Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R-zSVDF0ONe9CPw18gHe8BRUl2g.roa
File: R-zSVDF0ONe9CPw18gHe8BRUl2g.roa (raw, json)
Hash identifier: gmcvU8hJvvzqYr0kBhQ5djP5kuueZUFu4a9SI2iZ0Eo=
Subject key identifier: 47:EC:D2:54:31:74:38:D7:BD:08:FC:35:F2:01:DE:F0:14:54:97:68
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9A516BC51464090E09BF1BAAC71E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R-zSVDF0ONe9CPw18gHe8BRUl2g.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57652
IP address blocks: 188.72.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9a:51:6b:c5:14:64:09:0e:09:bf:1b:aa:c7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47ecd254317438d7bd08fc35f201def014549768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:cd:3e:a0:2d:9c:61:78:80:b9:7e:99:2e:
36:77:2f:ac:61:7f:74:29:eb:7e:4c:e4:3e:ef:61:
97:5b:ad:ee:05:23:87:98:b3:27:4f:81:4f:8c:c8:
5e:0c:c8:66:0e:40:a3:4e:9c:ff:e5:a4:12:09:24:
f1:e0:f3:91:ba:0f:59:23:6c:8d:99:57:d3:4a:4c:
14:d5:13:c2:1c:2e:d7:a6:10:5f:8d:df:87:50:c5:
95:64:03:a9:ec:b5:0f:ae:45:d5:19:9e:e7:bb:3f:
87:4a:66:5e:78:1c:8b:8b:9e:0b:40:dd:4b:ba:88:
53:5f:c0:9d:fb:b2:04:c3:90:45:e8:3c:6f:61:24:
43:4f:ca:25:90:68:d9:10:d4:ad:cb:66:ad:ab:76:
6f:4d:7b:0e:28:56:5e:29:58:3c:9f:36:f8:7c:d0:
94:f3:10:bc:21:ab:5c:4a:5b:30:32:88:ce:3d:b6:
bd:41:41:4c:1b:35:a6:d6:e3:b1:64:ba:ef:eb:a2:
c1:f8:18:0e:3b:48:30:06:74:c4:dc:c8:b6:6b:ab:
53:0f:a8:c6:f5:54:82:14:15:97:2d:c9:6d:03:96:
fa:71:16:9d:da:8f:f9:32:c6:c8:f1:f0:cc:11:d4:
26:20:41:75:2d:ee:a8:7f:44:24:4b:3f:48:41:01:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:D2:54:31:74:38:D7:BD:08:FC:35:F2:01:DE:F0:14:54:97:68
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R-zSVDF0ONe9CPw18gHe8BRUl2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.73.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d7:4c:1a:44:92:62:8e:9c:a8:de:b1:79:d0:d1:36:cb:0c:
5c:40:4c:f1:59:01:f9:07:96:c4:a0:48:33:0f:0e:91:de:8d:
da:58:77:5c:bc:c8:57:00:b8:57:fe:3d:9b:a4:90:4e:8e:9e:
b6:24:3b:28:22:27:88:85:96:8c:79:f0:9e:5d:62:0d:91:ff:
a4:94:98:c8:9c:a3:bd:c3:b5:04:d1:fd:a4:24:a7:2c:bc:16:
34:bb:1c:bb:d7:a4:75:64:62:2a:89:06:49:10:c7:93:5f:9c:
da:92:32:44:ac:6a:ae:66:9a:f5:2b:e3:c6:2b:fa:d9:5e:4c:
57:48:8a:5d:c4:a9:8a:fb:60:a9:77:52:df:6e:72:9c:58:79:
5f:3d:66:c6:4e:5f:e0:2d:44:ed:64:8a:78:bb:98:0f:97:60:
59:6a:92:37:98:b5:86:41:3f:ce:2b:68:25:30:46:b3:00:d3:
2b:6a:34:4c:15:15:40:c4:6e:81:14:bc:09:96:68:5e:ef:a4:
ca:4b:34:bf:27:d8:e3:34:b0:c4:10:08:b7:25:be:f1:9b:c5:
e4:5a:b4:36:c4:82:cc:81:3c:c4:9f:8b:f9:17:f7:b0:bf:d3:
0d:04:18:df:0c:88:49:63:1b:c2:7a:d9:88:62:63:6e:46:54:
9e:17:91:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:40 2025 by rpki-client