Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/zeSSBsoxeiaEub6sPGDgBihsYlQ.roa
File: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (raw, json)
Hash identifier: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=
Subject key identifier: CD:E4:92:06:CA:31:7A:26:84:B9:BE:AC:3C:60:E0:06:28:6C:62:54
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 019428232D5CCA02D89F787D7CEBA3D24D6C
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/zeSSBsoxeiaEub6sPGDgBihsYlQ.roa
Signing time: Thu 02 Jan 2025 17:49:41 +0000
ROA not before: Thu 02 Jan 2025 17:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56921
IP address blocks: 195.128.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:2d:5c:ca:02:d8:9f:78:7d:7c:eb:a3:d2:4d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Jan 2 17:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cde49206ca317a2684b9beac3c60e006286c6254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:35:d4:19:54:83:be:0d:e9:9d:72:9d:a4:
6e:2a:92:9c:10:f3:47:62:30:34:a5:b6:d1:29:e9:
fe:8b:04:96:9c:25:0d:25:1d:dd:4b:6d:f2:ee:32:
a6:56:82:81:c9:66:dd:94:64:b6:16:a7:fe:cf:8f:
60:7e:f6:be:25:12:e6:97:dc:b2:19:20:2f:f4:15:
67:af:45:a6:9d:43:38:62:7d:05:2a:f2:00:21:04:
92:25:d0:c0:8b:b5:10:c0:c1:b2:53:ab:1f:82:9c:
a5:71:28:17:67:68:6c:d1:eb:e3:c5:6b:8b:5d:58:
d8:3b:26:dc:ee:c1:fa:0d:8f:13:78:ef:3a:ec:ff:
0c:7a:99:a3:0d:ad:ba:7f:86:ff:ea:d6:63:03:76:
83:4a:96:e3:b6:39:b6:c4:a0:d8:d0:84:81:1a:bb:
13:9d:23:bf:83:9f:a0:ca:27:70:e5:d1:03:9b:56:
b6:22:c7:52:57:53:52:1a:10:e0:97:9d:6e:d9:c1:
21:75:a6:60:27:30:e4:ce:8d:c7:1c:3a:64:cb:23:
43:90:6a:2d:f6:33:37:19:67:46:ca:51:fa:d1:c6:
83:19:87:a9:a7:e4:bd:7e:c0:13:5a:1c:05:02:49:
10:9e:91:64:69:97:63:a8:53:c3:14:a8:46:b4:c9:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E4:92:06:CA:31:7A:26:84:B9:BE:AC:3C:60:E0:06:28:6C:62:54
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/zeSSBsoxeiaEub6sPGDgBihsYlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d2:1d:37:11:64:e6:da:b5:60:ac:ff:fa:b8:41:75:84:5b:
90:6d:85:4a:27:61:98:f1:a8:a1:9a:d5:52:23:28:bb:1e:a3:
ea:6d:24:25:e7:49:ee:18:e7:0d:ac:42:f9:f9:cb:ac:04:fd:
eb:82:65:cc:86:2d:85:4e:95:3f:44:e0:0d:76:56:07:23:00:
5a:b7:86:d2:ce:87:8a:7e:92:d5:c1:62:b3:36:3c:4e:3a:cf:
fc:d3:4a:d3:78:22:db:a3:21:5a:7e:dd:c2:2a:d1:13:78:05:
4d:66:ec:ce:e4:b9:b1:4a:9d:c4:3a:4a:4b:ef:c0:c7:55:9f:
18:15:34:3b:19:ed:2e:6d:5c:11:71:1b:d2:4c:7c:39:b2:ce:
0a:09:fb:f2:2e:6e:48:23:7d:80:22:72:f6:d5:cb:9e:68:d3:
3b:0f:48:4e:f1:6b:93:fe:ef:f3:3e:fa:32:f3:75:90:23:ac:
b4:06:01:bf:1f:75:b8:12:e2:86:e7:de:2f:29:24:9d:d9:20:
f3:d9:9b:c4:32:07:0d:1e:e0:c4:6c:9e:3f:a2:a8:64:d5:b8:
1b:00:8a:ca:17:e2:da:8e:ec:66:a0:33:43:a1:45:13:48:5d:
16:47:05:88:a2:66:f3:0a:00:75:d9:1e:7c:9a:c5:d3:5b:e1:
ff:23:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:23 2025 by rpki-client