Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa
File: 1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa (raw, json)
Hash identifier: yxvYsCLwo+HHivfhDyL+8Sdo+tKY+1OVoiINgf6EUGk=
Subject key identifier: D5:98:82:82:F9:D1:06:49:C9:51:7B:75:53:3E:A7:36:8E:FF:A4:EE
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 01942823678578D785D3C0550094050C73AC
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41994
IP address blocks: 212.163.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:67:85:78:d7:85:d3:c0:55:00:94:05:0c:73:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5988282f9d10649c9517b75533ea7368effa4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:1b:9f:c6:c2:0f:c9:5c:0d:02:ba:c9:67:
c1:15:78:d1:d2:bb:36:f9:b1:a8:c5:4c:1b:78:14:
9d:9f:69:6e:7d:ae:43:e4:07:08:3c:4f:b3:b6:99:
02:1f:a1:ec:28:0a:f6:71:23:b9:e7:c7:24:e2:cf:
2b:61:ed:cd:c8:db:33:fe:35:d7:f8:76:1f:3f:b1:
2b:d7:de:db:27:25:4c:d0:2d:6b:18:5e:90:b0:09:
88:36:1d:8b:42:ac:8f:86:1a:47:64:96:c1:18:53:
8c:5d:a8:49:74:bd:1f:a7:38:23:0f:64:64:aa:84:
bd:d9:c2:a7:d2:0c:39:f9:b8:8e:e2:58:30:42:32:
41:e2:39:61:ab:fd:89:36:e4:5a:54:b0:0b:8b:8c:
54:18:6d:6b:cc:4e:6f:1f:26:57:8d:43:b6:10:af:
9e:bd:a2:47:a8:ab:ba:b7:0b:8c:d0:96:bc:ef:05:
b7:74:1b:12:fe:0c:00:1e:06:5b:ac:bf:35:08:ca:
b5:54:7a:67:33:51:1d:f3:77:0c:c7:c2:d7:92:d4:
46:11:a0:b9:d5:4c:af:1d:53:2a:cd:82:16:4d:f8:
62:de:21:32:d5:30:6f:c2:41:15:1c:df:38:15:c1:
9c:a7:55:b1:f9:b3:2e:98:f5:13:9c:7c:ec:64:10:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:82:82:F9:D1:06:49:C9:51:7B:75:53:3E:A7:36:8E:FF:A4:EE
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:00:54:fd:49:e2:01:0d:48:0f:0f:88:04:fa:da:ca:02:7b:
2d:7c:b3:35:a6:f5:7b:97:68:1d:8b:4d:44:70:40:bb:1a:10:
59:e1:13:59:59:d5:be:08:ac:d2:dd:c0:15:0c:50:e0:57:32:
6d:89:e5:7d:29:74:8a:21:b9:f1:91:3f:23:86:da:2b:4e:38:
f7:93:21:bb:b3:74:fe:a5:15:10:7d:5a:25:a3:9f:08:bb:b6:
09:31:1b:21:5c:9c:56:57:c9:a7:c3:8e:01:7d:ed:d1:54:3e:
22:66:5b:05:5f:43:2f:8b:fc:d5:2b:65:52:8e:9a:5f:0a:0b:
1f:9e:00:6f:20:3a:0a:e0:76:b7:7c:d2:b7:66:0a:0e:f6:b9:
c6:01:a4:ce:cc:b1:1d:10:f7:ba:33:d2:0f:94:be:0f:91:d8:
68:4d:c4:66:1b:70:ea:33:3c:c2:4a:1e:2b:1d:0e:02:49:f1:
f0:5c:f0:d2:77:04:84:bd:a9:19:1f:67:ce:7b:e8:13:41:47:
3b:23:d8:61:26:d7:df:92:79:3a:3a:b6:1a:df:f2:6a:af:d6:
6c:8c:51:ad:a5:8c:6c:75:a7:30:60:43:ad:2e:68:b4:fb:44:
46:61:da:01:f5:bb:58:71:74:56:35:dd:f6:96:06:2d:a0:77:
88:52:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:50 2025 by rpki-client