Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/zs6ZXDVhulOywUO2T8QRP9BjX5c.roa
File: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (raw, json)
Hash identifier: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=
Subject key identifier: CE:CE:99:5C:35:61:BA:53:B2:C1:43:B6:4F:C4:11:3F:D0:63:5F:97
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 019422FC1CE7C64830C6078C93BC463CBDF5
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/zs6ZXDVhulOywUO2T8QRP9BjX5c.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198333
IP address blocks: 176.123.51.0/24 maxlen: 24
194.139.6.0/23 maxlen: 23
194.139.6.0/24 maxlen: 24
194.139.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1c:e7:c6:48:30:c6:07:8c:93:bc:46:3c:bd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cece995c3561ba53b2c143b64fc4113fd0635f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:c8:98:57:6e:a6:5e:78:fd:37:1e:3d:9f:
84:3a:21:c5:fe:e7:b7:75:14:8f:2a:2d:31:d1:fa:
4c:e0:8a:a8:42:bf:6a:ab:4e:79:48:08:d1:f8:9c:
a8:aa:d5:03:17:ea:e8:3b:b7:50:ab:cd:15:64:a0:
88:73:4b:e1:c6:3a:4a:e9:04:bf:f6:76:17:1a:8e:
d1:a9:43:7e:d6:71:c7:d4:94:f8:ea:2a:33:b4:a7:
00:b2:ca:83:e9:e9:66:eb:37:f9:82:04:73:63:d5:
98:b3:b8:56:5f:34:6f:ee:da:bc:7f:99:23:41:fc:
06:bd:3f:9a:06:08:37:ac:11:e4:c2:2f:20:46:76:
ad:ac:92:c4:8e:84:b8:61:49:99:66:f8:8e:5d:37:
c5:cd:da:a6:44:7b:b1:2e:80:29:ee:99:5c:7c:6e:
95:f2:3d:54:aa:3d:36:42:57:6f:3e:8e:fd:6c:04:
aa:31:5c:8b:1f:14:5d:67:3b:96:e8:8f:ee:2b:36:
32:91:13:7c:98:ea:5b:5c:16:5b:75:05:60:31:60:
42:34:1b:a4:ab:97:7f:6c:31:61:0a:5e:35:b3:f9:
87:af:1d:cd:16:cc:54:6a:87:a8:55:96:e8:06:ce:
f6:e5:ca:cc:1c:1b:3c:f1:f3:3e:1e:2c:57:4e:f4:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:99:5C:35:61:BA:53:B2:C1:43:B6:4F:C4:11:3F:D0:63:5F:97
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/zs6ZXDVhulOywUO2T8QRP9BjX5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.51.0/24
194.139.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:8e:c5:7e:2e:f4:05:76:27:a3:08:d3:1f:3f:a5:3f:8f:7b:
22:5b:14:d4:da:8b:fa:2f:37:89:1f:e7:3a:8a:f1:dd:e8:8b:
6e:c3:45:8c:31:f5:e9:40:9e:a8:78:bf:6b:48:06:c2:30:28:
07:bc:ae:83:1b:bb:48:8c:4f:73:6d:e1:6d:34:b6:71:a1:2b:
15:65:8a:1e:33:59:6f:84:b4:2f:ba:e9:ed:42:9d:f5:e7:0c:
26:d2:db:56:59:3b:ae:cc:17:de:93:4a:15:20:ef:51:58:27:
9b:69:66:57:0c:41:b5:ed:65:5b:f2:73:dc:63:7e:ff:6f:25:
4e:1e:f5:fe:4a:bc:76:0a:1e:84:96:0d:86:69:ab:11:bf:18:
fc:bb:99:af:c8:d3:5a:91:36:7b:6e:03:53:64:00:2c:ce:ca:
a5:c6:67:1a:41:52:d1:c1:68:99:33:c4:cc:b9:0c:d2:1b:1a:
87:75:3c:45:b2:08:57:7b:ba:44:6f:cc:c6:26:a0:c7:f2:4b:
f1:86:07:da:bd:c9:4d:82:66:60:f4:7e:43:ed:28:49:d8:91:
a7:30:60:bf:b0:41:d3:79:1f:33:75:57:32:3d:ca:10:08:b0:
2d:89:65:09:04:2a:4e:ab:4b:8a:e2:c3:0f:11:5f:37:00:d8:
7c:1e:2c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:01 2025 by rpki-client