Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/fZauZUiMq7QzdDKqVQAM0BTNdqg.roa
File: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (raw, json)
Hash identifier: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=
Subject key identifier: 7D:96:AE:65:48:8C:AB:B4:33:74:32:AA:55:00:0C:D0:14:CD:76:A8
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 019427486DD80BA97CBBE93FDDD9F4DD8768
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/fZauZUiMq7QzdDKqVQAM0BTNdqg.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57829
IP address blocks: 178.22.96.0/21 maxlen: 21
185.81.12.0/22 maxlen: 22
185.81.14.0/23 maxlen: 23
2a00:ce60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6d:d8:0b:a9:7c:bb:e9:3f:dd:d9:f4:dd:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d96ae65488cabb4337432aa55000cd014cd76a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:5b:b2:87:1e:be:6b:3d:5c:1a:93:fb:fe:
24:20:38:8b:3c:10:1f:22:b0:f7:70:60:e7:81:28:
21:5f:61:47:d3:26:21:bb:d2:a9:69:cf:c0:98:b9:
2e:9c:a7:fb:e1:9b:dc:11:10:eb:17:ac:25:04:b9:
8a:a1:e8:8c:eb:ad:f2:a6:8a:9c:e6:6d:e6:62:f2:
7a:07:1a:99:72:fb:5f:ff:d5:cc:66:56:f7:ec:0a:
b8:99:c6:6f:ef:bf:ca:ec:49:0c:a1:bd:57:dc:07:
1b:7f:ee:ee:87:bd:55:bd:dc:dd:83:1a:91:46:30:
ee:8e:4b:6d:11:91:a5:43:59:76:8a:d1:a7:c0:a0:
e9:c6:5c:51:96:cb:2a:03:ef:1b:5e:c7:5b:f6:87:
e6:84:eb:cd:2d:13:b6:c1:21:c9:be:29:cb:d1:96:
5f:19:13:90:b8:f6:74:95:12:87:49:66:c9:78:1c:
01:ce:c8:c1:76:50:ab:45:ea:93:89:a0:8e:0d:72:
88:44:a3:80:65:33:a2:1c:17:1e:1e:34:0c:57:60:
6a:05:9f:c4:99:95:a5:42:76:3e:d4:84:a8:c7:0a:
07:28:a1:62:29:90:c0:12:22:0e:ed:ba:e1:a5:6e:
18:21:ce:62:05:52:68:55:b2:8b:21:24:ca:75:2e:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:96:AE:65:48:8C:AB:B4:33:74:32:AA:55:00:0C:D0:14:CD:76:A8
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/fZauZUiMq7QzdDKqVQAM0BTNdqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.96.0/21
185.81.12.0/22
IPv6:
2a00:ce60::/32
Signature Algorithm: sha256WithRSAEncryption
43:8d:94:0a:07:0a:fc:f0:51:4b:b2:a7:01:5d:24:db:74:c8:
b1:b5:93:66:12:5c:e1:8d:91:30:95:e0:ad:1e:ef:13:45:4d:
44:3a:66:ab:7f:ca:9d:c4:1e:62:ac:9e:62:24:ce:e3:a3:f7:
91:a2:46:0f:28:79:6e:37:b6:39:10:8a:e2:4a:90:0a:10:70:
cc:3c:e0:45:b1:b8:07:07:a5:9e:34:33:c5:80:28:84:99:c2:
9f:94:b4:6b:de:85:5c:98:3b:f7:a1:db:2e:24:7e:35:93:19:
9a:6d:3c:8d:9b:54:c3:cb:2d:46:6b:7f:19:e8:92:6d:12:0f:
bd:a3:54:4c:9c:49:68:cd:da:27:a0:e5:b6:a4:6b:86:72:27:
5a:d9:25:bd:47:51:fd:5c:49:14:29:51:cf:47:b1:6f:05:05:
44:aa:63:ed:31:67:53:b6:c0:7b:0f:7d:aa:c5:7e:54:bd:bd:
eb:3d:2c:15:3d:29:8a:fe:64:5e:8e:eb:e0:00:e6:09:3f:cb:
37:21:7f:74:00:76:3d:c9:da:59:ce:a0:e4:94:49:f8:3b:e3:
49:eb:88:93:42:68:6d:ce:7b:6a:8f:a5:62:98:51:8d:3e:24:
b5:8b:e5:c0:d5:16:90:fe:0e:de:1e:f7:01:86:6f:9f:62:10:
39:3f:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:49:21 2025 by rpki-client