Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ZpmFPtSZNiNVSBzLdQSO5Blf-I.roa
File: _ZpmFPtSZNiNVSBzLdQSO5Blf-I.roa (raw, json)
Hash identifier: oyuV0a+r3KsA1GyICHVOhUHIE73WVgYuUVq7OjIQGkk=
Subject key identifier: FD:9A:66:14:FB:52:64:D8:8D:55:20:73:2D:D4:12:3B:90:65:7F:E2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194ACDF5B79611AB66523EDF5EC97447BB7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ZpmFPtSZNiNVSBzLdQSO5Blf-I.roa
Signing time: Tue 28 Jan 2025 12:25:06 +0000
ROA not before: Tue 28 Jan 2025 12:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200239
IP address blocks: 193.124.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:df:5b:79:61:1a:b6:65:23:ed:f5:ec:97:44:7b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 28 12:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd9a6614fb5264d88d5520732dd4123b90657fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:1d:e4:41:6a:c6:ea:87:2f:f5:05:59:cb:
84:0f:62:0e:30:66:19:9e:f3:5e:29:88:14:ca:34:
76:18:7b:b1:57:de:3b:45:b7:3e:48:dd:9a:1c:75:
13:6a:b7:6e:9c:8f:1a:79:24:e5:f5:5b:f6:e3:9d:
38:42:50:c4:73:c9:7b:dd:f3:9f:7b:2a:2c:f8:7b:
b5:51:7d:a1:fa:74:5b:4d:c0:87:a8:a6:97:7e:a6:
78:82:ce:6a:ea:f1:de:9e:2c:9c:51:97:5a:17:5f:
c1:1e:2e:9b:ad:a1:b4:86:1d:58:81:d9:8d:15:e1:
14:11:63:1d:7a:bf:9c:ae:8d:b7:3d:b7:4e:af:59:
1f:9b:a6:3f:af:16:db:08:e3:f3:34:68:db:d7:4b:
89:57:80:1a:d8:02:65:54:ec:bb:da:4e:c0:99:c1:
7c:35:0a:8c:82:5f:87:22:ef:fd:d1:23:8c:30:7f:
51:98:c2:bd:3e:92:8c:86:72:4b:11:1a:1e:10:20:
5b:b7:7e:76:c7:34:4d:f1:ab:02:2b:6a:e6:3c:ce:
14:0d:7b:65:17:d9:20:16:1d:76:54:0d:27:20:1b:
3a:ac:68:6a:09:ea:87:42:28:73:93:bc:d2:09:2d:
be:57:2e:af:9b:61:53:1d:d0:02:58:1b:e2:e1:4a:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9A:66:14:FB:52:64:D8:8D:55:20:73:2D:D4:12:3B:90:65:7F:E2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_ZpmFPtSZNiNVSBzLdQSO5Blf-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.80.0/24
Signature Algorithm: sha256WithRSAEncryption
90:42:73:ea:19:07:7b:47:12:bb:c9:a4:30:fc:4e:8f:d3:2e:
6a:1b:7f:da:0d:eb:64:21:ed:a6:91:9e:96:af:11:23:28:5e:
09:cb:11:33:6e:6e:42:e5:c7:61:7c:40:1b:c3:26:69:71:fe:
fb:08:e8:54:2a:71:0c:40:40:a1:d8:96:52:cb:63:53:a6:be:
9e:84:bd:1c:44:e3:1b:18:6c:f9:15:a5:59:3d:83:11:fc:fe:
b7:52:7f:70:0a:12:97:0f:e0:37:02:6d:c4:ec:9b:e7:c5:5f:
64:98:e2:eb:a6:25:ad:9b:97:34:4b:76:5d:2c:50:1b:f9:4d:
d7:aa:ae:46:da:9b:66:69:6d:66:3f:d9:0d:0f:a6:7d:d2:e2:
13:0b:93:c2:14:03:d0:a4:b3:d7:a9:01:87:33:d0:30:03:9f:
2e:1d:8c:ac:cd:77:ab:e1:09:d1:2a:de:60:ba:6c:58:2b:ce:
c6:2b:28:cc:bb:ca:ae:a4:64:fa:79:d2:4f:0c:a5:a5:fb:92:
1b:9a:17:46:60:1f:67:24:ce:5c:dd:c3:bc:6e:1d:fb:85:05:
09:c6:7b:db:17:70:db:54:09:a8:f2:ea:e3:40:25:14:df:45:
72:5d:5e:4b:37:9e:cd:31:d5:4c:d7:a5:d9:5c:9d:73:51:6e:
20:fc:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:42 2025 by rpki-client