Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fz02quUAwSFvTA4W24wFN24uPyU.roa
File: fz02quUAwSFvTA4W24wFN24uPyU.roa (raw, json)
Hash identifier: ydFwKV+37lFRJ1Vd0N46dCTRnuQnF0XjCw520U7XzV4=
Subject key identifier: 7F:3D:36:AA:E5:00:C1:21:6F:4C:0E:16:DB:8C:05:37:6E:2E:3F:25
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748667B14DF1A02F1AD780A72BB14AC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fz02quUAwSFvTA4W24wFN24uPyU.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197425
IP address blocks: 192.176.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:66:7b:14:df:1a:02:f1:ad:78:0a:72:bb:14:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f3d36aae500c1216f4c0e16db8c05376e2e3f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:40:bf:75:03:1a:c8:e1:cc:87:c1:7e:d3:
29:37:e4:a0:2d:c6:78:a1:33:a9:e1:9a:75:31:db:
67:f3:02:28:fe:90:45:a8:33:39:bd:f1:f7:5e:71:
1a:ce:40:94:df:09:15:05:9a:6f:5c:29:ef:7e:e1:
83:a9:1d:b2:a6:11:c5:02:27:c6:a3:dd:2f:ef:5f:
ec:d0:88:10:2e:e5:64:67:33:d0:d6:75:cf:dd:8f:
41:7e:30:b1:73:8a:cc:fe:5d:9b:2d:71:38:c5:4f:
73:bd:c4:5d:12:b8:9b:d4:8b:93:e6:e9:c8:da:ec:
73:fe:eb:5d:f8:89:61:a8:07:d5:89:29:39:dc:62:
a8:f6:a9:91:cb:c1:1d:4d:18:52:57:e9:a1:64:32:
88:4f:ce:f8:dc:a3:7c:6f:2d:d6:54:81:71:ad:fc:
50:d3:56:57:73:f2:7b:2d:f4:7e:13:2e:09:85:21:
57:0e:b7:68:34:1e:f5:a3:92:5d:ae:36:3f:d3:2c:
b0:1d:dc:27:14:61:63:22:6d:68:9e:c4:b1:9b:35:
ce:6d:13:bb:99:62:1a:8d:25:a2:c1:4b:ca:ea:ca:
e5:da:56:c5:91:ad:55:29:51:8c:2c:8b:bc:9c:81:
92:93:b4:aa:ff:55:37:ff:49:bd:40:76:b5:92:82:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3D:36:AA:E5:00:C1:21:6F:4C:0E:16:DB:8C:05:37:6E:2E:3F:25
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fz02quUAwSFvTA4W24wFN24uPyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.176.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ff:00:80:73:3b:fe:66:e2:d3:c1:62:0e:0a:88:36:dc:32:
93:e7:94:89:11:36:22:b0:85:44:61:41:3e:f6:05:6e:9e:58:
0d:49:58:67:09:5d:52:37:67:02:1f:12:a4:a3:3f:d4:5f:f9:
c2:55:97:3f:17:cd:a5:a8:58:22:0d:4c:0a:e7:2c:d7:c2:13:
20:bd:f0:20:b4:ac:9c:4d:37:87:4d:34:27:99:bb:40:9c:3a:
db:55:90:2d:da:9a:7f:64:e5:22:f2:f2:22:9a:25:3e:f5:83:
e2:6c:6c:3e:02:a5:0d:51:ac:c5:76:f7:e0:2c:ee:e9:b4:ba:
09:68:b7:c6:56:e3:40:78:63:1d:1e:88:2d:c8:eb:ef:5c:3b:
b6:29:b4:1d:a7:91:33:e1:b4:c8:63:a5:aa:9f:de:0d:2d:9c:
ca:77:eb:30:42:00:8f:fd:dd:9e:8a:01:0a:c6:a5:fa:52:10:
d8:eb:e2:5a:da:56:2f:95:ea:51:f0:5a:2f:ac:04:ba:c5:01:
d1:c9:05:72:aa:c9:7d:f4:c1:61:66:66:f8:77:de:8c:45:5d:
ea:03:3c:87:76:fe:d9:cb:0e:19:19:5a:50:bd:a8:e2:99:97:
9f:7f:ad:96:af:e5:6f:93:51:7b:2f:21:1b:4a:43:c3:ef:6c:
01:45:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:32 2025 by rpki-client