Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/CZnT00JxVXA6iAWaLFt9qygzud4.roa
File: CZnT00JxVXA6iAWaLFt9qygzud4.roa (raw, json)
Hash identifier: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=
Subject key identifier: 09:99:D3:D3:42:71:55:70:3A:88:05:9A:2C:5B:7D:AB:28:33:B9:DE
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 0194274828BF78BB8AC4DB040A47415527B1
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/CZnT00JxVXA6iAWaLFt9qygzud4.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39803
IP address blocks: 195.189.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:28:bf:78:bb:8a:c4:db:04:0a:47:41:55:27:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0999d3d3427155703a88059a2c5b7dab2833b9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:2b:55:7a:4a:e2:72:14:b9:c5:43:53:10:
ef:7b:7f:98:95:aa:60:b2:d6:4b:4b:5a:cf:91:d1:
b2:16:b9:cb:fa:1a:c0:c7:0e:fd:67:61:70:12:ef:
1e:cd:3b:3d:1d:b6:fb:2b:13:0b:21:c2:a0:33:56:
ac:d7:e2:86:06:9b:92:37:9e:9e:db:0a:43:5b:c4:
df:b0:1c:9f:50:31:11:ae:9f:9e:20:c7:4a:5d:57:
9c:d3:07:b8:a2:bd:1c:f8:b1:f4:76:f7:60:51:7e:
5a:c4:62:69:20:23:2c:05:9a:7b:33:12:2d:f7:8a:
19:c6:a2:d3:6a:a5:d8:08:61:d9:1b:7a:da:8b:ce:
da:0e:19:a9:0a:5c:4b:65:70:3e:ee:5d:e4:15:01:
59:1c:44:e8:70:82:07:b3:1b:88:d9:83:c0:be:8f:
bd:4a:68:75:1b:61:bd:11:24:1c:d2:c9:25:fb:3f:
2e:83:7e:e3:37:c7:17:c9:b8:5a:d0:56:27:98:b6:
65:56:12:ee:ca:de:a7:9f:3b:3b:af:2e:14:15:5c:
0a:5c:ae:ca:c3:9a:95:67:8d:ef:63:66:80:53:9c:
ea:6d:d1:cd:a4:73:9c:8c:8a:82:e0:cb:40:99:dc:
74:3f:b7:6c:b8:6d:9c:27:4f:b4:c6:4a:5c:d8:56:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:D3:D3:42:71:55:70:3A:88:05:9A:2C:5B:7D:AB:28:33:B9:DE
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/CZnT00JxVXA6iAWaLFt9qygzud4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.138.0/23
Signature Algorithm: sha256WithRSAEncryption
76:4d:0f:5a:50:d5:60:af:bb:d6:63:f1:0e:e2:ed:ba:98:d2:
03:45:1e:21:3e:1b:4e:5d:84:8c:20:c9:39:38:f4:c9:11:c5:
4c:dc:8a:49:e8:27:a3:29:6d:06:4d:1c:9a:a5:5b:84:34:d9:
f8:26:30:3b:29:82:d3:e7:57:99:af:07:ea:c4:e9:86:31:e3:
d4:ef:6c:0e:ad:d4:70:4a:1e:3c:52:a0:68:b7:be:98:5e:1f:
86:49:99:66:06:14:6a:15:a5:c1:d8:62:78:ea:18:d3:f7:96:
1d:77:2f:c4:83:6f:e1:43:8c:0d:93:95:85:3a:11:da:4b:1c:
4e:42:2e:0c:43:77:ed:ba:78:b2:17:0d:55:33:3e:05:19:77:
90:d8:ea:28:dd:ad:34:28:6e:8e:be:1d:72:97:37:4e:47:6e:
6d:02:44:ce:cd:8f:35:bc:2e:25:cb:d6:a3:5f:a6:08:aa:11:
45:74:4a:13:42:04:2c:12:01:6b:e8:ea:7a:66:fe:91:e7:ae:
b3:80:52:2c:bc:b6:aa:aa:72:c1:49:9e:74:95:d9:45:1f:bd:
80:60:6f:16:af:34:a2:55:a5:ba:3a:0e:60:7f:3a:53:89:5f:
05:91:cd:2b:85:35:ba:d9:11:d2:ee:02:11:88:05:48:b1:02:
a9:d4:3a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:53:06 2025 by rpki-client