Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SZZWKod_Ly9CCFoMCmIJUxL__Vo.roa
File: SZZWKod_Ly9CCFoMCmIJUxL__Vo.roa (raw, json)
Hash identifier: 5n58qidnVqggO0Pb11b+NwtEev6bDlMsIQ7m9tkQ3+U=
Subject key identifier: 49:96:56:2A:87:7F:2F:2F:42:08:5A:0C:0A:62:09:53:12:FF:FD:5A
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64BA280F49B6DD67DB99E415FBEA8E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SZZWKod_Ly9CCFoMCmIJUxL__Vo.roa
Signing time: Thu 09 Jan 2025 09:28:22 +0000
ROA not before: Thu 09 Jan 2025 09:28:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200459
IP address blocks: 78.142.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:ba:28:0f:49:b6:dd:67:db:99:e4:15:fb:ea:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4996562a877f2f2f42085a0c0a62095312fffd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:7c:f5:0b:5c:e8:a6:bf:21:e5:1e:70:68:
32:53:ca:6f:d3:e1:ed:fc:73:d6:c6:e3:82:a9:a6:
ab:0e:69:20:a5:4c:4f:80:15:61:76:84:83:eb:a1:
99:d1:d6:11:d2:a3:7d:a2:df:86:f8:98:99:cb:d9:
c1:83:e4:3c:d8:22:c1:9e:e9:72:92:bd:d3:b3:9b:
a6:a7:05:bc:f7:7f:8b:d1:31:22:bf:58:28:b9:1d:
57:7d:ae:d3:10:f6:ac:44:6f:9f:62:fa:8c:72:11:
58:a6:58:49:98:c5:9b:31:9f:78:76:0f:11:56:e0:
a7:0c:88:fc:2c:be:62:c9:50:5e:73:04:8b:7e:90:
1c:af:c1:79:c7:99:74:17:a4:c6:f7:ee:6f:50:5a:
c4:fd:d3:72:1d:44:91:3f:c5:31:ac:5d:40:85:a5:
34:eb:38:27:bf:59:28:60:a4:b0:44:06:b5:5a:14:
aa:9e:94:13:d2:cb:11:62:bf:1f:8c:95:db:00:ea:
61:e3:50:69:8a:0d:2d:c4:6f:91:76:9a:b4:5e:be:
dc:0a:06:8c:2d:3f:f9:1c:1a:11:b6:25:af:9b:6e:
4f:c1:6d:6b:f4:29:96:e5:3b:f2:37:61:2f:7d:1d:
24:e0:b4:29:04:04:06:47:b8:c2:ab:b1:aa:dc:07:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:96:56:2A:87:7F:2F:2F:42:08:5A:0C:0A:62:09:53:12:FF:FD:5A
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/SZZWKod_Ly9CCFoMCmIJUxL__Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.2.0/24
Signature Algorithm: sha256WithRSAEncryption
27:77:3d:d4:3d:ce:1c:74:c9:75:23:7d:7e:da:73:b9:ce:fc:
19:88:64:bf:ab:e2:af:b8:3a:f1:c1:be:cb:be:57:e7:3a:6e:
f4:5b:eb:db:23:bd:d9:e6:db:8e:1f:0a:19:f2:71:5e:33:77:
87:eb:a4:49:77:f4:45:5e:f7:3d:6e:71:f2:58:05:16:42:65:
b4:c7:29:89:3f:d1:e8:c1:a9:47:e5:78:98:4c:a8:6d:f1:1d:
ea:ef:d7:7b:7c:3d:8d:b9:8d:12:5e:b6:db:e7:87:eb:ef:39:
77:84:ea:90:63:71:3b:0d:c3:36:80:6d:b7:da:98:72:87:49:
bc:b0:09:8a:14:ac:71:79:68:3b:f1:71:fa:a4:02:a7:93:ac:
76:cb:22:ee:8f:e3:76:38:75:24:98:d4:8e:33:4a:7b:c4:70:
4e:c6:a9:35:1b:66:5f:4f:d1:4f:11:09:08:50:ce:7e:8e:8f:
c5:7e:2c:82:7e:10:60:fc:d4:70:e2:b2:80:38:bc:3e:b9:18:
b8:26:39:cc:b4:f8:79:c3:a4:f3:9e:b9:81:42:0b:33:f7:12:
f4:b2:05:29:6a:2b:21:e7:55:9b:0f:df:5d:85:c4:26:f3:ab:
9b:ef:b6:93:04:ce:3a:f8:52:3a:a7:34:fe:a2:89:52:4c:e6:
5f:c6:7d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:57 2025 by rpki-client