Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/fziBQYI5VQChSmnvHhKXUMLYNKw.roa
File: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (raw, json)
Hash identifier: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=
Subject key identifier: 7F:38:81:41:82:39:55:00:A1:4A:69:EF:1E:12:97:50:C2:D8:34:AC
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 019422FBF739D9BDECE471E787316235A58E
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/fziBQYI5VQChSmnvHhKXUMLYNKw.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200020
IP address blocks: 212.114.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f7:39:d9:bd:ec:e4:71:e7:87:31:62:35:a5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f38814182395500a14a69ef1e129750c2d834ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:e5:53:40:d4:d9:b0:2d:80:12:7d:26:58:
32:2d:b5:8f:62:e1:e9:8f:0a:2c:64:10:38:df:d3:
1f:ba:bb:78:17:a2:45:19:7f:f6:b0:db:86:a6:77:
2e:54:f0:a3:ff:04:7f:47:15:63:cd:4c:0c:e9:ee:
bd:fb:2d:11:01:16:15:4d:d4:75:60:12:39:ad:ef:
37:71:4e:7b:c6:94:1d:c4:d3:32:13:b5:11:f8:81:
63:7d:1e:ad:d8:fc:71:c9:fa:ae:cd:f0:14:16:3e:
d3:de:92:87:ec:fe:75:20:19:86:19:1c:ce:51:7a:
4f:9a:63:f0:a0:d3:7e:22:0c:1e:1a:51:66:7f:bd:
0c:6f:1a:44:aa:41:5f:64:b7:87:84:14:8f:1c:8f:
0e:c0:c6:b0:3c:ad:f0:b7:bb:2c:f0:91:ef:8e:b2:
3e:6a:c4:c5:95:2d:88:f5:fb:df:02:38:72:80:8d:
c1:3e:c6:02:43:93:a1:87:24:ad:70:ff:30:d1:8c:
26:66:52:db:63:10:98:e4:53:b1:04:38:d2:50:a8:
ac:80:e6:ab:93:f8:fb:0f:6f:0c:59:90:a1:b6:5e:
f4:1b:8f:82:6f:c5:5a:51:00:e7:87:c8:b3:59:af:
c6:b5:03:5e:8e:a2:11:d3:f2:5a:fb:0d:2a:40:8d:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:81:41:82:39:55:00:A1:4A:69:EF:1E:12:97:50:C2:D8:34:AC
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/fziBQYI5VQChSmnvHhKXUMLYNKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6e:77:4a:64:4f:23:2f:94:a7:5f:9f:35:c2:71:69:f9:66:
42:ea:4c:a8:cd:91:2b:c5:4b:9a:73:2c:56:2b:38:39:a3:ef:
e3:53:5d:e5:c2:fb:0b:b8:d0:7c:d0:87:54:5a:de:dc:94:02:
94:26:3f:e8:b0:e5:e4:fc:48:d2:8e:82:0d:35:e9:f4:79:5a:
3f:15:d2:52:06:08:2d:13:44:a8:4d:5f:37:bc:92:64:5b:21:
10:6d:65:f2:52:7e:c1:40:08:5d:d4:95:78:2b:94:6b:d0:e3:
2d:c8:e4:8c:da:97:e1:7f:68:58:73:bb:fb:45:64:bd:06:51:
98:3a:4d:ba:da:2d:03:96:c1:01:b7:53:0f:47:cb:d3:49:54:
4d:49:27:3a:7d:af:80:5c:a1:32:a6:5b:45:8c:a5:0f:ab:b7:
b4:88:30:6c:d6:a5:04:de:8d:0c:65:d2:31:3f:6a:c1:df:9f:
53:0c:f6:a3:fd:9c:20:c8:fa:ec:20:64:a9:89:d0:ae:de:a6:
90:12:cc:6b:71:75:4e:f0:82:3d:c3:9d:68:43:9f:5e:dd:a9:
4c:d1:9d:32:81:51:fa:f3:94:e0:d8:78:da:99:52:ac:52:55:
ee:35:1a:32:03:61:cd:b1:5d:62:b7:f1:b3:de:09:63:dc:09:
95:ad:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:54:24 2025 by rpki-client