Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa
File: 5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa (raw, json)
Hash identifier: BkNNieru96Ok0gqv++x1NXt1ZiRd17b/+Pd802cp/Gk=
Subject key identifier: E5:96:52:9B:F1:5A:FE:91:53:97:F7:32:01:D5:5D:DA:1F:08:C6:07
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55C77E922874ED6FC341BB68A2961
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 79.175.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5c:77:e9:22:87:4e:d6:fc:34:1b:b6:8a:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e596529bf15afe915397f73201d55dda1f08c607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:e0:52:cc:fb:8c:83:3e:22:25:65:b9:56:
9a:26:27:b9:59:32:ce:75:76:bc:ed:e4:11:69:ac:
2d:e8:e0:66:0d:f8:6b:ae:7b:61:49:8d:33:89:70:
35:2f:d4:6e:3c:57:12:22:27:c4:0e:54:fd:31:3b:
f8:ac:73:a0:85:4d:c5:fe:07:99:17:f5:a5:94:49:
9c:a9:79:8f:9d:a6:45:0d:93:28:58:6e:24:16:3c:
b4:a2:5c:8b:a7:0c:33:25:31:72:c7:eb:77:b8:b1:
cb:d0:a1:4e:8c:bc:02:c1:dc:4d:c2:e0:bf:22:87:
86:ab:11:2e:39:cd:ea:d4:e9:ff:5a:a9:c9:97:53:
b3:b4:fb:3e:5b:e3:67:63:4a:65:bf:69:a3:9e:42:
d2:11:29:52:48:e3:01:86:65:40:69:0f:ee:91:47:
67:28:53:3b:ac:2e:99:cb:4a:b1:e5:7c:80:97:fe:
27:54:a8:aa:d0:7c:fe:39:63:96:45:be:4b:eb:ae:
50:9e:d4:74:6d:1f:a7:3d:af:ba:45:49:1f:14:ed:
3b:7d:f9:78:d0:cd:6c:3b:1d:a3:ac:41:69:04:4f:
49:59:a2:8f:f8:6e:1e:98:ac:e8:ba:43:8f:43:ee:
1d:b4:75:fd:f5:3a:b8:45:1b:de:ba:28:35:72:79:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:52:9B:F1:5A:FE:91:53:97:F7:32:01:D5:5D:DA:1F:08:C6:07
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.96.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d2:e2:da:a8:af:fa:cb:87:1f:10:96:a6:c7:18:3e:e8:f0:
27:6d:e9:2b:61:d0:60:f9:01:0f:d9:b0:8e:42:23:54:a6:61:
15:66:3f:f8:9c:68:db:ea:87:37:93:27:72:15:e9:e1:d7:20:
ad:6f:2b:e0:d2:d0:14:27:63:fe:2f:f5:9e:17:f8:a8:53:27:
18:45:82:22:ee:fe:bc:bc:26:dd:db:7e:50:a9:8a:17:b7:33:
b6:bc:ab:b8:c0:9e:4a:76:ee:51:c8:fd:2c:3c:91:4e:a3:eb:
8d:87:9f:43:e8:9a:2c:31:ab:11:d5:a7:2a:5c:a3:5d:ca:57:
15:d5:af:95:f3:e9:b3:0e:ec:ef:cd:0c:d8:3e:61:40:86:95:
7c:d9:3b:05:3c:f5:29:9e:6d:4c:ed:01:bf:d8:45:30:42:a7:
3d:d6:ba:bc:d5:04:a0:b0:0c:e4:7f:ec:86:08:26:c6:1f:d8:
9e:18:a2:11:91:d2:96:d0:e5:42:ee:76:18:80:9b:3f:f5:44:
26:b7:bb:24:da:6a:0b:54:1c:f5:47:3b:a9:6f:32:5f:00:36:
35:a7:91:55:fe:71:77:d2:0f:b0:85:bd:8e:e6:ea:52:c1:54:
02:e4:5a:71:38:60:0f:4c:d0:41:32:fa:ea:cf:2d:b6:92:2e:
db:4a:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:45 2025 by rpki-client