Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/z9zEGi_XQqptGezSebT8w5b6aS0.roa
File: z9zEGi_XQqptGezSebT8w5b6aS0.roa (raw, json)
Hash identifier: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=
Subject key identifier: CF:DC:C4:1A:2F:D7:42:AA:6D:19:EC:D2:79:B4:FC:C3:96:FA:69:2D
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 01941F8C778EAE9BBAD518BA486A2657CFFC
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/z9zEGi_XQqptGezSebT8w5b6aS0.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 193.43.18.0/23 maxlen: 23
193.43.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:8e:ae:9b:ba:d5:18:ba:48:6a:26:57:cf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfdcc41a2fd742aa6d19ecd279b4fcc396fa692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:c0:eb:44:0d:30:0b:34:12:47:ab:ff:41:
6f:ee:f3:49:80:9c:6c:a6:43:f0:7b:7e:09:87:9e:
65:69:f7:57:73:70:39:ef:b9:f3:40:f7:89:21:6c:
20:18:0a:ec:0b:ef:14:ed:62:b2:17:d3:16:77:9f:
69:3d:ae:dd:3c:5d:7c:92:42:70:c4:f8:b1:02:93:
45:00:66:13:d3:4e:65:96:31:2e:19:b3:4c:df:6a:
68:45:55:a4:2c:04:b9:de:21:79:88:4e:8c:07:59:
1d:a0:dc:67:37:ca:1b:4e:75:14:f6:52:dc:d6:e5:
c1:ee:f5:ff:2f:51:06:5a:d4:b8:6d:7f:f3:93:ec:
8b:5e:e8:51:a6:25:e7:1e:6d:96:c4:5b:73:03:8f:
3d:29:b3:06:21:04:df:1b:a4:39:bb:1e:f0:f0:5d:
8b:10:bd:19:16:96:8b:f6:48:61:82:7d:8d:d6:31:
25:25:25:e2:63:bb:5c:1f:ef:bc:2a:14:49:c4:7d:
5f:b8:f9:cb:64:63:21:a2:2e:b4:4d:29:85:a3:bd:
f0:4b:05:7a:97:07:55:e3:43:73:20:b3:e9:5d:29:
06:85:65:74:4d:49:00:36:a1:82:11:76:f6:3e:64:
9b:18:38:c3:18:fe:64:d8:9f:8a:98:6e:fc:e0:2a:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:C4:1A:2F:D7:42:AA:6D:19:EC:D2:79:B4:FC:C3:96:FA:69:2D
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/z9zEGi_XQqptGezSebT8w5b6aS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.18.0/23
193.43.117.0/24
Signature Algorithm: sha256WithRSAEncryption
75:19:6f:3c:0a:f8:ff:6d:81:b1:d5:72:b6:9a:81:48:fb:74:
c3:0e:00:34:36:98:83:c0:9c:ee:df:cf:9c:5c:73:41:a4:fa:
81:83:e2:f2:1c:6a:72:7a:6b:a1:0f:d2:e2:8a:81:ff:0f:13:
2c:64:4a:0a:6a:2e:22:a1:63:63:f1:9d:2b:ae:6b:6f:a2:fa:
c5:ea:29:f9:47:75:a8:0e:f4:7a:e4:50:bf:c2:7f:08:38:cd:
1c:ff:6a:89:84:3c:da:ac:f3:0b:1e:a2:80:8f:7e:9d:6b:8f:
95:12:96:8e:81:41:cb:39:6e:a3:35:50:c0:c0:c1:66:f5:18:
62:dd:ed:4f:66:62:51:d3:53:d4:18:ff:48:92:28:df:b5:5f:
9d:74:37:2f:31:02:01:38:fa:46:f8:d6:89:f7:00:93:9c:fc:
2f:7f:36:dc:3b:11:64:d8:da:27:e4:6d:3e:36:a8:23:c2:06:
cd:73:c6:e9:a8:e0:64:da:dc:3a:13:46:74:d3:4a:7c:2c:1b:
fb:55:d9:75:9c:42:35:49:44:45:16:3e:d5:30:62:c5:de:ed:
94:4e:98:ca:06:1f:7a:d5:89:7d:9d:5c:8e:15:3f:38:e4:83:
b2:63:ff:6a:01:1c:a4:2a:cc:f6:26:3e:08:73:43:3f:e0:97:
fb:a8:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:09 2025 by rpki-client