Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa
File: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (raw, json)
Hash identifier: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=
Subject key identifier: 23:2B:9B:71:89:BB:60:D1:A8:4C:71:BA:67:29:77:0A:6D:88:91:1C
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 0194282449AC35ABAE035346C5559AF709F3
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa
Signing time: Thu 02 Jan 2025 17:50:54 +0000
ROA not before: Thu 02 Jan 2025 17:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35205
IP address blocks: 194.126.129.0/24 maxlen: 24
2a05:3700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:49:ac:35:ab:ae:03:53:46:c5:55:9a:f7:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Jan 2 17:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=232b9b7189bb60d1a84c71ba6729770a6d88911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:aa:8d:94:8e:b3:73:b8:0a:fb:cb:96:cf:
3c:36:ae:bf:f6:2f:8c:05:a3:74:97:cd:3a:8b:e2:
e1:54:c1:03:d0:f8:79:d6:38:9b:5e:80:f5:13:2e:
60:b8:09:6f:1f:ef:a6:11:06:e2:3a:56:6e:db:da:
5b:53:53:8a:a0:a8:28:70:4c:48:6c:7a:60:8f:57:
06:ca:3e:db:31:2b:93:fa:96:16:e0:b6:45:cb:b1:
47:d9:0d:78:60:51:05:be:f3:9d:78:9b:bb:f5:d1:
67:aa:2a:f9:ff:9f:4e:48:bd:ac:4a:63:43:c5:fd:
99:6a:7a:fd:be:23:8e:86:6e:1b:4a:2e:9a:ed:6f:
47:3e:5a:62:46:7d:e8:2f:57:ff:61:fc:30:32:51:
80:b9:fe:5e:d6:85:88:78:9d:e1:6f:69:84:7a:4c:
76:d9:4c:61:20:ed:64:6e:2c:60:05:6d:f3:9f:b6:
26:8d:ab:96:69:df:78:6f:9e:13:07:1e:1d:ba:a1:
bc:29:6f:76:be:c4:31:04:61:12:bc:e3:35:43:26:
5f:8e:9e:56:cf:4a:cb:47:e8:75:9f:fa:27:47:e0:
85:c0:1e:b3:57:2a:07:1d:49:40:fe:87:04:2e:ef:
d3:c4:5a:50:7c:cc:a7:25:fa:49:2d:3a:f5:29:a8:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:9B:71:89:BB:60:D1:A8:4C:71:BA:67:29:77:0A:6D:88:91:1C
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.129.0/24
IPv6:
2a05:3700::/29
Signature Algorithm: sha256WithRSAEncryption
b1:d3:26:60:d9:10:e3:d4:cd:00:26:d5:61:29:bb:1e:09:f7:
91:9e:a7:cb:1d:d1:8b:dc:c4:da:36:c3:69:b9:10:2b:2a:c5:
0b:a0:56:d1:a0:68:57:47:14:38:ab:a6:59:fe:51:93:30:a5:
37:46:d8:58:78:3e:eb:f6:0d:4d:3c:92:38:c4:ef:75:27:e2:
fd:10:fc:d8:22:20:97:84:67:06:e2:e1:1f:52:57:14:11:23:
1f:91:00:25:43:3b:48:25:c6:08:43:7f:73:68:78:74:c6:40:
53:5f:d0:ad:e8:6c:7c:7d:6d:c0:a1:9d:cb:c4:1c:fe:86:e2:
f0:24:47:a7:1b:5b:10:d6:8e:e9:6d:7e:c8:61:fa:4f:80:eb:
49:49:bb:43:b9:55:b2:04:9b:3a:9e:cb:16:c7:b0:39:2e:53:
c9:42:70:b5:51:83:f6:a1:e4:d8:55:66:3d:3f:26:c9:4a:3a:
23:df:34:d8:a3:06:4c:84:23:35:d1:ca:ea:7d:ae:61:8f:e6:
dc:4c:00:c2:29:5a:ae:ff:7d:a9:1f:41:0b:b7:7b:05:8e:93:
e2:2c:69:cb:cc:13:e0:31:94:f1:e6:f3:3f:24:75:03:68:86:
89:46:2f:d8:52:96:6f:8c:20:47:df:ab:56:90:1b:3c:3b:d7:
fe:65:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:01 2025 by rpki-client