Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z-Ur6Re147f49wwXtBgxnUTtQco.roa
File: Z-Ur6Re147f49wwXtBgxnUTtQco.roa (raw, json)
Hash identifier: 6jMXEqLaJpiU5oHiEpHv2AWSooBvq9dmOPpZl+dAG7k=
Subject key identifier: 67:E5:2B:E9:17:B5:E3:B7:F8:F7:0C:17:B4:18:31:9D:44:ED:41:CA
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019421B1FE2C01B396F95AD2E1028D2D615C
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z-Ur6Re147f49wwXtBgxnUTtQco.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 212.116.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fe:2c:01:b3:96:f9:5a:d2:e1:02:8d:2d:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67e52be917b5e3b7f8f70c17b418319d44ed41ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:15:7c:79:f3:08:a4:29:7a:be:d9:78:d3:
9b:f6:04:dc:d2:30:2f:cb:f3:bf:2b:10:d6:1b:65:
66:bc:ed:08:bb:52:4d:c7:89:39:01:03:3b:63:a6:
57:42:d5:9d:35:55:4e:03:00:94:97:9e:59:04:7c:
e2:4d:41:31:d5:b8:19:6f:7d:26:1b:c9:d5:4b:23:
c8:24:f5:ed:62:8f:5f:da:ed:41:92:8a:d8:83:96:
13:21:2c:b8:67:ee:4b:b6:94:bb:be:93:12:0b:b5:
c7:94:e8:fb:33:3a:94:96:eb:be:5b:5b:80:41:59:
4f:c7:4d:d0:e3:29:af:e9:fd:e1:0c:bd:e9:5e:93:
a5:8a:37:4b:07:f8:f6:d0:7b:e0:58:48:1a:45:91:
06:f6:04:33:fa:09:a4:75:a0:58:99:10:b9:b7:78:
1e:af:d9:e4:f2:fb:bc:bd:cb:8d:e9:e0:6e:46:1b:
05:7f:71:dd:53:2f:e4:88:cc:b5:d2:9c:57:56:86:
40:8c:a4:79:5c:45:bb:81:7d:29:20:af:63:58:cf:
8f:e2:4d:e1:81:25:a9:33:a9:48:a1:52:84:4a:2e:
f5:4b:e4:eb:86:42:25:14:99:67:d6:a2:0c:b5:79:
a0:55:81:d4:a2:46:e7:78:40:d2:21:c4:a3:c6:dd:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:2B:E9:17:B5:E3:B7:F8:F7:0C:17:B4:18:31:9D:44:ED:41:CA
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Z-Ur6Re147f49wwXtBgxnUTtQco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.245.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:52:fa:fd:eb:6e:e7:d0:bd:c9:07:38:64:36:60:91:b1:7f:
2f:fd:6c:95:cd:8a:c8:6f:52:31:17:e9:ce:90:61:d4:6f:cb:
82:b1:d8:8b:c3:7a:81:c7:9e:03:eb:57:67:41:ab:29:f2:39:
1c:33:b8:33:54:7d:21:dd:38:13:f0:f0:32:45:10:3f:5d:6a:
75:fe:47:6d:6b:39:12:44:fe:30:a2:24:d2:81:e6:04:d4:47:
f4:c6:5b:28:92:83:84:42:34:00:6f:df:76:d9:7f:d0:61:ae:
f0:09:e4:0c:56:27:f0:fb:fb:ef:28:e7:60:61:e1:7d:e9:8e:
b1:85:ae:51:44:0d:fc:71:02:be:f8:7b:99:ca:16:60:ad:83:
9f:5f:a2:dc:2a:f1:a9:09:01:b5:f3:ad:88:0f:b3:c6:b3:fb:
d5:10:2a:11:2e:91:ad:40:f5:7f:97:6f:c3:1d:39:7d:eb:23:
a5:96:72:97:bd:43:b7:5e:e3:6c:4e:07:74:29:1d:46:bb:31:
56:31:0c:d7:b5:f7:bd:e2:05:0c:d0:cd:87:95:3e:f0:a3:f9:
f6:72:2d:f4:10:19:b3:39:dd:b7:c3:ba:12:67:44:24:fb:ad:
6b:f4:5a:47:16:eb:52:29:21:57:39:dc:38:9d:77:de:f7:5e:
d8:a8:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:57 2025 by rpki-client