Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa
File: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (raw, json)
Hash identifier: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=
Subject key identifier: D1:91:07:C0:9C:80:D8:A1:EE:46:C4:50:89:F3:3F:F4:9F:44:D9:46
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 019420D62B6ED2AC0B0600A5FA4817406F14
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2269
IP address blocks: 138.231.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2b:6e:d2:ac:0b:06:00:a5:fa:48:17:40:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d19107c09c80d8a1ee46c45089f33ff49f44d946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:90:67:2f:02:92:4b:b8:7f:0d:01:a9:0d:
c9:67:d0:7b:4b:0b:f4:1e:2a:fb:05:bd:39:c3:26:
11:7c:3f:23:b3:04:3e:a5:73:5f:bc:53:d6:93:9a:
22:04:60:0c:46:d6:70:fc:d5:e1:a7:7c:57:14:d8:
3e:d0:99:66:9b:9d:d0:2b:dc:27:f1:70:df:ac:93:
94:42:41:b0:14:cb:93:e7:06:b8:1e:3d:d6:cc:aa:
f8:82:ce:0f:b7:bc:f7:d2:e7:b6:0b:72:d9:27:fb:
19:c2:bb:5a:ff:a6:92:2e:54:61:56:70:f6:ad:c7:
e4:1f:b8:d7:66:4b:e9:d3:a7:61:67:86:86:12:1f:
77:11:c7:a5:7d:1b:bf:db:dd:7b:45:f1:0d:89:9e:
f0:e3:bf:e9:6d:d8:b5:a8:35:06:ef:0c:43:87:ad:
49:62:b6:98:2f:e6:b4:3b:12:bf:86:ff:54:dc:fe:
34:6a:e4:60:d6:54:95:ab:c1:fd:bb:f5:b9:18:df:
d3:c8:ea:ec:b9:d9:6b:9d:b0:9b:42:e9:aa:65:04:
43:ed:c2:8d:1a:db:a4:cb:30:bb:55:1e:0c:85:c3:
bb:ba:ca:df:6e:bf:2f:f6:98:42:03:43:15:56:f2:
8f:0d:eb:31:48:e5:ea:a8:6e:ab:00:b6:c7:d0:10:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:07:C0:9C:80:D8:A1:EE:46:C4:50:89:F3:3F:F4:9F:44:D9:46
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:ee:db:86:9a:c8:53:80:0f:08:ab:5d:ab:04:be:69:5c:d5:
55:b7:d5:bb:02:b8:2e:e5:c4:a8:36:cf:e4:83:8c:b2:35:75:
bb:36:f2:a8:c1:bf:bc:76:fb:aa:16:cc:e2:bc:b9:a0:c9:8e:
a6:a8:12:24:79:ce:cd:4c:0e:1a:0d:fa:9f:33:d6:38:14:f7:
de:c7:d5:7e:50:e1:93:b1:aa:7c:4a:e8:f5:e7:7f:f9:66:33:
34:06:d6:15:68:53:61:44:88:fd:38:5e:66:af:46:0a:ce:0f:
01:83:8d:ae:6f:12:b0:74:cb:9c:35:b2:bc:36:ac:9c:4e:a9:
d5:b6:d6:51:24:14:a0:d1:3c:de:73:8d:f1:27:95:c2:ae:8a:
80:07:82:5b:a1:c3:1c:af:d3:04:d3:cd:a2:e5:00:d2:7d:c9:
d9:62:9d:8f:7f:ad:7d:45:37:c4:27:2e:53:1e:1b:07:e2:8f:
1c:98:bc:93:61:21:ce:2d:cd:24:2d:18:59:c7:a5:01:ae:d4:
a6:03:be:c6:2c:d5:f7:6f:60:00:e8:fe:98:1f:8a:48:8b:ae:
29:92:14:de:c0:ae:8c:2b:10:d8:45:64:5a:c5:ec:a7:df:e6:
98:16:5b:77:33:3c:7a:e3:8a:d1:7c:df:01:8a:e4:d1:46:c0:
0d:a6:7f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:45:19 2025 by rpki-client