Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa
File: zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa (raw, json)
Hash identifier: nyGClrw0gv+ItcF8Z6pEhgDK/R+w+uNDhXQXgQXv0GY=
Subject key identifier: CC:18:8F:69:EB:B4:00:A8:59:14:02:55:91:21:7A:0B:3E:5E:2B:A6
Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial: 019424B289A48CAE30568222F72842E252E8
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa
Signing time: Thu 02 Jan 2025 01:47:47 +0000
ROA not before: Thu 02 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16085
IP address blocks: 146.109.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:89:a4:8c:ae:30:56:82:22:f7:28:42:e2:52:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
Validity
Not Before: Jan 2 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc188f69ebb400a85914025591217a0b3e5e2ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:ad:0f:e0:6e:4f:e7:cd:e1:75:10:b2:9c:
76:9d:67:51:9f:19:93:4a:a5:70:06:78:39:a2:49:
9b:99:e1:66:54:a1:45:0d:e8:c1:0c:a1:ac:20:bc:
d5:c1:51:f1:9e:8b:1f:01:57:8f:86:ef:38:a1:8b:
e0:71:ab:e1:2e:53:b4:67:fd:b7:89:88:c0:c2:9e:
0b:59:42:a2:06:0b:87:ac:3f:80:ec:b7:e3:47:ca:
4d:ef:68:fb:36:88:2e:fe:2d:01:f5:ca:1d:73:c7:
3d:05:50:b8:11:d4:ac:6f:7c:1e:6e:58:7f:dd:38:
01:2f:d6:db:68:7e:ce:53:4b:b3:7d:ec:4e:94:da:
a8:c0:f7:3a:48:53:a7:5f:3b:66:6b:2d:d7:1d:78:
85:9e:ee:f1:90:6b:31:3e:41:17:31:b7:01:95:3b:
73:79:99:73:b4:c3:ab:b3:2a:b8:52:c5:20:f3:2c:
3f:01:b9:1d:51:e4:d7:be:78:08:4c:ef:b3:03:76:
3c:07:27:9c:a4:ab:04:3c:62:f7:39:da:ac:fd:5d:
5d:4d:46:9e:c6:ae:be:08:33:b0:83:9c:2e:8d:dc:
7d:86:11:0a:17:56:be:2f:7f:8e:63:59:05:fb:58:
85:84:7e:00:e9:ac:fe:cd:65:d5:47:69:b1:a7:97:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:8F:69:EB:B4:00:A8:59:14:02:55:91:21:7A:0B:3E:5E:2B:A6
X509v3 Authority Key Identifier:
keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.109.8.0/21
Signature Algorithm: sha256WithRSAEncryption
51:20:1a:b0:35:5a:34:7b:fa:49:1a:d5:95:15:c7:5c:54:96:
61:26:a5:18:3b:45:ef:d0:0c:ca:22:73:00:7c:19:19:12:0c:
4c:44:21:9c:fc:0b:d0:77:be:14:01:40:68:ed:73:2f:a4:93:
61:a1:b5:64:36:65:73:c0:f3:43:75:d3:cf:04:a1:4e:f0:62:
2b:96:aa:d9:af:ec:44:b4:38:ac:6a:b0:9b:00:c8:f0:3d:09:
56:02:61:01:3a:f5:db:41:ba:ce:5e:45:e3:5d:85:a2:f2:f5:
63:e5:d5:e6:3a:d9:3d:34:7c:a1:86:f2:6c:27:a7:4a:1a:83:
b9:7e:03:75:c1:e4:c1:73:7b:3b:11:2e:18:a4:03:5b:57:10:
75:c5:3f:8e:fb:54:bf:6d:b1:17:a3:3d:96:bc:d0:0c:1c:a3:
f3:03:bd:d5:bd:08:3b:b9:48:2c:f8:1e:3c:8a:ac:43:30:5d:
e1:07:e3:48:ae:9e:04:ba:f9:7d:5d:1d:de:39:e4:db:b7:36:
64:5e:ea:8b:6a:a3:fb:87:6c:82:d9:6c:7d:f0:f1:19:db:d0:
26:c1:a3:b4:a4:a5:ef:76:b3:d3:9d:88:67:31:20:03:68:50:
f6:50:4d:f0:fb:69:6c:1e:dd:0c:4e:4a:e8:58:13:05:cf:ea:
d4:c7:b5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:17:51 2025 by rpki-client