Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa
File: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (raw, json)
Hash identifier: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=
Subject key identifier: AF:32:21:2B:2C:A3:5E:54:86:C4:85:47:9D:5B:FB:8F:E9:D6:43:80
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0194236A2D9564667C9EDA92F0C1C6E966ED
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197695
IP address blocks: 79.174.80.0/21 maxlen: 24
79.174.88.0/21 maxlen: 24
89.104.64.0/21 maxlen: 24
89.111.152.0/22 maxlen: 24
89.111.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2d:95:64:66:7c:9e:da:92:f0:c1:c6:e9:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af32212b2ca35e5486c485479d5bfb8fe9d64380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:8c:94:2e:bd:c0:ac:9f:2c:45:7b:64:58:
c3:64:2f:0b:07:af:2a:03:00:bc:c0:91:a8:3b:a6:
d1:7a:d8:fe:9f:3f:14:97:72:16:69:00:18:23:81:
ac:6f:bd:9b:bf:14:45:34:be:ec:c4:8f:d0:1e:7f:
42:b4:66:00:b6:4f:a8:8f:5a:c8:f2:f5:d1:a9:d1:
c4:6c:b0:28:92:db:64:e2:b9:9b:ef:34:98:cc:d5:
9c:88:31:08:81:be:d2:65:8e:87:40:c0:cf:dd:8c:
7b:32:a9:fc:06:62:aa:22:a8:b6:fb:2e:4f:83:0c:
c1:3f:cb:4b:1d:fa:cf:b3:6c:d8:8c:8a:fe:c3:d1:
d6:9c:f5:cc:9e:cd:41:88:33:e8:ce:c0:be:fe:de:
a2:90:4c:9b:89:48:a4:ca:03:43:7f:cb:69:b9:29:
12:fe:0b:ca:e1:e5:de:39:3a:a0:d8:00:60:27:f3:
c4:99:20:03:fd:bd:b3:b6:25:c5:dc:1b:8c:3f:4f:
d1:b2:4c:4c:6f:aa:ab:a3:6f:f0:4a:80:c0:b9:b5:
34:5a:77:67:29:e4:2e:73:0d:47:c5:d7:28:19:b5:
db:b5:0b:53:5d:df:7f:d2:5f:87:d9:98:31:00:4f:
c5:ca:e7:7b:15:d8:83:45:4b:34:8e:a5:cc:6b:03:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:32:21:2B:2C:A3:5E:54:86:C4:85:47:9D:5B:FB:8F:E9:D6:43:80
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.80.0/20
89.104.64.0/21
89.111.152.0/22
89.111.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:5e:bd:42:1c:43:7e:5f:66:94:4c:85:c1:2b:6e:bb:1f:10:
7e:ab:d6:27:7a:57:75:04:35:5a:c7:7a:37:62:7c:71:50:7d:
dd:9f:45:17:b3:be:e8:a8:33:71:33:11:c3:dc:84:6f:84:20:
58:32:d2:d0:92:c9:8a:2f:ea:d0:47:25:7e:3e:41:e8:a5:cd:
3c:73:15:07:91:ab:c5:c6:2f:53:6b:f2:39:e0:52:f5:46:69:
71:f2:bb:e3:c5:67:6a:2b:45:b3:46:84:4c:a8:5e:c5:ce:2e:
57:01:21:b3:e6:a7:41:18:76:6e:73:44:50:6b:d4:57:6c:0e:
f1:10:7a:35:bb:82:95:fb:52:c0:ac:ea:b5:f9:22:54:d3:a0:
40:38:60:04:02:e3:cd:27:9d:55:99:e0:5b:e6:2e:4f:2e:73:
6f:bd:0f:29:78:65:22:e0:3f:08:49:40:1e:f9:fa:b4:e0:3e:
f4:48:7d:2e:9d:8d:bc:b0:92:0a:72:e7:94:b9:03:c6:cf:03:
80:19:8a:48:9c:4b:e7:45:c2:90:b0:08:55:00:d6:46:67:3b:
c8:8d:2a:53:83:a9:c5:b5:74:fc:1b:99:ac:61:80:b9:70:ac:
f4:2a:79:92:e7:61:e9:ab:58:e9:58:56:6d:72:27:19:7f:78:
87:e8:31:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:12 2025 by rpki-client