Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/whyZk-eGgLM_RCz6JHmHxo6hnC4.roa
File: whyZk-eGgLM_RCz6JHmHxo6hnC4.roa (raw, json)
Hash identifier: JprlHVW3ts3bvDOmnO+99r6acv/rg1V894NDodBDkxU=
Subject key identifier: C2:1C:99:93:E7:86:80:B3:3F:44:2C:FA:24:79:87:C6:8E:A1:9C:2E
Certificate issuer: /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial: 019424B373D7C075D14D98D77B370BA1D533
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/whyZk-eGgLM_RCz6JHmHxo6hnC4.roa
Signing time: Thu 02 Jan 2025 01:48:47 +0000
ROA not before: Thu 02 Jan 2025 01:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209727
IP address blocks: 195.128.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 07:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:73:d7:c0:75:d1:4d:98:d7:7b:37:0b:a1:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c21c9993e78680b33f442cfa247987c68ea19c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:e3:de:9f:38:2b:91:84:7d:fc:41:20:ce:
1e:41:65:18:6f:b5:cc:85:7b:9f:dd:41:2a:00:5e:
dd:29:89:35:c3:92:21:ac:c0:73:f1:dc:db:95:3a:
43:7b:07:f0:39:67:9b:27:31:b6:6d:e9:ee:32:da:
55:4c:5c:7f:c5:4e:ae:9a:fc:7f:9d:dc:02:61:fc:
d5:92:ff:35:cf:a0:f8:6e:a2:27:7e:ab:2a:73:a4:
53:2a:f3:6e:e6:3c:6c:bc:2a:e6:8b:2c:45:e4:59:
2a:24:1d:92:3b:43:4a:43:ac:ac:f8:17:d4:fa:f3:
8c:59:79:b7:3b:d6:90:12:77:c4:9c:d9:c0:2a:17:
6c:6d:0f:df:84:53:9e:80:42:1a:15:16:23:f0:e7:
80:92:81:c7:b3:48:02:6a:0d:04:65:2f:2d:c6:46:
e1:28:04:09:11:bd:b4:ff:9f:c0:0c:96:31:3e:14:
19:c6:fd:b6:93:16:31:99:f6:30:3b:84:c0:72:f7:
3a:87:ec:80:db:8f:65:32:21:a7:23:3f:d7:12:e1:
a2:29:5a:84:a7:6b:75:9f:12:a4:c1:ad:b5:2e:0d:
21:22:ae:e8:97:6a:ba:40:69:16:12:72:46:b6:ee:
90:f8:f1:f6:51:73:71:38:c6:1a:15:a6:9a:e4:59:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:99:93:E7:86:80:B3:3F:44:2C:FA:24:79:87:C6:8E:A1:9C:2E
X509v3 Authority Key Identifier:
keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/whyZk-eGgLM_RCz6JHmHxo6hnC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1e:05:f7:6e:71:42:69:f1:6e:44:04:e7:c7:cb:b5:fd:f7:
fe:d1:70:d6:bc:6b:7a:d4:ee:30:b9:6d:8f:1c:93:2c:49:a3:
36:35:e6:5f:51:bd:4b:d0:cb:1a:07:bc:97:af:c3:87:24:ad:
6f:23:95:a8:ef:af:54:91:03:55:a9:d0:44:13:4d:27:ec:b6:
45:6c:f3:f0:cc:29:b0:c8:ea:77:c4:35:a8:13:48:9a:77:0e:
a9:08:a0:7d:1a:ad:4e:1b:5e:6a:68:82:f8:db:cb:8d:f1:8d:
10:d7:c1:0b:1d:27:62:0e:98:5d:12:d3:b0:dd:e1:17:3b:16:
b2:0a:6d:f7:47:5e:6a:62:b1:f0:e9:db:49:5b:7b:4f:49:a0:
83:fd:67:3e:de:63:8e:77:07:d8:dd:2e:5b:8a:8b:49:20:fe:
06:bf:4e:ee:39:75:5c:47:7f:03:3e:c7:30:6b:71:31:85:6c:
72:8a:1f:7f:6b:21:32:e4:8d:31:ad:2b:e7:0d:8b:a6:34:68:
d1:b9:c7:48:a1:9e:d0:f2:60:48:2a:b9:f1:82:c3:a8:51:a6:
f3:1f:02:48:87:47:0b:14:37:7c:8e:76:68:15:2d:79:44:e2:
29:75:87:3d:06:ef:e6:5f:86:59:e5:99:25:41:71:fa:58:2d:
d6:a0:70:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:01:44 2025 by rpki-client