Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/_ZjRtovsCOJczXTJb78gNEIXWRA.roa
File: _ZjRtovsCOJczXTJb78gNEIXWRA.roa (raw, json)
Hash identifier: o+YLeLrWzFxVnwd97MbT9/S72tuJZDl5Wl2Z8cJ7fEM=
Subject key identifier: FD:98:D1:B6:8B:EC:08:E2:5C:CD:74:C9:6F:BF:20:34:42:17:59:10
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 0194D35FEBE3223E5921C6D497327E3B2A8F
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/_ZjRtovsCOJczXTJb78gNEIXWRA.roa
Signing time: Tue 04 Feb 2025 23:51:06 +0000
ROA not before: Tue 04 Feb 2025 23:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12989
IP address blocks: 2.59.22.0/24 maxlen: 24
212.104.140.0/24 maxlen: 24
212.104.141.0/24 maxlen: 24
213.254.179.0/24 maxlen: 24
2a01:e945::/48 maxlen: 48
2a01:e947::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d3:5f:eb:e3:22:3e:59:21:c6:d4:97:32:7e:3b:2a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Feb 4 23:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd98d1b68bec08e25ccd74c96fbf203442175910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d1:a2:21:36:0b:2a:db:66:61:7e:7d:15:fa:
10:4d:99:62:4d:d2:d2:44:d9:31:d2:fd:1d:f4:5c:
22:17:d5:88:6e:c0:46:83:3d:7e:3b:68:92:d3:d5:
0d:45:0c:ca:30:22:49:41:c1:28:51:35:0e:f9:2f:
2c:83:37:45:84:8d:47:7a:91:a4:2b:7b:04:17:8a:
9e:9f:32:83:a4:c5:c5:97:f3:8d:d1:f5:bc:bf:fc:
65:91:c0:70:e5:33:95:83:80:0d:19:ac:8d:64:72:
64:ce:f7:78:fc:e8:81:97:e7:1e:28:e3:6c:96:e1:
83:ee:2f:4a:1c:18:7f:b1:0e:b5:fb:a5:34:c8:96:
c0:5f:c7:53:6b:1a:e1:2d:55:92:07:d0:f8:58:81:
db:6c:8a:a6:51:67:90:9e:e9:40:93:9b:e2:b9:23:
22:ce:fe:46:a6:6f:fd:eb:1b:8b:39:17:47:96:10:
5b:18:b1:90:af:3c:1b:f7:c6:c4:3d:6e:10:6d:76:
9a:43:10:81:85:47:57:b6:3d:93:a2:49:2b:78:32:
95:6f:8a:2a:90:61:a7:49:6c:29:b1:ac:3b:98:19:
b8:d6:1f:34:52:09:ac:07:a5:29:f7:68:e3:1f:e8:
d8:09:b7:1b:6d:9c:5e:10:fc:01:89:cb:a7:2a:fd:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:D1:B6:8B:EC:08:E2:5C:CD:74:C9:6F:BF:20:34:42:17:59:10
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/_ZjRtovsCOJczXTJb78gNEIXWRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.22.0/24
212.104.140.0/23
213.254.179.0/24
IPv6:
2a01:e945::/48
2a01:e947::/48
Signature Algorithm: sha256WithRSAEncryption
d0:7e:f4:5c:57:ed:d6:b0:3a:61:b6:79:ea:90:81:05:39:d1:
a1:e2:72:52:4f:7a:45:50:7c:bd:c1:b2:bd:7d:1a:f0:68:11:
20:34:80:41:bf:7d:04:0d:f1:fe:06:fd:6c:d7:1a:8c:69:49:
eb:53:dc:39:57:90:98:41:13:5e:5e:f4:a5:ac:d4:56:8d:ae:
aa:98:dc:19:e1:78:0c:08:02:9e:c1:c8:f5:9a:e6:84:36:b6:
3d:6e:c9:6b:e4:d3:0c:28:00:d0:32:f5:a2:e9:10:12:43:3d:
d8:04:70:40:4c:c2:4b:94:8a:25:df:19:05:02:1f:1e:37:59:
f9:b2:96:a1:4e:a1:ef:88:6e:8b:39:b8:57:cc:eb:ea:14:08:
30:ee:b3:f3:ab:4d:d8:90:4d:f3:7e:6c:f6:43:14:ee:f1:4f:
c3:a4:cd:e5:43:77:c4:18:12:b0:74:3c:16:3f:01:fa:2f:e3:
84:4c:f3:aa:d3:49:71:c2:7c:ec:90:17:70:96:ff:d4:2a:45:
f6:f2:68:c7:8b:5f:da:75:35:ba:e8:12:0a:75:14:06:ed:a4:
6e:c7:8f:38:6f:53:b1:51:89:34:ad:48:58:38:c4:50:ab:c9:
fc:d6:f6:39:f3:f1:53:0a:22:db:c6:5f:c7:2f:55:a1:ba:34:
3c:36:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:28 2025 by rpki-client