Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5ZznPs1LZMFTZGenRBjZHfZymAU.roa
File: 5ZznPs1LZMFTZGenRBjZHfZymAU.roa (raw, json)
Hash identifier: 6pIKVVwg7RqFkLueQ1WBmjDk7KsmqLeSveypZlxkX5g=
Subject key identifier: E5:9C:E7:3E:CD:4B:64:C1:53:64:67:A7:44:18:D9:1D:F6:72:98:05
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2FF212B67902BF6543558B37273D
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5ZznPs1LZMFTZGenRBjZHfZymAU.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64488
IP address blocks: 85.248.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2f:f2:12:b6:79:02:bf:65:43:55:8b:37:27:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e59ce73ecd4b64c1536467a74418d91df6729805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:b6:b1:22:2f:45:d6:71:39:02:1b:e0:0d:
e3:eb:81:55:96:fc:ae:35:11:a6:61:78:91:ba:0f:
40:db:d2:a1:27:9c:9f:55:1a:f1:9a:53:4e:d6:f4:
ae:c9:a6:1f:ad:95:3a:90:fd:c2:04:d7:30:c2:de:
f9:dd:f3:98:1a:cb:69:dd:44:8a:f6:50:65:b7:df:
8e:89:04:5c:18:d0:19:63:fe:26:5a:fc:dc:2e:35:
97:16:71:31:7f:0a:68:14:32:86:42:c7:1c:93:74:
bd:c4:38:af:e5:cc:5c:ec:bb:e1:75:68:c2:19:3e:
d1:b2:52:8c:79:bc:a0:8d:2f:d8:04:ad:cc:b1:01:
94:f8:ca:9a:d6:f1:24:f6:36:e8:78:17:8b:28:51:
0a:da:03:d5:6d:02:f5:d1:52:e3:5b:68:df:ae:84:
d7:49:13:90:6a:0e:bf:f5:67:bf:bc:c4:3e:e1:24:
05:c0:c4:8e:b8:a2:04:d0:85:03:70:16:e2:69:74:
db:ae:e1:de:29:a4:36:7c:7f:71:9d:e2:e8:cf:3d:
21:d9:45:01:fe:48:39:9d:ec:5e:50:eb:58:86:a5:
84:19:69:26:0a:e2:07:18:06:a7:7f:22:81:9b:79:
3b:56:15:7c:5c:b8:4a:47:f5:db:c3:a2:2b:db:47:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:E7:3E:CD:4B:64:C1:53:64:67:A7:44:18:D9:1D:F6:72:98:05
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5ZznPs1LZMFTZGenRBjZHfZymAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:29:24:ae:52:f7:cc:4e:14:d2:e4:e8:a8:a6:a4:69:d0:d3:
35:14:a4:65:26:7c:95:ad:ff:b1:84:75:5f:78:80:c6:a3:74:
d3:df:76:f2:d2:25:3c:86:88:51:a3:de:85:d4:67:d7:da:ac:
3f:85:59:58:15:ed:dc:12:26:28:3d:e2:19:7c:42:96:41:8d:
74:09:dd:0f:87:f5:de:1c:44:0d:76:36:7e:83:e2:20:85:1f:
91:0b:12:ba:17:0d:49:0b:4a:c5:3c:d2:12:a7:47:ba:06:e8:
03:2d:19:39:80:e7:ec:86:ae:02:c1:b0:48:a8:0a:64:92:6e:
ce:c2:1e:f0:62:04:6b:fa:dc:d2:a4:bb:08:0a:50:31:56:2d:
90:a6:5d:90:54:7a:8c:7d:ba:cc:08:ff:4f:57:a9:2d:8e:b4:
08:20:b7:74:ae:2d:6a:94:29:f9:73:20:8b:72:02:e8:0c:cb:
ef:56:5b:67:b6:42:5f:5d:59:76:8c:98:8e:dd:48:be:15:06:
7d:a6:22:1b:aa:37:d1:65:4a:76:40:a4:6c:8d:4a:b1:ad:d6:
2d:98:8d:87:15:10:8e:1d:58:12:3d:f3:d7:ca:f1:cc:b5:0d:
e0:08:41:6f:5b:a0:92:cf:4d:4e:c5:80:eb:d8:33:37:49:51:
a6:c7:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:03 2025 by rpki-client