Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa
File: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (raw, json)
Hash identifier: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=
Subject key identifier: 66:56:F9:6D:55:08:0C:44:57:A3:8C:5D:48:68:D5:31:0F:13:74:D0
Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial: 019473B850418CF66313D8204926DB3EF56A
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa
Signing time: Fri 17 Jan 2025 10:04:06 +0000
ROA not before: Fri 17 Jan 2025 10:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 136.231.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:b8:50:41:8c:f6:63:13:d8:20:49:26:db:3e:f5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Validity
Not Before: Jan 17 10:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6656f96d55080c4457a38c5d4868d5310f1374d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:90:35:2e:d2:af:c1:36:d0:33:cd:c7:15:
d4:a5:78:d7:49:67:f0:cd:4d:49:7a:c1:aa:f7:eb:
93:44:6a:43:7d:0c:99:81:79:50:74:86:54:a4:12:
4a:03:36:31:f0:8c:22:96:e6:a5:ba:c2:ea:86:b7:
87:c9:58:9a:e0:af:6e:78:81:3f:75:36:f8:29:3d:
b5:a9:0d:23:d4:76:93:6b:b7:56:c2:b5:f3:d7:e8:
90:bc:50:06:d6:05:69:55:13:24:6f:6a:3f:d2:88:
4c:94:19:72:bd:0a:62:a9:9a:0c:de:10:78:70:b1:
da:95:5b:7b:c4:9d:4b:7a:3c:eb:e2:d3:ce:14:1b:
de:14:b2:06:89:ee:d6:59:17:bc:ad:43:ac:1d:38:
73:92:bb:85:39:ee:7f:7d:ef:5d:b5:29:7b:51:ac:
f4:a9:d9:9f:c6:17:d5:59:64:79:ae:1d:5f:6c:0d:
a8:a2:7b:b1:e1:63:a5:2e:32:84:77:06:cb:1e:f4:
6f:07:05:be:85:e9:91:8f:70:ba:d3:4c:a6:1a:90:
89:ec:53:6d:b1:4e:06:bd:ac:90:74:cb:17:b1:9d:
c6:1a:0a:2d:92:63:37:d6:86:a0:07:50:25:a6:2c:
48:96:d0:c7:66:6b:9f:6d:ae:85:12:ac:77:e0:98:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:F9:6D:55:08:0C:44:57:A3:8C:5D:48:68:D5:31:0F:13:74:D0
X509v3 Authority Key Identifier:
keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:a6:cc:c6:f7:2a:60:94:79:d9:a3:2a:27:e2:57:cc:2d:4d:
8c:ac:82:dd:98:7c:dd:64:cc:2a:a1:1c:92:d9:9a:aa:cf:92:
e3:36:f9:7b:d5:02:f1:a4:8a:60:e7:e6:c4:33:82:5f:51:16:
ee:cc:b7:e0:4b:eb:6a:c0:90:c1:1c:d7:3d:39:ce:a5:47:e5:
80:a1:2e:20:91:c5:80:66:5e:89:27:64:36:0b:2f:fd:01:3f:
33:31:a8:69:c1:4c:fc:ac:60:97:7b:97:e7:35:aa:d7:fa:45:
eb:a0:ca:e9:34:48:43:71:24:7b:7d:33:bb:1d:60:c9:12:cb:
fe:cb:a6:05:a6:25:2f:56:5d:de:ff:ef:55:42:b4:59:f9:f0:
12:b0:46:ff:30:cc:78:4f:e3:b4:51:c6:84:4c:8e:91:0a:7f:
28:d2:d9:33:14:6f:61:dd:d9:9d:63:d0:fa:2d:c3:bc:a4:9f:
4f:b2:91:41:8e:75:29:1f:6e:1c:fb:1c:16:d5:0b:2c:2d:f3:
0b:c4:03:3f:18:af:ac:3d:1f:82:a1:c1:90:ed:70:2d:ba:c3:
09:f8:9e:c8:5f:bd:e0:84:52:20:60:af:e3:0a:cb:d9:e6:c1:
65:0e:db:d4:89:e2:a4:e5:80:87:a9:39:5a:40:cc:19:55:f9:
6b:91:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:30:40 2025 by rpki-client