Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/z6jYSnHDtoGGfHKYIRCDy4kC3uc.roa
File: z6jYSnHDtoGGfHKYIRCDy4kC3uc.roa (raw, json)
Hash identifier: Vi9kGfRbZv/6QO+j/QQ2QU1ueyC8xJ89Nu2SL4QOCaI=
Subject key identifier: CF:A8:D8:4A:71:C3:B6:81:86:7C:72:98:21:10:83:CB:89:02:DE:E7
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0194DC62233AA0BB1368E457DC1D33D212E4
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/z6jYSnHDtoGGfHKYIRCDy4kC3uc.roa
Signing time: Thu 06 Feb 2025 17:50:06 +0000
ROA not before: Thu 06 Feb 2025 17:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 195.216.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:62:23:3a:a0:bb:13:68:e4:57:dc:1d:33:d2:12:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Feb 6 17:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa8d84a71c3b681867c7298211083cb8902dee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:a7:e3:73:47:f0:76:88:cc:81:f5:ab:5d:
d0:1a:3c:9f:b7:02:f6:fe:25:bc:96:d4:a0:b5:79:
73:99:c1:8c:af:0e:ec:6f:f0:62:a0:ff:52:91:c1:
62:d8:74:98:83:a2:b0:38:6c:7f:6d:dc:ef:ba:4b:
75:03:d4:1b:aa:12:61:7f:89:94:0e:85:1d:bf:f4:
e8:bb:1f:9f:87:a3:92:9b:9a:36:e5:72:ab:e9:7f:
40:96:4b:d8:79:bc:2f:16:a6:5a:96:0b:a0:15:8a:
ca:1b:26:5b:8e:bd:c6:ee:5d:0f:91:97:fb:ba:57:
30:40:c5:25:a5:f5:c1:40:66:17:4d:94:89:a4:e9:
58:da:0a:5a:17:21:93:c3:fd:d2:c6:29:85:06:c6:
de:04:6d:6a:e5:34:4b:44:42:9a:4f:0f:d4:14:36:
ed:7e:91:df:9e:91:b1:62:ad:18:31:6a:3b:bc:64:
c5:f0:c7:3a:21:ac:86:88:0a:ab:bc:3e:57:5e:e6:
a3:45:f5:19:d3:d2:c2:5f:21:0a:e3:93:fd:ad:e9:
21:11:af:8d:ee:09:ee:cb:f5:ac:77:40:31:70:33:
75:f6:b6:17:ef:81:03:07:fd:80:84:78:97:82:43:
13:17:1d:7f:c3:1c:43:eb:c2:26:fe:4c:2e:00:6e:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:D8:4A:71:C3:B6:81:86:7C:72:98:21:10:83:CB:89:02:DE:E7
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/z6jYSnHDtoGGfHKYIRCDy4kC3uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:6d:cc:25:47:1b:17:b6:7f:ae:29:5e:c1:7a:90:1a:42:e2:
7e:d0:89:a4:c8:80:90:82:e7:7c:b8:97:10:1c:10:ec:13:a5:
85:45:78:7e:ce:47:c1:fb:1b:a5:32:4a:7b:bf:6d:a7:84:fb:
16:d5:ab:c9:d1:92:a5:e6:6c:4f:f0:fe:56:50:52:0a:7a:4d:
a9:70:dd:60:a7:1a:02:75:e8:5f:83:6f:02:d1:0e:cb:4e:bd:
fe:49:eb:7a:fb:f3:3d:b1:91:e2:b7:ca:d6:46:35:b2:5d:79:
80:d7:37:79:6e:fd:03:a0:1a:8a:a2:14:6e:d0:af:0a:4c:03:
f8:58:17:2c:3d:75:93:69:b4:b9:b9:1d:97:6a:f0:72:e1:e7:
e4:ae:e0:76:5d:4e:b6:8a:e7:2c:c6:f0:8d:ed:85:c4:e3:f1:
90:16:49:d1:3d:0f:75:b7:7d:d1:5b:80:2d:c0:39:18:13:6b:
7e:c0:97:f8:df:aa:c4:3b:7c:80:ae:82:a6:4b:c5:5c:54:a0:
d6:ae:d0:a5:92:7f:13:b6:48:5f:8e:26:cf:33:f6:bc:1a:6d:
eb:6a:2e:70:e6:38:cd:bd:ce:43:b2:63:71:2b:8f:df:b1:40:
64:27:da:1f:b1:b6:35:42:9f:63:b9:d5:42:e5:95:c4:5b:17:
1f:a0:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:52 2025 by rpki-client