:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:60:60:31:3B:48:B5:5F:18:61:39:63:A0:A9:E3:D6:34:F8:22
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/_KZgYDE7SLVfGGE5Y6Cp49Y0-CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.78.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b2:4a:75:f3:75:20:90:8e:e2:17:1d:05:6d:cf:e8:50:5b:
a6:33:c8:41:b2:d8:49:1b:11:5c:66:03:ce:8b:e4:9c:15:68:
e8:b5:a8:82:19:25:8b:84:e2:ae:f4:7a:2d:42:da:1c:e6:11:
1e:0f:b0:a3:16:c0:c1:7b:6e:d6:59:48:aa:b8:d2:5a:42:94:
f1:ee:06:17:b6:0b:9c:9f:b0:a7:07:7b:8a:97:e3:3b:0e:e7:
ee:b8:87:ad:bd:f8:6b:12:ea:b0:73:79:3e:7b:c6:0f:8f:df:
bb:e5:38:23:cb:17:38:23:53:4b:2d:81:6b:05:cd:0f:cd:6d:
3a:eb:af:07:b5:e7:6d:a7:f2:f2:fe:ee:b6:a3:40:a6:5c:ed:
51:10:f9:e9:45:8d:bc:81:f9:9c:0a:88:0e:2a:ca:9f:46:66:
71:3c:50:0e:b7:aa:c2:5b:6d:21:1f:43:d1:6f:ce:f4:f2:ea:
e8:a6:25:83:ef:e1:31:aa:9d:ff:ad:e1:54:ea:fb:bc:aa:38:
47:16:d0:c6:0d:54:df:0c:fd:30:e9:75:9c:12:ca:49:43:45:
cc:8a:66:74:d0:d3:ae:25:42:a9:14:45:2d:60:58:0c:f8:41:
94:7f:f4:84:22:90:0f:92:f6:4c:80:58:31:0f:d2:af:51:a8:
0a:9d:dd:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ82fKHLMMpVJtwkgrsyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2E2NjA2MDMxM2I0OGI1NWYxODYxMzk2M2EwYTllM2Q2MzRmODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmoYRiFvrcI0z1U4Ay9l1pM/1EyM
fEpN49NC4bgccJ+6TCLzf4Pyi8H5Y4p5OJDVCANw4HAN27BrmPq14iq8djj9U9Ty
DofyQ3e53vfDrRmpMzesmHgN4hHO7p0FYtYQ4ZUQcxs9LbTLPck1k0fhgYA2+co0
sqs5fXZS4n5jgOMTwJFb+iaZZS+636Zgr7bBgoCdU/1X9iUvFBJidxNAm3vU5z3p
AN80sF6uG32TrALcY3LenVOIMB+DFfGnTTjnQmKm6GkrSjXQJphaVSy4bwfEPNBr
caJB5d9sCkyGAQiLglayP3CbQO+UK/DW+RnKiYKJ+eu6ENlP5cHjZXrEZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPymYGAxO0i1XxhhOWOgqePWNPgiMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvX0taZ1lERTdTTFZmR0dFNVk2Q3A0OVkwLUNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtFOMA0G
CSqGSIb3DQEBCwUAA4IBAQBAskp183UgkI7iFx0Fbc/oUFumM8hBsthJGxFcZgPO
i+ScFWjotaiCGSWLhOKu9HotQtoc5hEeD7CjFsDBe27WWUiquNJaQpTx7gYXtguc
n7CnB3uKl+M7DufuuIetvfhrEuqwc3k+e8YPj9+75Tgjyxc4I1NLLYFrBc0PzW06
668Htedtp/Ly/u62o0CmXO1REPnpRY28gfmcCogOKsqfRmZxPFAOt6rCW20hH0PR
b8708uropiWD7+Exqp3/reFU6vu8qjhHFtDGDVTfDP0w6XWcEspJQ0XMimZ00NOu
JUKpFEUtYFgM+EGUf/SEIpAPkvZMgFgxD9KvUagKnd0u
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:42 2025 by rpki-client