Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa
File: dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa (raw, json)
Hash identifier: EC7IY47xBAWr3k7hTs+1NK5U2ipaAGq2Sy+LIMFTR20=
Subject key identifier: 75:9C:B5:B9:96:D8:FC:0A:2C:F1:2E:84:B1:EA:3D:69:19:41:8E:09
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9F0A293B13402DF8AFC5DA81CB6F3
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43241
IP address blocks: 194.107.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f0:a2:93:b1:34:02:df:8a:fc:5d:a8:1c:b6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=759cb5b996d8fc0a2cf12e84b1ea3d6919418e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:a3:15:72:3d:f9:38:70:72:d5:cb:3b:68:
3f:b1:c6:e2:0e:36:55:ef:4c:81:e4:e5:dd:69:80:
30:ce:be:54:ab:89:e4:9a:dc:4d:6c:f8:3c:b7:13:
8d:7f:74:12:02:92:d1:fd:d3:6f:05:b8:8e:fb:69:
28:75:2c:59:6b:b6:7f:03:1f:22:9f:bf:03:26:9a:
fd:63:21:14:c9:9b:55:a1:7c:f4:10:a2:73:57:30:
6e:56:38:09:5a:62:be:52:55:85:b7:f1:fe:44:8b:
f3:33:5a:b5:31:c1:3c:b7:c0:7c:7b:56:d4:b4:f2:
0e:58:33:7e:b3:a3:53:e6:ae:92:81:6c:73:f4:d2:
c7:91:72:04:31:0d:58:9d:3b:f4:48:c7:ab:5e:24:
55:08:0e:61:a0:b1:42:88:b1:e6:bd:95:47:ee:1a:
79:f2:61:03:3f:2f:85:0c:55:9f:f4:d6:8b:ee:5d:
db:27:99:80:1a:48:38:60:c9:08:bb:37:4b:00:da:
b0:11:d3:e7:9c:aa:15:ae:15:2b:ed:d3:e0:ba:c3:
c2:93:c9:a0:ca:74:c5:b1:13:9c:d0:14:2a:b6:74:
d8:12:3b:14:a6:e5:3d:6a:97:5a:fe:ab:a9:63:73:
03:08:1c:a5:b1:28:ca:ec:2c:2e:5b:b6:2d:10:8a:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:B5:B9:96:D8:FC:0A:2C:F1:2E:84:B1:EA:3D:69:19:41:8E:09
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.128.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3b:b0:d2:26:ec:a2:3f:f9:49:4e:74:f3:ef:8d:dc:15:f8:
45:96:ea:eb:35:b2:16:bd:23:6b:6b:b2:8c:f3:4f:10:b4:ce:
c6:ee:2e:71:b8:52:71:4b:fd:04:99:b1:90:65:f3:db:20:7d:
d5:66:e7:17:42:7c:94:b2:08:9a:24:11:ed:7f:08:ac:1b:23:
e9:b1:10:85:45:bf:64:72:d9:22:86:81:4e:3a:93:14:c7:ce:
16:17:fe:04:02:11:28:85:8c:64:66:c0:ad:bb:16:6e:3c:70:
79:10:10:53:af:c1:a7:2a:8a:a9:b8:91:dc:eb:24:2d:aa:b7:
c3:2e:b0:53:ff:25:d9:fb:8b:73:75:25:91:77:86:35:2d:86:
09:b5:05:2f:55:ef:7e:3e:e4:57:8d:44:16:01:c0:18:1c:e6:
af:fa:f1:3c:19:f8:a8:4d:2f:96:67:25:54:8a:a2:3e:a7:40:
37:ba:13:e1:4c:23:09:3e:8f:e9:3e:6f:c5:69:18:a3:1e:e0:
12:ee:69:77:e8:db:cd:84:94:ed:1b:9f:d0:79:2f:37:56:65:
c1:01:6f:52:d8:84:2c:0b:63:e9:f4:ed:42:13:ba:9c:cd:f3:
f1:9c:75:d3:4f:60:5b:59:84:f3:14:2c:23:f4:04:98:7b:cd:
31:4b:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:11 2025 by rpki-client