Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/rZuO-15UbHThyJRmeryxRpgLk2M.roa
File: rZuO-15UbHThyJRmeryxRpgLk2M.roa (raw, json)
Hash identifier: /ED0vNPFUaV7PRvXzqX2jHZ983s8HtxjtsJuRuMtCvI=
Subject key identifier: AD:9B:8E:FB:5E:54:6C:74:E1:C8:94:66:7A:BC:B1:46:98:0B:93:63
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 0194266C092E1AF8322639C96A68189448C8
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/rZuO-15UbHThyJRmeryxRpgLk2M.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209156
IP address blocks: 109.121.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:09:2e:1a:f8:32:26:39:c9:6a:68:18:94:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad9b8efb5e546c74e1c894667abcb146980b9363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:dd:e4:e2:40:6f:8f:c1:a5:5d:d9:87:1e:
ab:49:8c:1e:da:75:ab:95:23:65:76:0f:b8:77:94:
03:77:1a:93:74:34:91:f0:f2:19:19:d1:3e:44:23:
99:ec:ea:51:ae:90:87:b3:80:a0:31:b5:a3:fb:b9:
5b:cd:50:1d:36:02:4e:bc:9f:7d:0f:49:1f:df:80:
79:f0:fb:92:84:b0:c8:d2:0b:55:c3:e2:1e:40:de:
5e:03:f5:42:58:93:fb:fe:55:af:cd:b9:13:e9:3d:
fb:86:9c:e8:45:12:71:cf:5b:b7:b2:31:57:ed:bf:
41:16:c0:57:b0:7a:9d:3f:7a:a8:56:83:76:5a:a6:
71:88:cb:02:de:a8:be:d3:ef:73:56:ba:bd:84:9d:
74:a5:a7:c0:25:50:23:c8:00:54:f2:bc:7b:35:26:
e2:85:e0:b1:ff:ec:26:8f:1c:f1:af:2e:ce:93:63:
79:53:6a:82:86:1a:c0:95:d5:03:c6:6a:0d:a6:42:
c0:7b:45:3b:66:2d:ee:a6:f5:ce:b1:a8:8d:58:52:
9c:ee:e4:ee:a2:35:38:43:ad:3c:7f:03:e5:6e:33:
b5:b0:15:9e:de:9a:8c:c2:cd:ed:d4:fb:fc:03:0a:
22:0f:e8:9b:de:1d:80:d7:d0:29:72:e6:7b:fe:f9:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9B:8E:FB:5E:54:6C:74:E1:C8:94:66:7A:BC:B1:46:98:0B:93:63
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/rZuO-15UbHThyJRmeryxRpgLk2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.135.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:07:a0:70:43:b5:b3:f4:32:c5:11:b0:cf:5f:4b:a7:1b:f5:
8e:d9:5f:e2:a7:85:b9:31:a7:5e:ca:2b:b7:a3:c2:cf:73:65:
90:1a:52:34:87:65:b8:3d:11:d8:e4:01:0c:3c:bb:b4:82:d6:
f4:e1:71:f0:0b:02:f7:ce:c0:4e:8f:e5:77:19:db:ff:62:25:
02:99:ba:4e:a6:aa:16:45:c1:09:9d:55:43:82:ec:0a:a6:04:
68:96:7c:d6:b4:3e:ca:75:0a:5a:86:89:66:c6:4c:17:d6:01:
8b:b3:91:86:04:91:f7:39:5b:68:34:76:19:65:67:1b:7f:be:
fd:6b:ef:07:bd:9a:75:da:51:d5:ee:0e:49:9c:bf:7f:2b:3f:
4f:1a:18:e9:80:42:a6:aa:7f:f4:1f:9b:dd:43:14:1a:f8:10:
1a:f1:a9:8c:5a:b2:65:2e:9e:d7:98:00:7d:4a:73:a1:35:42:
17:a8:cb:ca:3b:9d:ae:e1:dd:09:3c:9c:0a:aa:9c:ff:01:cf:
06:a3:8a:8e:16:6e:c7:44:8a:e0:6f:3a:e4:6a:eb:b8:0c:6b:
07:79:54:35:1a:f3:e5:31:a3:ed:6d:6a:2c:24:be:82:32:f7:
69:3d:b2:89:38:d8:2b:a0:75:ff:7c:bb:4c:3c:c0:bb:14:3c:
f0:49:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:28:56 2025 by rpki-client