Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sZu-I9NS8D0sKyPd5xWgnqwzb7M.roa
File: sZu-I9NS8D0sKyPd5xWgnqwzb7M.roa (raw, json)
Hash identifier: QzQ2t1BiSuWTK2DKhimSy6HZEV9PZamV1VaCZhEcey0=
Subject key identifier: B1:9B:BE:23:D3:52:F0:3D:2C:2B:23:DD:E7:15:A0:9E:AC:33:6F:B3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D390388F02C34942CAFC8A98D3CD5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sZu-I9NS8D0sKyPd5xWgnqwzb7M.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201465
IP address blocks: 81.3.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:39:03:88:f0:2c:34:94:2c:af:c8:a9:8d:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b19bbe23d352f03d2c2b23dde715a09eac336fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:09:28:6b:e1:30:74:1d:7a:02:4c:32:5a:
85:e7:29:7b:f5:25:5b:8f:cd:da:8b:f7:eb:5e:66:
12:46:9e:b8:93:0b:46:4a:7a:b2:9d:63:1a:6e:ee:
7d:8b:c9:95:41:5f:b9:40:84:7d:86:a5:50:ff:b6:
b5:0e:ef:6c:44:90:39:c8:8c:d9:e5:d7:17:a5:8d:
4a:40:4a:28:0b:fb:2d:e5:e8:c0:1f:56:62:9a:ad:
8f:c6:b0:8c:38:25:0d:e9:7a:83:c7:29:f0:78:22:
e6:c4:f9:a0:5c:a8:fc:59:bf:e4:c9:f9:72:b8:97:
01:39:80:33:cc:e0:13:85:78:6f:2b:bd:27:98:10:
dc:4c:4f:f2:9e:5d:08:eb:57:ed:9c:86:4f:5e:26:
6e:86:d2:67:87:4e:81:c2:4f:67:c7:81:0f:b6:6e:
07:72:76:f7:6e:a0:4a:b0:b5:82:a4:c0:2b:2c:ca:
20:10:a1:62:fe:d7:61:ae:c0:d2:39:3c:4c:c7:42:
cc:20:35:a2:db:ad:82:a9:ed:00:55:ad:22:6f:d6:
1c:ac:37:ba:cf:1d:64:35:23:88:b4:31:ab:15:4a:
90:d1:da:05:33:4f:85:da:a9:de:e5:bf:b2:c5:0f:
2e:cb:54:d0:c4:58:5d:b9:40:62:85:fb:b5:95:da:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:BE:23:D3:52:F0:3D:2C:2B:23:DD:E7:15:A0:9E:AC:33:6F:B3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sZu-I9NS8D0sKyPd5xWgnqwzb7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.145.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2c:a3:de:a4:1b:96:ca:99:cf:a2:59:61:ea:10:27:9d:d8:
b2:1e:bf:b7:70:93:1a:2b:df:ad:b2:b4:f1:cd:c6:61:2a:c2:
4c:bd:70:a2:3e:71:7f:f0:86:c7:b7:c1:1e:b0:ed:fc:6e:20:
fc:9f:06:b6:59:77:2c:8d:40:d4:c5:86:51:92:64:70:de:8c:
d9:1c:e0:8f:be:08:75:3c:e6:4e:15:8b:bc:2e:15:41:cd:db:
b2:3b:9a:e7:13:3e:f0:bc:1e:f3:7c:aa:89:a1:64:cf:7e:ad:
2b:1f:98:f0:52:eb:f2:6b:05:66:38:3c:39:2e:5d:7b:a5:45:
68:4a:0c:08:bb:48:20:74:aa:c9:ab:58:a6:91:7f:ea:05:fd:
24:e7:0f:37:ae:55:51:be:ef:f5:f3:b9:51:02:af:88:a3:b1:
0a:7d:80:37:4e:53:9e:4d:e8:3b:d1:6b:de:ce:e9:72:52:b4:
89:bd:f5:99:f5:90:7c:36:3f:38:05:2f:e4:41:ef:53:fd:0a:
4a:50:35:f6:07:56:6c:d9:93:9a:47:19:81:ee:63:0b:a8:24:
8d:40:14:70:66:89:3f:76:c0:b2:84:90:30:67:57:ff:24:b0:
b0:c7:f3:d5:ee:ad:ec:43:3a:11:b9:81:28:b0:4f:ab:f7:08:
34:8e:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:27 2025 by rpki-client