Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ZHbobBOr2dwuIAslFUdVR-aSlCI.roa
File: ZHbobBOr2dwuIAslFUdVR-aSlCI.roa (raw, json)
Hash identifier: wwOheYgnkzgX0CywqPIMl0fEiGAu14WYm2K3vLEIc3s=
Subject key identifier: 64:76:E8:6C:13:AB:D9:DC:2E:20:0B:25:15:47:55:47:E6:92:94:22
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0194258FA2A84C729AF2F7D3CA9F99313BB6
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ZHbobBOr2dwuIAslFUdVR-aSlCI.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51431
IP address blocks: 89.235.78.0/23 maxlen: 24
188.75.78.0/23 maxlen: 24
213.195.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a2:a8:4c:72:9a:f2:f7:d3:ca:9f:99:31:3b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6476e86c13abd9dc2e200b2515475547e6929422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:23:03:17:ce:01:b8:2c:43:3e:b6:40:ac:
65:4b:8a:30:4e:22:52:d2:e3:9a:63:49:b0:d5:2f:
6a:56:88:e1:ca:3f:38:3e:17:9c:10:40:e7:33:0e:
18:cd:89:92:d1:67:ec:40:a5:13:a5:ec:fc:02:59:
79:63:f6:95:91:20:18:16:94:6d:06:1c:43:af:b8:
37:ad:51:f3:c3:ac:73:f1:36:78:52:66:7b:de:57:
c8:85:a6:d3:65:b5:19:dc:3f:07:3c:10:d0:54:62:
94:22:b5:94:b7:df:dd:59:63:3d:42:34:52:36:88:
97:bb:a4:74:5d:b3:80:7e:6c:9f:1c:df:cb:4a:6f:
64:f4:81:3b:fa:ec:8f:74:36:87:d7:42:a6:1d:c8:
c0:b3:7b:09:b8:e3:95:d7:14:8b:c4:e0:32:47:33:
c6:ed:10:20:12:2b:b9:d0:19:e1:7c:57:04:80:65:
f2:91:ee:10:25:81:4c:e7:0e:95:f5:a7:49:85:e3:
fe:d3:c9:a2:88:45:20:53:32:67:41:c3:de:c5:f9:
d1:cc:23:cf:e3:16:dc:f1:1d:eb:03:07:52:6c:64:
87:84:10:54:ea:38:9f:f4:45:ce:7e:da:a6:49:dc:
6d:81:73:1f:ba:6f:46:92:65:9e:2c:18:3d:ea:b6:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:E8:6C:13:AB:D9:DC:2E:20:0B:25:15:47:55:47:E6:92:94:22
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/ZHbobBOr2dwuIAslFUdVR-aSlCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.235.78.0/23
188.75.78.0/23
213.195.22.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2b:cf:44:04:17:24:59:44:d6:39:e2:37:b4:d6:9a:4e:d2:
70:f5:57:56:9a:4d:0e:63:60:b4:b0:3d:ee:1c:4a:0e:a4:1d:
19:2b:6f:f2:4c:79:5c:24:81:0a:f3:92:c1:a1:8d:1d:e5:c3:
a0:9b:eb:fe:21:aa:ca:3f:f0:c2:6e:bc:b9:73:0b:89:a7:79:
25:2a:97:19:88:fe:bd:0d:50:2a:40:8e:61:37:35:47:95:05:
9d:80:02:32:94:b4:f5:07:3f:4a:e1:69:af:4c:99:34:56:f1:
6f:29:03:15:f9:26:52:98:da:ca:30:c5:c1:f1:41:bb:34:1f:
6e:d5:b5:99:e0:3c:dd:c9:7d:8a:85:a0:a5:bd:ce:7e:68:23:
24:f1:91:e7:6d:1b:46:29:2d:7d:9b:c2:1e:82:51:b6:78:ca:
f9:15:79:0c:e6:02:95:14:8d:01:c5:b4:40:53:8d:d1:0d:23:
37:4f:da:64:d5:0b:05:0c:78:d4:cf:ba:e5:e1:d8:63:27:ba:
f0:89:ec:03:fc:56:13:bc:5f:fc:8a:10:cd:79:fc:ec:7e:f0:
f0:53:e4:2a:f6:a7:9a:4a:75:0a:3e:48:36:72:63:6f:af:e7:
99:45:cc:05:c3:19:f8:0f:e4:03:ec:80:df:b4:60:8a:91:63:
d0:b8:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:24 2025 by rpki-client