Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa
File: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (raw, json)
Hash identifier: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=
Subject key identifier: 67:DA:99:6B:78:A7:61:0E:8C:44:D0:4E:3C:87:40:64:D0:28:4B:86
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 0195280EDB57F3C23F1C637BBD73E36C3791
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa
Signing time: Fri 21 Feb 2025 10:30:16 +0000
ROA not before: Fri 21 Feb 2025 10:30:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12521
IP address blocks: 5.199.224.0/21 maxlen: 24
5.199.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:0e:db:57:f3:c2:3f:1c:63:7b:bd:73:e3:6c:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Feb 21 10:30:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67da996b78a7610e8c44d04e3c874064d0284b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:55:b3:38:0f:94:a5:e3:b8:f8:92:a7:c7:
26:38:92:46:08:c8:ce:09:2c:3f:9e:f8:5c:c8:d0:
b9:d7:76:58:3e:58:e2:2e:b7:37:98:cc:c4:c5:05:
a0:b1:53:0d:68:86:f3:a5:67:37:27:2f:df:88:f3:
67:53:aa:31:5a:14:14:d4:f3:43:7b:4d:9f:e6:b1:
4b:53:bc:70:d6:55:0b:2e:80:e6:95:77:15:f8:66:
53:24:53:c0:73:ea:e5:51:48:6e:19:10:ac:ae:34:
1c:84:7e:69:32:89:58:a6:1f:3e:4e:1c:11:b0:3b:
ec:43:ad:77:28:c8:8d:91:16:5d:cc:fa:e1:4c:42:
08:cb:9b:68:10:47:19:06:d1:d7:68:20:8b:77:be:
25:cd:fd:23:1d:8e:e9:3e:26:62:aa:43:fa:7f:2a:
45:50:61:c3:a8:17:0a:ba:db:47:0d:46:e7:58:80:
e5:c4:1a:f5:48:a0:6d:78:68:01:45:94:fc:d6:f3:
ec:12:48:26:be:35:95:99:80:f3:44:a5:86:fc:dc:
4d:3d:c6:12:29:88:a4:bc:e1:5b:29:af:89:36:ab:
33:d4:66:43:3f:7a:16:d0:fa:20:ce:62:b8:02:07:
0a:1b:8d:03:7f:21:e8:36:a6:5c:78:3b:57:ed:b8:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:99:6B:78:A7:61:0E:8C:44:D0:4E:3C:87:40:64:D0:28:4B:86
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.224.0/21
Signature Algorithm: sha256WithRSAEncryption
46:df:29:61:4e:a3:94:8b:48:c3:54:cd:c4:06:6e:4f:f6:e1:
09:b2:3d:31:13:59:4d:ca:4f:51:be:c0:e2:5a:04:f9:6e:6e:
6f:07:3f:1f:ee:ff:67:a1:01:ae:94:b0:ff:e3:20:77:34:60:
67:3b:81:f4:71:c5:91:8c:3e:a8:e1:f0:bf:4d:8b:45:8a:f6:
ac:58:9d:b1:00:73:6a:c0:55:1d:51:78:d4:b1:9f:28:1c:8d:
65:c5:74:f5:d7:8b:b4:69:42:25:ed:a9:ff:a3:af:89:59:de:
76:1d:2f:61:3e:44:68:01:48:ca:29:99:0b:62:db:d2:cb:17:
e4:3e:2b:f1:0a:5b:c0:1f:15:8f:f4:f4:10:bf:fd:af:e8:34:
c6:17:47:b1:a7:e3:fa:68:16:07:e9:d5:34:a2:bb:69:6b:79:
3c:df:eb:e4:75:0c:0c:58:1c:2e:87:03:23:f1:f2:c0:bf:85:
ad:d5:f4:5f:dd:3d:87:65:55:5a:f2:94:ef:a2:70:e2:eb:3e:
c9:6a:83:74:7e:36:af:59:f4:29:d5:81:3f:3f:ce:cc:ce:5e:
9c:4f:e1:f9:8e:c8:65:a5:43:17:ac:05:5b:cf:6a:76:34:d3:
5d:c0:40:08:88:f0:2a:e0:63:c5:fe:02:e6:fc:09:79:d7:88:
a5:fe:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:34:01 2025 by rpki-client