Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa
File: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (raw, json)
Hash identifier: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=
Subject key identifier: CE:23:98:FB:A7:E7:72:C2:EE:41:0C:D5:BB:44:9F:E9:CD:87:6E:69
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019428261E1C692F7207D4C163D7166356ED
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa
Signing time: Thu 02 Jan 2025 17:52:54 +0000
ROA not before: Thu 02 Jan 2025 17:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41752
IP address blocks: 195.20.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:1e:1c:69:2f:72:07:d4:c1:63:d7:16:63:56:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Jan 2 17:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce2398fba7e772c2ee410cd5bb449fe9cd876e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:a1:c3:15:20:68:e1:39:f3:4d:e4:97:24:
39:43:a8:ab:8b:bd:86:69:3b:3c:2e:c6:03:4e:15:
eb:12:14:1c:c6:29:d8:67:10:f1:e5:97:09:97:6a:
0d:8a:31:6a:4f:cf:5e:3b:13:d9:3f:6f:63:2a:47:
8a:24:82:23:6a:d2:5a:08:24:d3:b9:6a:d9:9b:28:
75:66:80:3d:66:0f:b5:b9:4d:bc:b1:a4:25:87:59:
73:08:92:9a:0a:99:d8:a2:c6:53:60:a6:57:a8:72:
47:61:94:08:f4:6e:ca:f9:b4:d3:0b:fc:ec:e1:5a:
78:3b:4c:76:ed:c9:d7:90:ea:9d:77:bd:87:1a:2e:
8d:01:98:0e:81:fc:14:2d:4e:f6:c5:0f:b1:a1:6b:
c0:47:7e:a2:34:1d:4c:93:3d:87:60:a8:f4:6e:14:
1b:ac:94:91:78:00:c6:1b:77:d7:86:ce:58:8a:f5:
c0:98:dc:26:d9:03:07:60:be:bb:65:a8:60:3d:33:
c3:9d:38:3a:8d:20:6b:35:c3:fb:87:0b:ae:42:5f:
e9:fe:2f:ad:76:3f:cb:08:7d:be:7a:28:9c:41:f0:
83:ec:10:df:e7:c5:d1:c8:f4:43:8e:6d:00:59:22:
dd:72:c8:c2:6e:a5:3f:7a:0a:11:28:09:07:d3:e4:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:23:98:FB:A7:E7:72:C2:EE:41:0C:D5:BB:44:9F:E9:CD:87:6E:69
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.202.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:ef:ae:cb:40:e9:0f:47:4b:4c:77:a4:0b:5f:92:85:8f:3f:
59:49:46:1f:ca:c6:45:59:c2:85:56:dc:52:76:af:6a:fe:95:
43:c0:4e:ba:fb:72:d2:7e:f5:7d:39:ca:ad:0e:70:90:ad:27:
16:2d:ff:99:b8:05:38:54:fa:5a:93:40:71:ab:9e:47:f1:13:
e4:b0:32:40:21:17:c5:15:05:67:bc:30:84:7b:47:69:d1:17:
95:42:29:13:aa:2f:24:b0:0b:eb:f5:70:6e:c6:62:a0:e7:48:
0d:69:5f:b4:c2:df:87:70:ac:5a:09:c6:a5:d4:18:41:30:3c:
41:27:0e:6b:ca:33:74:6f:80:5e:b9:15:41:24:7c:47:6b:a2:
8c:59:fe:f5:ae:29:6e:1a:c4:a7:bb:51:7c:56:11:57:13:19:
2f:d2:30:1f:68:8a:23:b2:38:0c:97:7d:83:9b:62:25:5e:31:
cb:0e:4c:00:ba:3b:5d:29:1b:00:c3:38:9c:f9:07:d6:c0:bd:
60:f0:89:b2:f4:34:fd:98:53:d2:98:1a:68:5f:51:41:ed:58:
eb:f6:96:ec:09:32:2d:ff:c9:2a:1c:52:ef:cd:71:a8:68:eb:
21:a0:d8:65:2e:c4:a9:40:7a:b2:9b:27:23:e2:bb:8f:39:c1:
31:9a:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:00 2025 by rpki-client