Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ZbRMfj9YfzPDdPWPOjDMA_pE5qY.roa
File: ZbRMfj9YfzPDdPWPOjDMA_pE5qY.roa (raw, json)
Hash identifier: /KAZcMzJGIdc2dYTw+AeY+8hxTs35s3WCjigCyXOcJQ=
Subject key identifier: 65:B4:4C:7E:3F:58:7F:33:C3:74:F5:8F:3A:30:CC:03:FA:44:E6:A6
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5F29C47AFDAA0B3FFC74559234709
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ZbRMfj9YfzPDdPWPOjDMA_pE5qY.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 188.172.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f2:9c:47:af:da:a0:b3:ff:c7:45:59:23:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65b44c7e3f587f33c374f58f3a30cc03fa44e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:16:5f:a0:19:08:0e:e7:bf:cc:ed:18:64:
a7:b6:1d:18:5c:1d:cc:81:a6:e5:88:55:b1:eb:cd:
5d:ce:86:84:b9:56:48:4f:36:29:9a:c7:ae:26:02:
2c:9e:ec:5c:69:c4:49:e9:2a:e0:51:96:25:54:fd:
96:63:65:8a:b4:d4:a9:22:a7:9d:9f:b6:c3:eb:16:
cc:f8:5b:a5:b2:b1:3f:56:c2:95:db:c1:72:f7:f0:
9e:fb:d0:3e:21:86:29:4c:c5:f2:b2:5a:e7:10:73:
8a:a2:50:11:8e:93:d6:cf:35:8f:5c:10:0b:27:30:
1c:52:46:fb:02:d6:96:d3:8a:68:ed:5f:a9:f4:5a:
28:b7:86:f1:04:39:e1:6f:08:89:c7:6c:e1:fd:de:
bd:99:ad:f2:4c:bb:4c:84:73:87:4f:49:28:1b:46:
31:52:b5:b1:4c:e2:ad:bf:fb:b5:c5:29:2a:7b:d5:
70:2c:cb:b1:f0:0d:a0:92:f0:57:b6:76:a3:f6:3e:
c3:ce:18:4b:0c:a5:a8:04:9d:d4:62:29:22:ae:7d:
a1:f6:66:9e:e9:ac:eb:f6:8a:3c:90:24:e9:11:98:
c5:6b:7f:4c:62:fb:bc:9e:31:71:84:fc:13:20:e2:
3a:08:16:dc:ea:32:f3:68:1a:4b:31:fa:41:7f:4e:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B4:4C:7E:3F:58:7F:33:C3:74:F5:8F:3A:30:CC:03:FA:44:E6:A6
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ZbRMfj9YfzPDdPWPOjDMA_pE5qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.196.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fc:67:74:10:7c:fa:03:6d:34:66:b4:0b:7e:ef:e1:3f:cf:
c2:97:48:00:9d:97:93:7b:7d:5a:61:c1:e5:33:5b:f0:4a:1b:
01:16:cc:bc:9d:c3:1c:15:d9:77:b9:db:b0:3f:9e:eb:62:99:
93:74:f5:0e:f6:72:9a:b6:1a:ea:5c:c8:53:46:65:38:2c:fe:
4b:7d:79:19:78:07:e1:d2:40:88:1c:67:94:ad:02:59:c0:71:
cd:60:a0:60:ce:5c:e4:2d:46:3a:55:4b:c4:9c:cf:d6:49:4a:
d9:1e:f4:14:b7:f5:27:62:d1:bf:6b:e4:20:12:bb:df:9b:f7:
87:12:8c:1c:d5:22:eb:d4:c3:61:7d:4e:e4:e2:e7:bc:94:a6:
15:d8:83:ad:3a:28:18:98:8a:69:5f:68:f5:17:9d:72:da:6f:
f1:21:2b:2c:65:7a:12:54:a5:66:87:7d:82:b2:05:7d:b9:8f:
16:2e:69:49:62:a4:d9:25:45:04:de:af:00:21:2c:92:d8:6b:
b9:a8:54:aa:40:23:23:8f:e1:5b:99:c2:45:2c:8d:69:f9:e4:
6a:b5:32:86:b5:6c:41:a5:c7:dc:40:12:41:62:01:75:f4:27:
f2:1b:e7:b3:17:73:e1:c2:ce:61:ca:c8:f6:d7:b4:b9:6c:48:
76:bf:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:05 2025 by rpki-client