Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ZWOY1CQejAaInI5dPiW91XYX-d8.roa
File: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (raw, json)
Hash identifier: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=
Subject key identifier: 65:63:98:D4:24:1E:8C:06:88:9C:8E:5D:3E:25:BD:D5:76:17:F9:DF
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D6572FD5A7723AB83FA18978524BAE
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ZWOY1CQejAaInI5dPiW91XYX-d8.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206244
IP address blocks: 213.169.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:2f:d5:a7:72:3a:b8:3f:a1:89:78:52:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=656398d4241e8c06889c8e5d3e25bdd57617f9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:3e:2e:aa:d2:39:ab:1c:c5:be:ae:62:79:
99:de:7a:9e:ce:21:02:45:03:d7:97:72:d1:d0:73:
c1:02:06:82:99:c1:e5:7b:5f:38:40:2f:b3:ec:27:
21:23:5d:61:83:0e:b5:6a:d9:c0:95:ba:49:7d:e6:
67:7c:61:3d:f9:b9:90:46:a1:1b:5d:f1:54:bb:77:
13:72:2a:fa:50:6c:2d:88:42:de:bb:e2:68:18:54:
a7:1a:ab:a3:bf:0f:2b:7f:e6:6b:61:84:07:da:4f:
b1:cf:83:94:c6:e7:0d:8d:df:11:f3:b7:a8:7a:a1:
57:10:47:54:58:7b:b0:f5:77:18:08:4e:82:f7:d1:
3b:be:0a:b5:e9:77:a8:87:2b:21:da:6f:92:bc:7b:
fb:a6:20:1e:76:d9:44:2d:a6:d4:8f:23:95:80:dd:
5c:7e:62:8c:50:4b:bf:a1:cc:0b:ba:77:7f:74:3e:
8f:0b:cd:4e:40:6a:48:72:0c:71:b0:a7:66:98:b5:
5b:45:9a:ac:53:85:0c:54:be:fc:23:2f:be:5e:d2:
f2:13:42:a0:ba:08:03:e3:4c:f5:bf:a7:a3:60:86:
7a:a3:af:d2:8e:7a:ab:1b:74:67:75:86:e2:50:f2:
80:59:95:45:d9:13:88:b4:f7:bf:75:37:59:d8:e3:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:63:98:D4:24:1E:8C:06:88:9C:8E:5D:3E:25:BD:D5:76:17:F9:DF
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ZWOY1CQejAaInI5dPiW91XYX-d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:75:45:c0:63:1e:06:0b:39:68:6b:25:ce:0e:83:22:96:40:
93:0b:41:7e:be:05:79:6e:20:b6:f7:a0:0d:a4:15:c3:72:73:
bd:75:1d:62:46:e6:94:d8:cd:1f:45:8b:6e:67:73:9a:ed:97:
77:55:4d:0a:84:a2:55:5d:bc:49:76:fc:dd:0c:86:ea:03:61:
68:41:8e:4e:ce:7b:b8:68:27:b2:73:7c:1f:a1:3b:30:20:ee:
cb:fb:2c:53:09:6c:00:d4:f3:52:c8:f2:20:27:57:28:97:16:
cc:07:3b:da:83:f7:82:c4:6a:c6:9b:2d:3d:23:ed:de:74:20:
7e:a5:c2:61:7f:e4:65:18:94:11:22:81:e3:39:0c:33:b6:bf:
27:99:16:46:07:17:1c:2a:7e:fc:2a:04:09:60:55:12:b3:eb:
63:4a:18:e0:ae:60:6d:a8:fc:2e:90:41:8a:82:85:21:0f:d0:
43:c6:99:b7:8e:ad:1a:47:2a:90:91:01:53:81:59:ce:f7:d7:
55:36:2e:3f:f4:87:19:6a:10:f3:aa:d0:75:85:ac:0d:b7:a2:
68:d5:ce:e2:f2:5c:a0:46:4b:46:15:34:7d:90:76:4e:d1:1b:
51:67:f5:1a:9f:7b:49:a9:0d:a4:3c:d1:d8:09:c6:f4:5b:57:
e7:0b:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:12 2025 by rpki-client