Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z8SwSYIuHBLWqAQE4c7qdyUaljU.roa
File: z8SwSYIuHBLWqAQE4c7qdyUaljU.roa (raw, json)
Hash identifier: ax9JSmA6ti/fMGdxM7pQaKPOxPNub5EBE2leticCmO8=
Subject key identifier: CF:C4:B0:49:82:2E:1C:12:D6:A8:04:04:E1:CE:EA:77:25:1A:96:35
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194F8E2D525993FC887465341A1FEA89723
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z8SwSYIuHBLWqAQE4c7qdyUaljU.roa
Signing time: Wed 12 Feb 2025 06:40:02 +0000
ROA not before: Wed 12 Feb 2025 06:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215081
IP address blocks: 193.22.157.0/24 maxlen: 32
193.22.158.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:e2:d5:25:99:3f:c8:87:46:53:41:a1:fe:a8:97:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 12 06:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfc4b049822e1c12d6a80404e1ceea77251a9635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:01:0f:c7:df:a1:25:55:a5:3a:e8:99:a2:e8:
f5:fc:22:b7:e0:9f:09:ae:9a:88:05:68:4f:65:1b:
21:00:1d:56:8d:0a:ff:3e:f6:0e:fd:d4:03:cf:45:
1f:c8:19:42:fa:26:eb:3c:23:ba:be:e0:41:25:8e:
23:ea:da:89:79:0c:a5:95:e0:18:2b:f4:98:9d:91:
b7:23:63:e0:be:90:c8:bf:1f:0e:03:8a:f5:79:36:
2e:63:9a:08:b8:06:21:06:af:9d:07:03:9d:fd:2a:
ac:89:d6:82:3c:33:76:1f:45:c4:e0:8a:5e:c5:69:
1c:62:18:68:76:fa:3f:94:f3:05:ed:bb:e3:df:ae:
09:ca:55:f4:cb:03:ed:0c:d0:90:d7:d9:51:df:72:
28:fc:54:a8:3b:e0:72:e6:3c:77:ea:ae:46:be:2e:
da:84:f7:93:c3:25:7f:b1:14:af:e2:5a:93:93:f2:
47:6e:b8:47:35:b3:1d:d8:d9:3f:b4:47:93:a7:02:
98:af:8f:32:a8:07:48:25:28:73:2e:02:3c:4d:75:
b0:5d:f7:63:c4:09:25:24:4e:d4:00:ed:5c:9f:db:
ed:ea:34:fb:8a:58:5f:14:6e:dd:36:96:82:2c:21:
2c:96:0f:43:10:26:5f:6d:69:5b:70:9b:49:82:de:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:B0:49:82:2E:1C:12:D6:A8:04:04:E1:CE:EA:77:25:1A:96:35
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z8SwSYIuHBLWqAQE4c7qdyUaljU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.157.0-193.22.158.255
Signature Algorithm: sha256WithRSAEncryption
81:99:da:03:61:8f:54:b2:00:5e:93:2a:26:a0:98:1a:36:e7:
5c:b0:2d:f8:0a:71:2f:7b:28:3c:3c:5c:4d:f3:9c:9a:c7:c2:
30:52:ad:3e:81:df:59:75:08:6a:b7:f7:61:d0:45:d9:89:60:
73:c1:3d:36:1f:74:5c:46:a9:4e:50:68:8e:31:77:67:25:99:
4e:63:18:bb:cc:8c:b3:ad:3b:d2:e8:79:ec:d7:20:3a:91:42:
15:26:cb:ba:c4:1c:4d:ae:3d:64:06:0e:b7:2d:de:12:e0:23:
d1:72:12:59:c4:ec:0d:aa:9e:13:f1:b6:8e:42:d5:67:2e:da:
fe:03:49:fe:b2:c8:81:57:de:24:0c:96:34:fb:b8:b3:13:e6:
20:e8:8a:ed:df:e8:7d:c7:a1:ed:d6:64:61:71:12:80:ff:1f:
6c:97:b5:bb:c4:78:e0:1e:dd:72:ae:b5:1f:90:a9:ad:e2:62:
1f:03:f2:a7:20:f7:89:69:d6:96:3b:a6:f1:3c:11:d3:b5:6a:
1e:68:27:ac:aa:f3:d0:3c:06:6f:4b:c7:04:5c:b8:35:de:3f:
32:2b:bb:ff:2d:73:6d:1b:e5:2f:07:2f:7d:3d:9f:de:5f:f5:
6e:60:ca:d0:a1:f4:5c:72:47:c0:1d:40:b3:a1:dc:86:06:34:
eb:1e:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:10 2025 by rpki-client