Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/zPseRt5WlA5PNoUFkbv3vmUfDV8.roa
File: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (raw, json)
Hash identifier: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=
Subject key identifier: CC:FB:1E:46:DE:56:94:0E:4F:36:85:05:91:BB:F7:BE:65:1F:0D:5F
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 01942747B2DE29E390ED5D19AFD8315A5FB6
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/zPseRt5WlA5PNoUFkbv3vmUfDV8.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6831
IP address blocks: 188.94.190.0/24 maxlen: 24
193.238.100.0/22 maxlen: 24
195.178.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b2:de:29:e3:90:ed:5d:19:af:d8:31:5a:5f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccfb1e46de56940e4f36850591bbf7be651f0d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:90:89:76:ac:2e:f8:83:e2:0e:a7:59:52:
15:75:c2:db:66:25:a1:18:37:42:da:f9:1a:6d:d4:
ee:49:36:04:e8:dd:6b:4e:e2:d2:ef:de:be:e6:0a:
00:d0:96:7e:58:dd:a8:14:24:73:89:de:00:ba:e8:
c5:c7:13:0a:60:cd:b4:2a:b7:59:79:b9:cf:5d:12:
af:8a:b8:e6:ef:9d:87:bb:bf:de:34:92:e0:10:53:
10:03:bd:d4:14:27:e1:bb:03:a3:59:91:8d:68:a5:
21:9b:ac:6b:ca:8d:22:bc:fe:c7:86:ed:69:0d:3e:
8f:df:27:47:cc:03:7c:2a:f4:8a:17:b3:d6:3c:90:
51:da:6e:da:31:0f:20:15:f3:6b:8a:e8:be:96:ec:
3a:93:8a:1a:a1:75:a8:11:89:ef:9b:2f:cb:ea:3f:
c1:d0:19:20:7c:4a:a0:2b:10:71:c6:3d:4f:e5:70:
b2:a5:d3:29:58:6f:55:ed:3f:3e:26:ba:91:16:0b:
5e:3c:ea:1b:91:81:71:77:50:74:63:87:49:a9:7f:
6b:3d:4b:dd:bf:cb:1b:c8:6a:37:3e:98:6e:86:28:
a1:77:b9:88:3d:d7:53:40:d9:0e:8d:6e:e1:ad:b2:
6a:54:f3:bc:87:5f:56:7a:ad:db:74:3b:74:a1:f0:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FB:1E:46:DE:56:94:0E:4F:36:85:05:91:BB:F7:BE:65:1F:0D:5F
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/zPseRt5WlA5PNoUFkbv3vmUfDV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.190.0/24
193.238.100.0/22
195.178.28.0/23
Signature Algorithm: sha256WithRSAEncryption
02:c6:a5:00:43:19:02:31:67:9d:3d:71:14:88:96:77:2f:0c:
0d:68:23:dd:a9:c0:9b:8b:38:14:ad:c7:42:f8:76:76:86:ac:
e5:58:17:08:94:0e:91:1d:5f:fc:5f:02:e2:00:df:be:81:3f:
b0:9d:b8:b3:0b:18:83:93:06:aa:40:3f:3d:74:2d:30:4b:e4:
02:8c:9a:5a:d6:f9:55:a3:7f:36:1a:7e:52:9d:a5:2e:d5:6e:
79:96:ee:0a:b3:2b:3f:e2:0e:17:48:c1:16:71:18:44:84:3e:
d7:7c:dd:c7:e2:c2:4b:71:71:b6:a5:5a:d6:6c:be:8d:d5:13:
9c:71:05:71:2f:8f:4d:7e:1b:c6:64:0d:67:26:2b:bc:8c:e3:
ba:0b:8d:fa:68:d0:c1:c5:73:99:e7:2f:53:a5:46:e0:81:ab:
28:a1:c4:58:c0:6a:53:11:e3:38:3e:bd:82:7f:ff:d1:f5:a7:
7b:58:07:97:7b:98:18:67:4b:e3:50:14:b7:d1:a8:bf:2f:a5:
33:90:f4:79:3a:50:28:8e:9b:1c:8f:05:2e:68:99:77:b7:b1:
fa:11:e9:ac:f3:82:66:a4:21:89:66:a2:06:32:a1:41:20:6c:
59:b1:5f:e6:cb:16:b3:97:06:39:9d:9e:20:a4:0c:a2:eb:c3:
63:b7:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:21 2025 by rpki-client