Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rzJVIGsduhfXSpA5qy2fKpuwM3c.roa
File: rzJVIGsduhfXSpA5qy2fKpuwM3c.roa (raw, json)
Hash identifier: 5XnocgFnvXY/ACI6AWNL7eD0J0MM7M9pOe3jpYt7g8w=
Subject key identifier: AF:32:55:20:6B:1D:BA:17:D7:4A:90:39:AB:2D:9F:2A:9B:B0:33:77
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9BEA2AC58DBC3CEE183AD151BC4D
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rzJVIGsduhfXSpA5qy2fKpuwM3c.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59941
IP address blocks: 141.101.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9b:ea:2a:c5:8d:bc:3c:ee:18:3a:d1:51:bc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af3255206b1dba17d74a9039ab2d9f2a9bb03377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:c6:56:00:c3:e9:e4:32:ab:b1:80:bd:00:
6b:db:dd:4b:e6:e2:ec:32:b2:a9:59:6a:b1:95:2f:
a8:9b:2e:9f:fa:62:b1:53:e0:fd:92:39:32:7e:88:
1f:fd:79:79:48:56:a2:de:d2:40:52:30:a5:98:00:
ce:b4:f1:a9:e0:03:15:a2:43:51:25:8a:85:a6:54:
9f:58:2b:ed:17:5e:d4:28:3b:36:c1:e8:d9:d0:c2:
b0:5f:f0:f7:d4:39:27:79:5f:84:94:ed:f2:95:48:
62:45:61:ae:9c:3b:3d:e4:e9:cb:99:c4:27:cf:0c:
0d:4d:b3:d4:96:f4:77:66:8b:6f:36:eb:6f:db:2b:
2a:6e:ea:c1:54:bd:bf:1a:9b:5e:e0:a1:06:68:1d:
24:27:9e:fb:6d:fc:bc:7d:eb:8e:bc:a8:8a:da:f7:
30:ae:65:ec:1f:10:a6:ac:e4:1c:15:a1:af:ee:d5:
86:99:c1:69:42:6a:99:71:71:c1:56:a6:27:c2:67:
9f:5e:ff:f0:8a:2e:03:89:d0:33:ed:82:e1:c9:6f:
41:d1:d6:a6:88:9a:43:0a:63:da:43:5b:4c:fa:7d:
1a:17:ba:d0:41:31:71:4e:f2:60:e7:44:48:8d:e2:
d6:32:01:c2:cf:17:3e:8d:01:ba:27:41:ea:fd:b2:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:32:55:20:6B:1D:BA:17:D7:4A:90:39:AB:2D:9F:2A:9B:B0:33:77
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rzJVIGsduhfXSpA5qy2fKpuwM3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:32:33:44:fa:93:cd:e9:76:be:cc:26:d9:40:04:46:0f:29:
da:27:42:47:47:cc:02:92:08:07:36:89:4c:b7:e2:cb:28:4a:
e2:38:a3:37:98:70:56:a7:4d:af:7e:26:77:ea:dc:e8:77:f5:
0a:bd:b2:08:39:32:c3:b1:2e:05:ee:b1:4f:3d:03:cb:c9:4c:
e6:07:ce:bf:cf:49:d7:69:8d:2d:d6:31:20:c6:93:9f:f1:2c:
31:72:0e:ef:85:cc:79:46:09:cf:29:70:e2:4f:f3:c5:27:75:
b0:74:7c:90:57:7f:42:bf:58:c5:ee:b9:8a:a8:22:67:f3:26:
92:68:04:0a:88:3a:dc:54:a4:dc:37:8f:19:97:dc:71:85:af:
0d:92:2c:12:08:8d:3f:0b:8b:cb:65:ed:b6:54:ef:3a:b3:4a:
7e:d8:4e:32:12:16:d1:24:9a:be:b7:2d:26:c9:59:42:37:f2:
3e:a2:bf:0a:92:8b:1c:2a:37:4a:ac:e6:b8:7a:08:14:b4:aa:
7d:d6:6d:b8:d7:21:66:e8:71:81:ff:ea:bb:f5:9d:e5:b7:8a:
6a:fc:ff:c6:ef:87:2c:b9:c5:bb:53:51:35:4f:7c:f4:0d:c9:
a5:cf:df:cb:56:d0:fe:6c:5b:4a:e7:0d:ef:51:71:93:ca:d9:
7d:31:7a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:44:28 2025 by rpki-client