Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa
File: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (raw, json)
Hash identifier: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=
Subject key identifier: CF:C1:2F:1F:2C:57:17:2F:63:8E:FF:51:D0:9C:49:2C:4B:F2:D8:3E
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 0194266B8F150E973DBB77A5909FCF98CD53
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12480
IP address blocks: 194.120.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8f:15:0e:97:3d:bb:77:a5:90:9f:cf:98:cd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfc12f1f2c57172f638eff51d09c492c4bf2d83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:44:c5:70:4f:14:d2:5f:7b:65:38:8a:4b:
64:84:e3:32:b2:c9:e9:62:a1:a6:78:80:5c:62:52:
1b:fd:9f:e2:ff:a3:2d:79:2f:1e:18:a9:3e:b9:f5:
d6:ba:bf:bf:97:da:dc:e2:14:c5:5c:59:fc:d0:e6:
74:9d:ed:65:45:c1:ac:7c:99:aa:f4:ce:8b:02:23:
62:10:d3:18:cc:84:1b:24:84:7b:80:36:a6:f4:08:
d6:b4:22:86:70:04:5b:e7:74:57:b5:8d:3e:99:90:
93:40:c8:18:72:ac:83:9c:5d:2b:23:a4:fc:5f:c2:
ee:04:e0:8b:23:88:7b:b1:70:b9:5e:4b:a1:c0:4f:
b1:dd:b1:4c:f3:8c:88:3a:27:bd:fb:a8:c8:ad:02:
ca:cf:2e:da:0f:c7:02:6f:fa:e5:e9:63:85:48:89:
28:b3:76:d3:6a:67:f8:83:12:3a:34:ca:5b:6a:18:
77:b8:d0:b0:fd:f8:1f:96:c5:db:46:ff:ab:74:35:
da:61:ae:b8:f1:44:c2:19:b1:a8:66:18:db:67:be:
bd:2d:57:12:f5:6d:a5:6d:f0:20:ca:bc:d8:0f:b2:
41:75:a1:ba:1b:3b:47:17:d2:40:9d:12:d7:f9:d5:
43:1d:28:d2:d5:5e:17:83:f0:9e:ab:d3:ce:c2:af:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:2F:1F:2C:57:17:2F:63:8E:FF:51:D0:9C:49:2C:4B:F2:D8:3E
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.173.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:25:55:85:6b:4a:9d:7f:1f:b3:b7:61:ee:bb:81:0b:c3:dc:
a6:4b:ba:c8:67:a8:9a:bd:5d:9b:aa:e5:2b:7c:cd:f8:20:0e:
04:b2:19:7c:c2:0f:a1:4f:8d:fe:f5:0e:b2:e7:87:fe:2a:f9:
4d:f9:c3:b8:dc:4f:3e:fc:22:b0:3d:c7:ad:c0:8b:16:af:43:
98:da:b4:ac:79:41:42:e0:da:09:4d:de:47:9f:70:05:d1:8b:
a1:c6:a1:6a:18:2f:22:ea:c1:a6:54:32:b7:93:14:8f:e1:75:
68:f9:81:2a:44:c5:3d:cd:af:25:eb:f1:68:51:02:6d:b8:5a:
59:2b:f9:7a:45:12:a5:8f:7f:c6:67:23:dc:d6:10:9a:37:22:
6e:99:a9:a9:8c:6a:6e:5f:06:81:4f:8f:11:ec:9e:a8:28:e6:
4c:b3:51:bc:9d:a7:69:3e:fe:f9:ff:72:57:5c:d8:38:c8:0c:
6f:bd:5b:97:6f:02:bd:6d:3a:01:ba:7f:99:8b:72:e9:19:69:
d4:43:01:02:6b:c3:9b:2c:8f:78:d3:ed:e0:ec:f6:83:25:0d:
a2:d1:71:3f:03:a6:a9:84:81:f2:7d:3a:1c:d6:49:0d:e7:95:
c5:3c:46:1d:6a:24:70:af:af:2b:a0:94:3c:e5:d5:14:88:60:
25:1a:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:03:00 2025 by rpki-client