Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa
File: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (raw, json)
Hash identifier: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=
Subject key identifier: 81:96:EE:84:77:2C:6F:FD:65:3B:65:E2:BB:77:72:A7:24:2B:AE:F2
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0194221F7A59318D0FA8E30367E3BBFC2B94
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60759
IP address blocks: 188.95.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7a:59:31:8d:0f:a8:e3:03:67:e3:bb:fc:2b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8196ee84772c6ffd653b65e2bb7772a7242baef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:52:f0:fe:23:a8:b5:4c:b9:b7:68:81:4c:9a:
2a:f9:1d:48:7b:b9:b4:b6:e2:b1:2c:74:8c:ff:39:
b2:d9:e7:6c:f3:7e:1a:0a:f5:49:68:0b:63:b0:49:
05:21:a9:9a:6e:ec:d9:1b:eb:49:d6:bb:5a:7c:49:
7e:b1:f4:61:ee:b4:73:c6:de:ef:ae:36:41:8d:13:
59:bd:f0:6e:f5:b9:00:33:cf:a4:26:c9:ee:0b:1f:
a8:a2:3a:4d:0d:38:a1:12:5f:0f:b3:f5:09:00:42:
56:9d:08:e7:61:44:b2:f3:d8:33:b5:d1:61:1f:89:
7e:22:5f:e2:d4:b4:7a:70:e0:cb:3d:c0:b9:5b:6c:
25:c3:7f:f4:fe:1e:d0:60:52:bb:07:1d:52:98:6c:
ea:3d:c4:e8:46:d8:19:7c:8b:58:66:48:15:aa:99:
2a:43:fc:da:65:23:67:cc:52:19:b7:ea:cd:12:66:
5b:e0:29:3e:87:ad:e7:af:d5:3e:cd:36:e7:53:b8:
92:07:24:69:36:40:73:47:73:b9:ea:73:35:99:1a:
5f:d1:b6:31:f8:bb:22:0d:71:db:5d:f7:83:01:54:
1f:af:23:29:a6:53:58:d2:87:64:f1:3f:21:70:2c:
ea:06:3a:b6:a3:f0:1f:af:4a:9b:6f:65:b2:c7:16:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:EE:84:77:2C:6F:FD:65:3B:65:E2:BB:77:72:A7:24:2B:AE:F2
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.91.0/24
Signature Algorithm: sha256WithRSAEncryption
78:6b:b0:02:ec:c2:8c:23:35:9d:66:ab:fa:46:b5:1a:12:ad:
6a:c7:52:91:31:81:d9:f7:0f:a5:61:02:fb:fc:e8:d7:0f:92:
e0:d8:51:b1:6e:2e:ba:66:23:63:a5:3d:91:5d:74:55:8c:8b:
56:a1:ba:1a:2a:5f:26:f6:44:2c:6c:a2:ac:1f:03:d6:3b:9b:
33:db:dc:e7:84:3f:b0:35:5d:09:b2:dc:24:92:27:6c:a2:ef:
e8:f1:e6:6d:07:88:e0:ee:b1:ce:f9:a3:2d:09:7c:28:ee:3e:
22:9f:c3:e5:06:41:db:51:7d:4c:75:57:6f:78:aa:5e:53:b3:
80:25:e0:6a:fd:02:fe:72:f1:76:ec:92:b9:75:3a:32:2b:8d:
62:c6:86:aa:81:fa:c4:46:d6:37:de:03:6f:f1:89:fa:f7:4b:
15:a3:36:18:b4:62:32:74:cb:e2:6a:35:2b:1e:37:cb:b9:1f:
69:be:a1:87:a8:c3:09:81:99:00:97:08:8b:aa:e9:96:ab:38:
ae:cc:43:5b:74:69:ee:d7:2b:25:0d:48:82:ab:ec:95:45:5b:
19:6c:c6:0b:53:7c:81:f3:a9:25:1c:a3:ea:d4:f4:a3:f1:3e:
5c:5c:7a:fc:8a:4f:3f:5c:32:ed:2e:0e:5b:84:e6:73:05:36:
4f:8c:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:25:28 2025 by rpki-client