Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_ZfNeRFH4uarfqZ8vx6QpjPtitk.roa
File: _ZfNeRFH4uarfqZ8vx6QpjPtitk.roa (raw, json)
Hash identifier: f4bJLe+yZ5lDC5MDS+fJF7JXbyFmGSZHMar/3PDbPcU=
Subject key identifier: FD:97:CD:79:11:47:E2:E6:AB:7E:A6:7C:BF:1E:90:A6:33:ED:8A:D9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274867CF102DC11689ACB84E980F0399
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_ZfNeRFH4uarfqZ8vx6QpjPtitk.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198568
IP address blocks: 194.132.5.0/24 maxlen: 24
194.132.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:67:cf:10:2d:c1:16:89:ac:b8:4e:98:0f:03:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd97cd791147e2e6ab7ea67cbf1e90a633ed8ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:3c:3e:ff:4f:80:2b:36:e1:94:43:36:90:
47:73:83:4a:28:6c:97:5d:57:44:0e:ef:82:be:bb:
00:a6:4a:55:aa:d5:be:d5:50:7f:0e:00:d3:62:38:
a4:4c:3a:16:5b:02:99:a9:84:5a:71:43:cf:19:c7:
d9:82:8a:f6:cd:9a:97:88:f6:90:c3:61:b3:6d:2d:
c5:5e:b6:85:16:14:b9:13:bb:01:6e:71:61:7f:87:
cf:fd:18:44:36:42:de:ab:63:10:f6:6a:33:d9:48:
af:cd:55:bd:dd:63:2c:0f:7a:bb:2d:e1:fd:0a:b1:
d4:a9:fa:8d:86:23:a0:a7:e3:77:e2:03:6a:d8:8c:
de:48:6d:55:3a:19:50:48:25:f9:49:0c:16:32:ac:
e2:bd:0a:f2:80:36:4c:ab:35:7c:9e:76:91:77:8a:
95:3e:6c:fb:f7:48:d2:b4:ff:a1:16:eb:5c:74:80:
8e:05:da:f6:0f:64:ce:69:be:55:7f:37:19:cb:0d:
eb:6c:27:70:49:8c:ee:f9:ed:2a:30:a7:2e:5f:3c:
3e:e6:4b:66:d2:51:58:b5:c6:4d:55:d5:af:2c:69:
01:b5:c3:c7:d9:1f:6e:ec:2e:f7:cb:1a:23:91:c6:
39:4c:81:c3:89:85:44:ae:51:10:d6:73:71:7f:44:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:CD:79:11:47:E2:E6:AB:7E:A6:7C:BF:1E:90:A6:33:ED:8A:D9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_ZfNeRFH4uarfqZ8vx6QpjPtitk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.5.0-194.132.6.255
Signature Algorithm: sha256WithRSAEncryption
25:14:ab:39:fe:3f:eb:45:c2:f0:29:8a:65:91:59:d9:47:28:
3c:ed:18:dc:67:3b:f6:7e:c0:cb:6f:6b:25:16:70:e7:81:06:
9f:53:8c:e4:16:91:9c:02:ee:14:86:b5:05:f5:05:9e:15:e6:
fb:89:b8:50:ba:c3:18:9d:8b:cf:44:36:8e:92:21:78:46:15:
41:f4:f3:0c:fa:6e:ce:8c:b7:99:7f:a2:de:2f:67:f1:15:e5:
bb:e8:ae:d9:66:20:04:3c:f2:d8:32:f8:41:86:73:9b:46:d4:
a2:93:3d:e1:49:be:00:ec:e4:88:9d:a8:71:1e:1b:3c:54:fe:
cf:e2:eb:ab:9d:ba:c7:37:cd:47:6b:74:1d:33:2d:fe:d8:85:
5a:69:d6:39:a7:65:f2:d3:83:ed:ad:1e:22:7a:85:a8:02:75:
2b:60:34:01:05:1b:60:a4:a9:af:93:8d:71:43:04:fb:d4:db:
fb:34:b6:ef:eb:40:43:ad:6f:4b:4b:74:3c:ee:f8:59:40:2e:
51:da:5a:c3:5c:b4:d4:aa:6a:f4:c5:d1:35:ff:55:cb:59:80:
05:99:f4:bb:94:1d:44:96:da:90:be:24:9d:a8:1f:d0:b1:4b:
aa:25:f3:73:b8:eb:ff:fc:73:4e:11:e1:bc:dd:77:1e:0e:c8:
95:fb:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:32 2025 by rpki-client