Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZWLBkNjQp2zLJkEH2jhDJrdxFWs.roa
File: ZWLBkNjQp2zLJkEH2jhDJrdxFWs.roa (raw, json)
Hash identifier: M8cKp5rlHaV9hdRhq8peayEmIWb6olfqhMj90DjWV60=
Subject key identifier: 65:62:C1:90:D8:D0:A7:6C:CB:26:41:07:DA:38:43:26:B7:71:15:6B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE275127ABDDFD1D353F30DA8179E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZWLBkNjQp2zLJkEH2jhDJrdxFWs.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198777
IP address blocks: 193.192.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e2:75:12:7a:bd:df:d1:d3:53:f3:0d:a8:17:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6562c190d8d0a76ccb264107da384326b771156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:e1:2a:22:c5:86:e8:21:1e:d3:00:26:82:
f8:15:e9:70:93:62:be:9f:03:1e:01:f0:eb:c3:90:
5e:dd:15:41:a7:e6:c6:46:da:c4:fc:2e:64:0b:0f:
fa:91:c8:ce:f9:9a:82:ec:3f:48:23:34:97:c1:e7:
a0:eb:a3:56:b7:18:c1:04:09:30:95:9a:46:0a:c5:
1d:72:f1:8d:bf:c4:c4:18:8a:dc:d6:c0:7a:12:58:
06:1b:5e:10:b2:d5:3d:dd:e9:4d:72:22:18:6f:48:
67:40:51:c1:23:8a:e0:0c:92:72:99:7b:ea:85:df:
ee:fc:d4:73:59:3c:44:07:fb:06:89:d8:a3:d3:74:
01:17:ee:cd:f1:ab:a1:28:23:1d:2b:70:11:18:9f:
e6:4f:c0:78:11:87:22:0c:d5:c8:54:6f:b3:e8:b4:
c8:d6:a4:89:71:cc:8e:e8:34:4b:f8:a5:12:d0:ef:
a5:19:35:c4:ac:6e:ea:a2:d4:76:c0:a9:46:32:11:
82:d9:34:a5:68:ac:22:ba:e2:dd:ce:d5:ec:ec:19:
bb:38:76:de:3a:9f:eb:0e:4e:2b:ce:71:f9:7a:6c:
0b:27:ff:94:7f:b5:63:3b:78:76:55:39:ac:1a:cb:
e0:ff:90:f4:cc:93:a9:46:f1:82:17:ec:e9:49:1c:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:C1:90:D8:D0:A7:6C:CB:26:41:07:DA:38:43:26:B7:71:15:6B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZWLBkNjQp2zLJkEH2jhDJrdxFWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.170.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6e:98:97:d3:87:3c:f5:de:21:43:d0:b2:dc:01:6c:ca:f7:
fb:ce:19:e8:c0:d8:ed:5c:b6:74:c5:a0:da:e7:62:17:06:f9:
94:ea:20:59:7c:1f:69:f2:4c:b8:88:be:10:a9:98:41:a1:dd:
74:8e:a4:0d:25:2c:8b:bc:33:25:78:21:27:27:2f:22:34:b6:
cf:ec:30:b0:eb:59:74:ae:bc:79:7c:64:ab:9e:50:b4:1d:48:
2f:79:30:ac:40:7f:3b:40:70:ab:3c:b7:52:28:fa:72:80:99:
07:c9:5e:31:10:d9:02:48:d0:24:2e:46:d0:db:12:b8:f6:17:
53:98:af:e7:ea:26:07:2a:07:c6:c7:64:b5:a3:b8:f6:77:e4:
35:28:f1:40:fc:28:2d:f1:5c:21:73:d6:59:6f:bd:ed:ab:46:
f3:8b:31:97:7c:63:43:d6:6d:f4:7a:58:f6:b5:e9:86:46:25:
da:38:51:f4:9b:83:4c:9d:64:c2:e7:70:d4:99:54:6e:ac:29:
b4:46:d2:fb:90:fb:42:95:2b:3f:86:45:85:41:9b:a4:d2:33:
ac:be:c8:8c:04:e2:5d:93:33:7e:31:45:32:2d:5e:42:ef:2e:
d6:5f:8f:46:ce:f8:3a:ec:64:26:c5:15:ea:bf:00:1f:b2:b3:
65:bd:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:04:43 2025 by rpki-client