Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa
File: 0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa (raw, json)
Hash identifier: derKa6RxFEVM7g9Xe9HEgRdoNKySPR/cieLuP8cX31E=
Subject key identifier: D1:9E:F3:76:00:F8:84:43:85:8E:3F:F8:84:A3:15:73:2E:E3:FB:7C
Certificate issuer: /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial: 01941FFA3D3E48CE93FDDC0F88C626ABD674
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 193.56.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3d:3e:48:ce:93:fd:dc:0f:88:c6:26:ab:d6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d19ef37600f88443858e3ff884a315732ee3fb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:c3:36:9f:ad:74:67:58:e1:cd:39:82:fe:
fd:35:cf:56:d6:74:ee:95:4d:a5:e8:60:23:14:28:
3a:5c:d2:4d:f9:54:a6:c3:0f:00:f7:55:6b:90:d8:
a5:57:9d:88:43:59:da:e1:77:58:27:c2:b3:b1:4c:
80:20:d2:05:87:37:b5:78:c8:dd:e8:fb:b9:5a:9a:
3d:67:7c:eb:b6:8e:f3:88:85:40:d1:af:41:42:75:
94:a4:96:d5:cb:e0:b5:4b:aa:48:99:2e:90:61:ad:
3c:05:c2:bd:10:06:0e:81:9a:2c:61:02:f5:15:76:
e9:ea:67:f5:30:db:e5:ec:41:6f:10:ef:64:c2:88:
6c:ec:0e:ae:1b:54:b4:be:5d:75:36:8f:c0:2e:87:
89:81:b6:b3:bf:4e:ce:9a:82:c2:4f:4c:f7:0c:29:
33:02:72:54:6f:b1:35:bf:c4:6a:ca:e5:6b:d9:37:
37:6d:02:61:5b:9e:7d:66:85:c3:ed:cf:d8:9a:2b:
ed:60:e2:c0:1d:b4:29:0c:e2:40:08:36:3a:a5:85:
7c:8b:39:cf:33:81:d7:49:82:76:09:c1:19:13:ac:
6f:62:04:99:12:63:a2:d2:60:3c:3f:e4:6b:b0:27:
e2:32:80:c1:ff:c7:ca:d4:a0:65:df:1a:99:77:ac:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:F3:76:00:F8:84:43:85:8E:3F:F8:84:A3:15:73:2E:E3:FB:7C
X509v3 Authority Key Identifier:
keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.4.0/22
Signature Algorithm: sha256WithRSAEncryption
04:c0:e8:13:69:c5:7f:1d:41:af:c8:ba:dc:57:b9:c0:65:63:
e9:36:6c:26:a6:67:6d:c0:9d:b2:72:86:8c:65:5a:71:4d:a5:
ce:b3:19:e5:97:3c:68:d7:84:b1:1c:f3:05:c4:7d:7d:47:87:
03:4d:72:f5:0d:16:41:d9:32:1e:48:b4:7f:c6:4b:c8:66:45:
6a:00:06:88:7c:56:a9:a5:ee:fe:f8:92:a7:4a:be:a1:1f:78:
cf:22:ed:1b:a9:c3:f8:91:22:f1:c5:43:15:a3:e8:14:fc:ab:
2a:0a:58:c3:7f:7f:a5:77:02:22:1d:51:4a:6f:cb:6b:c3:28:
67:2c:b7:28:eb:97:d0:1c:a6:1b:f7:cb:c0:4d:0a:75:35:83:
a3:ba:37:41:12:08:67:07:f3:47:05:b1:98:c6:46:e5:c0:29:
70:d4:51:9d:89:93:50:f5:2f:de:27:81:f5:bd:a0:9e:2d:d4:
90:5f:df:93:95:0a:68:6e:d1:2f:95:d2:b6:8d:66:57:58:e3:
ad:3a:b9:08:f0:75:01:04:2d:b9:d0:57:bf:05:c7:cb:af:06:
58:cb:2e:3e:6b:ca:6b:c5:5f:ca:b7:bb:a5:c1:a2:b1:e8:a3:
19:8c:9f:dc:3e:59:db:c1:e2:7a:fe:9e:34:de:58:30:59:98:
76:41:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:38 2025 by rpki-client