Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/zAfXaaTLSsRoB5kUrFVM41jmKKM.roa
File: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (raw, json)
Hash identifier: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=
Subject key identifier: CC:07:D7:69:A4:CB:4A:C4:68:07:99:14:AC:55:4C:E3:58:E6:28:A3
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 0194228DEC73317B33B4D4751B3DD4955425
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/zAfXaaTLSsRoB5kUrFVM41jmKKM.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210924
IP address blocks: 195.96.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ec:73:31:7b:33:b4:d4:75:1b:3d:d4:95:54:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc07d769a4cb4ac468079914ac554ce358e628a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:95:62:03:a9:d5:98:ac:49:70:9f:45:84:
9c:a1:70:f3:c2:ba:98:d3:b2:5f:93:bd:c6:46:01:
d7:bd:c3:d1:b4:32:5c:e9:fa:14:c4:30:5d:af:09:
fd:51:9f:fe:5e:93:29:04:8f:16:da:34:28:b6:29:
61:ba:32:b7:e3:95:a7:77:43:22:08:8c:40:8e:ac:
bf:6d:2c:9a:dd:ae:04:f7:2f:68:1c:5e:c8:5c:81:
73:ba:be:e0:fa:dc:43:c8:1e:3e:82:df:d2:81:1c:
68:2e:1f:49:ef:0c:56:4b:52:ee:67:61:ac:de:89:
37:1e:74:de:3c:06:43:57:69:8e:27:da:48:27:bd:
2a:11:b6:91:42:b3:fe:3d:1e:92:8b:38:e8:b8:09:
0b:16:73:ef:31:7d:c9:79:1a:9e:df:e3:96:48:48:
a2:ed:86:46:83:14:91:bc:b8:01:06:07:10:20:d3:
b4:7f:df:95:31:87:e6:f9:8a:89:2b:3c:62:4b:a2:
5a:08:8c:c6:be:29:25:8f:7d:49:56:88:d7:21:1f:
2f:8f:ac:17:4c:10:fa:ce:bf:05:1c:c3:63:02:13:
ff:b7:2e:16:4d:89:94:1c:0a:d6:3b:d9:81:4e:69:
44:ec:5e:c1:00:72:d1:db:51:52:a9:45:6d:34:8e:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:D7:69:A4:CB:4A:C4:68:07:99:14:AC:55:4C:E3:58:E6:28:A3
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/zAfXaaTLSsRoB5kUrFVM41jmKKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.138.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b1:1d:59:00:f5:d1:f2:72:1e:62:68:0a:81:33:68:fc:c5:
81:df:66:33:b4:c5:a6:d9:08:29:8e:cf:d7:2e:50:01:6e:59:
57:a5:92:59:3d:98:85:83:97:06:fc:cd:16:82:75:c7:de:30:
89:d8:be:8e:59:90:5b:1f:f0:5e:c9:c8:27:27:51:43:81:da:
9c:d6:8c:1c:a7:b4:27:b7:17:a1:2c:89:19:af:a3:29:d2:ee:
f1:0d:4f:75:9f:24:2f:94:c3:a0:48:b6:d6:cb:61:83:1b:93:
f0:67:86:df:7b:66:5b:aa:62:d7:5c:74:0e:69:c3:c8:72:eb:
2b:26:7d:3f:79:9d:ac:8b:66:3b:45:97:d7:87:44:45:e0:bb:
48:f0:4f:f7:69:07:76:58:72:c7:9a:fc:e1:7e:65:d2:8a:6d:
47:e2:ea:a1:db:d4:4b:1e:15:c0:95:17:2e:8c:64:cb:03:b0:
0c:4b:77:a9:02:af:d4:5f:97:d6:92:12:2d:b6:ed:20:ef:da:
af:ca:64:93:af:c3:5b:8f:17:dd:81:a4:38:c0:3a:46:6b:b8:
69:fc:a4:0a:ca:c4:80:f3:9a:07:cb:41:0f:51:34:27:a9:fe:
9b:4c:74:a1:e6:99:8c:bd:ce:e3:f1:04:18:3a:60:3d:44:5b:
22:ec:e9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:03:54 2025 by rpki-client