Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DznoRwoQJh4KhGbkRyuIZ1NLd94.roa
File: DznoRwoQJh4KhGbkRyuIZ1NLd94.roa (raw, json)
Hash identifier: s4Hdk2wd9P4fFCA9rD+lXamVR5etVoD7uDrVDXJudcw=
Subject key identifier: 0F:39:E8:47:0A:10:26:1E:0A:84:66:E4:47:2B:88:67:53:4B:77:DE
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0195DCDCC36F43F47EBE09D7ADA5A8D7EDE5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DznoRwoQJh4KhGbkRyuIZ1NLd94.roa
Signing time: Fri 28 Mar 2025 13:06:50 +0000
ROA not before: Fri 28 Mar 2025 13:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202700
IP address blocks: 178.170.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:dc:c3:6f:43:f4:7e:be:09:d7:ad:a5:a8:d7:ed:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 28 13:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f39e8470a10261e0a8466e4472b8867534b77de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:9b:d2:2d:32:f0:1e:6d:68:2e:78:4f:a1:
b1:ad:75:33:d5:8d:cd:02:4f:07:5b:7a:97:b7:11:
96:60:f7:59:7f:32:9c:15:5d:07:36:97:c3:e8:45:
ff:18:f2:10:ca:8d:69:63:c2:c2:cd:23:64:03:af:
18:85:e9:99:bf:15:c3:61:fc:a7:b5:54:b4:5e:61:
e8:2d:c4:2f:f6:3e:81:d8:9e:8d:a0:6b:38:19:d4:
5f:a7:4b:fb:c4:fc:35:de:ad:98:2a:04:cf:cd:b8:
df:1f:49:5c:93:d5:90:4d:b3:f2:1b:c3:2c:49:12:
38:c8:02:b9:1e:66:83:a6:a1:2b:2e:52:d5:9a:6d:
2b:73:de:be:7d:e2:7e:1e:d0:17:28:fd:e3:56:af:
5b:57:34:b8:8f:74:dd:99:4d:35:0a:86:97:6f:6b:
65:62:88:2d:e1:89:8b:30:b9:4b:fc:4d:c8:02:2c:
9f:33:6e:f0:c8:ff:fd:a5:e0:c3:eb:1d:36:6a:de:
32:d5:43:47:38:e9:ce:61:ff:58:21:96:ba:f2:da:
1e:fc:13:62:93:20:a4:f7:46:50:22:c2:c0:b5:b3:
96:a4:54:b5:5a:99:28:e5:d2:48:cc:aa:8b:ab:9c:
8d:9b:1a:cd:16:7f:78:6a:aa:ff:ed:63:16:58:87:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:E8:47:0A:10:26:1E:0A:84:66:E4:47:2B:88:67:53:4B:77:DE
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/DznoRwoQJh4KhGbkRyuIZ1NLd94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.247.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7b:cb:ba:9c:a0:78:5f:38:ed:f8:b6:18:45:b0:f4:33:b6:
b5:fc:6e:da:90:0c:1f:32:68:d7:80:61:c3:47:5e:a2:12:31:
4a:cf:70:18:29:3a:d2:57:bc:81:e4:d8:82:6f:3f:e9:e8:b4:
b5:95:de:53:51:4f:0e:cb:b6:7d:62:56:3e:2e:cc:0d:8f:c2:
bc:04:45:ac:fe:e6:8a:35:1e:db:64:3d:35:fd:f7:bf:7e:0f:
f1:85:b5:69:25:59:e5:95:8c:44:17:05:49:2e:33:f4:95:78:
01:25:53:07:1c:03:fd:7f:de:db:41:a6:f6:23:ba:f8:8e:43:
b4:9c:83:51:87:ba:7a:a3:0a:08:28:3b:9e:a9:40:8a:b3:97:
40:03:d6:de:67:26:1e:b9:0e:5a:2c:cc:2d:06:77:5b:91:73:
cb:8d:bb:fb:db:09:08:1e:23:e4:ab:f6:1e:ff:5e:97:84:85:
06:6e:ae:d0:b5:1d:ca:4b:ee:3f:c4:00:a3:0b:38:5b:e5:4c:
6d:da:3b:fe:12:33:7e:15:d5:ca:55:df:18:93:46:6a:53:f5:
81:12:19:ae:c5:d2:d3:6d:ad:74:42:36:9c:a3:5a:06:f2:c8:
24:fc:5f:8e:35:a7:c5:e6:3d:9d:c5:16:b2:a9:cf:89:96:7d:
de:84:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:18:41 2025 by rpki-client