Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa
File: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (raw, json)
Hash identifier: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=
Subject key identifier: CF:02:BB:CC:4A:CB:3A:AF:8B:87:6B:E6:FC:0C:42:80:50:59:E3:1B
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019425FD97A1E395390FD592F78CCD816044
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa
Signing time: Thu 02 Jan 2025 07:49:23 +0000
ROA not before: Thu 02 Jan 2025 07:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1902
IP address blocks: 188.125.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:97:a1:e3:95:39:0f:d5:92:f7:8c:cd:81:60:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf02bbcc4acb3aaf8b876be6fc0c42805059e31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:2b:94:81:45:5b:1d:64:ea:18:5e:bb:17:
06:86:6a:b3:35:f1:13:48:5f:2f:29:d2:cb:a3:36:
d2:14:a4:f8:30:07:25:8c:29:f6:03:f2:26:eb:fe:
ee:5a:e5:b9:b2:ba:8c:0d:cd:44:ba:cb:7d:6c:31:
87:cd:e2:8b:3d:53:e1:cb:fe:fb:1f:4c:24:75:da:
40:13:c3:2a:49:e1:2c:d4:ac:5b:d0:e3:c3:d5:cd:
5f:97:d7:19:31:83:d2:61:82:41:4b:1c:cc:cd:59:
b0:73:d3:8f:1d:28:37:61:81:8d:2e:9f:97:6e:ca:
e5:fd:2c:e3:12:f0:1b:92:27:2c:41:db:f5:34:94:
f9:06:bd:0a:45:a7:71:dd:92:df:80:37:26:c8:d4:
85:b3:bd:99:ea:db:39:85:68:0d:97:a2:17:95:82:
3a:ba:c7:25:91:f6:93:d3:6d:c4:1f:1c:b9:e9:fb:
60:6f:6e:95:ae:3a:31:4b:bd:ca:98:b8:e2:6f:22:
fd:93:bc:00:dd:06:b6:f4:34:4b:f0:d5:eb:ac:76:
6e:b1:5b:b3:14:70:84:2a:20:01:5a:2f:09:90:3c:
d0:5a:a6:a4:25:48:75:17:47:3a:5f:ff:cf:f3:01:
e1:a2:4c:eb:20:6d:bc:70:bf:76:15:4a:b8:05:7d:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:BB:CC:4A:CB:3A:AF:8B:87:6B:E6:FC:0C:42:80:50:59:E3:1B
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.16.0/20
Signature Algorithm: sha256WithRSAEncryption
88:1b:e8:4e:dc:e7:cb:70:75:65:4f:16:21:e9:ae:b2:6c:83:
de:b9:c9:d5:df:94:da:25:7d:e2:bb:e8:7d:9e:b2:62:79:b7:
c0:18:e4:31:f1:07:ca:5c:e2:99:89:d8:f9:e2:f3:e5:ef:10:
fc:c0:dc:79:f0:04:ba:73:0c:2a:e2:3e:8d:d1:d8:2e:b7:80:
66:41:70:44:a4:5e:a1:8a:f5:b0:65:f2:52:9f:9d:f6:a5:4b:
99:e2:3a:d0:fb:74:41:fd:fe:c2:db:e9:38:68:7d:d9:0e:df:
70:49:df:b1:f1:84:c2:7c:1a:53:b3:e4:d6:58:9e:f2:36:f0:
a4:4a:14:d4:df:49:6b:35:df:8c:97:04:e3:30:58:31:9f:15:
56:42:0a:77:06:df:fb:84:a6:99:4f:10:9d:3f:65:f4:b4:cb:
85:ab:66:5c:de:da:ac:4b:67:5e:bd:f8:10:29:37:d2:2b:05:
ae:0e:e6:56:1e:ad:31:72:fa:2f:02:ff:57:30:5a:d2:d4:20:
07:cd:c3:2f:e1:10:a9:8a:a4:f4:a3:ac:63:e6:a4:98:f5:ca:
79:e1:07:c3:d6:b4:ae:59:92:2f:02:3d:6b:06:f5:de:94:ea:
9c:a3:e0:f8:d2:ed:96:ac:50:75:a8:6a:2d:c3:39:1d:16:d6:
45:7c:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:32:37 2025 by rpki-client