Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/Z9imWMQXkDi3hSx8syS_S0O-b7E.roa
File: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (raw, json)
Hash identifier: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=
Subject key identifier: 67:D8:A6:58:C4:17:90:38:B7:85:2C:7C:B3:24:BF:4B:43:BE:6F:B1
Certificate issuer: /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial: 01942827DAF05369918748840817DAAF2AD8
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/Z9imWMQXkDi3hSx8syS_S0O-b7E.roa
Signing time: Thu 02 Jan 2025 17:54:47 +0000
ROA not before: Thu 02 Jan 2025 17:54:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47369
IP address blocks: 195.248.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:da:f0:53:69:91:87:48:84:08:17:da:af:2a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Validity
Not Before: Jan 2 17:54:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67d8a658c4179038b7852c7cb324bf4b43be6fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:fe:54:99:e6:34:9a:27:a8:a6:06:30:c2:
1b:cc:71:1f:3c:80:62:b5:21:3b:f5:32:ce:bb:09:
12:06:1d:9a:e2:e0:15:f9:57:83:09:0d:f1:af:10:
f8:3c:a5:d4:26:55:b1:47:cd:7d:97:61:4f:72:8c:
bb:0b:ff:28:ba:b1:14:64:b5:0a:28:30:ca:36:6d:
f7:61:23:54:7f:c9:09:06:e6:c9:9a:e2:f7:69:7c:
4a:31:b7:b8:75:2e:0e:7a:7f:8d:a1:24:c1:07:c6:
cb:56:66:90:6a:db:40:5f:ba:e2:e1:fd:2f:33:41:
79:a9:96:e7:95:6f:eb:ed:a1:99:9f:0b:42:51:db:
16:7f:3a:45:3c:9b:c9:a0:26:72:cb:9c:f6:84:ac:
60:06:f1:2f:16:57:18:b2:fd:a9:79:4c:66:d1:38:
68:d2:a4:58:20:ee:6f:ac:b9:3b:16:1c:ae:eb:04:
76:5c:8e:43:4b:35:2d:80:9f:9d:72:2e:8c:8b:ee:
57:d6:36:97:15:16:08:5f:71:e8:e9:7b:54:27:ba:
fe:0d:d1:49:f0:bd:1a:d7:42:fe:44:ee:41:e3:c0:
64:77:cd:f3:92:7e:8f:c0:e0:fa:5d:81:ce:df:13:
94:56:b1:05:72:ef:19:bf:7f:62:69:e6:bc:b6:d5:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D8:A6:58:C4:17:90:38:B7:85:2C:7C:B3:24:BF:4B:43:BE:6F:B1
X509v3 Authority Key Identifier:
keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/Z9imWMQXkDi3hSx8syS_S0O-b7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a9:a7:43:a2:64:2c:67:db:5b:07:df:40:1c:35:9b:d0:e4:
f2:c2:b4:52:c7:ea:42:14:21:2d:52:74:2c:6e:98:ec:41:44:
f1:33:20:54:c5:29:85:26:25:33:78:a6:ab:cb:43:26:b3:83:
86:2c:af:b9:76:6a:76:be:b5:e9:82:5d:dd:24:49:45:47:5b:
66:26:a4:15:60:61:8c:25:83:bf:f1:f5:a9:95:11:7c:1b:d8:
62:15:8c:05:92:9e:4a:72:b7:d0:24:2a:7f:3e:27:fd:ef:6e:
72:67:ed:0e:23:26:50:16:66:24:9e:e4:6a:0e:ff:d4:aa:a0:
e4:89:19:9d:5d:df:c5:c9:93:97:dd:c9:28:60:be:54:45:d6:
ab:92:25:59:d2:2a:8a:5a:df:ce:3f:21:41:19:37:be:ed:f0:
5e:c2:10:a4:c9:88:7e:62:5b:a6:5b:3d:d1:7b:52:ff:9d:87:
49:eb:37:e5:c7:1e:45:23:77:41:50:b7:a3:ff:3d:63:ea:63:
c5:b1:58:a2:55:28:d6:e4:61:3b:cd:58:db:ab:64:04:0e:5b:
c2:0a:0c:31:76:5f:da:8c:50:cc:07:29:53:57:46:f7:68:dc:
51:1c:b0:03:22:fe:33:1d:fa:b5:e5:f6:00:c7:2b:c6:06:b0:
3c:47:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:52 2025 by rpki-client