Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa
File: pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa (raw, json)
Hash identifier: 3G1cxIfKvcRktJjL1ylmN8MQ4xGHLKTVnlOoY7cNz5o=
Subject key identifier: A7:39:00:8F:8F:F3:01:55:E4:45:ED:02:FD:01:E3:12:0C:C1:8F:46
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F2C4E7AFCE4D6DD46A9CB72AE6591
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa
Signing time: Thu 02 Jan 2025 05:48:47 +0000
ROA not before: Thu 02 Jan 2025 05:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216383
IP address blocks: 45.136.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2c:4e:7a:fc:e4:d6:dd:46:a9:cb:72:ae:65:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a739008f8ff30155e445ed02fd01e3120cc18f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:ba:23:86:18:c9:78:12:4e:f1:c1:9c:19:
ae:35:81:f7:96:45:a6:b3:44:9a:43:73:11:67:03:
93:8e:fd:6d:40:04:fa:65:5d:a4:85:f1:53:c6:3f:
84:f0:89:4b:04:1a:f2:1f:f2:38:7a:09:43:11:67:
42:24:0b:50:64:20:a6:5c:64:fd:01:ee:f9:8a:e2:
d3:9c:dc:61:a1:1b:bd:0d:1d:bd:94:8f:c6:1f:6d:
9c:52:94:4f:bb:f0:0c:f9:22:ec:15:f9:99:6a:30:
a1:67:49:1f:4f:d7:39:9f:2a:e6:88:22:fa:d6:28:
57:d3:cf:29:b9:76:c3:82:d1:6f:f9:e2:41:7c:34:
85:00:14:35:ff:a6:91:00:f5:8b:a7:67:f8:16:89:
ba:cb:a5:ea:a5:21:4d:4b:a7:d3:86:d2:80:25:da:
37:b3:81:fe:d8:f8:52:a1:77:19:45:00:72:17:2c:
99:fc:81:fc:23:90:dc:a2:ed:4f:fc:8e:30:da:4e:
a8:4e:61:fd:7c:ef:14:ae:4b:82:43:6c:f5:d3:c8:
f6:24:ff:48:ad:cf:af:23:c6:9e:39:f6:2a:5b:c6:
91:61:78:7f:54:bd:57:d1:74:39:b4:f8:c8:13:02:
37:3c:9d:e0:20:05:44:86:15:a7:64:6a:11:bd:bf:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:39:00:8F:8F:F3:01:55:E4:45:ED:02:FD:01:E3:12:0C:C1:8F:46
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:76:91:4a:c9:9c:f6:e8:36:f8:1a:f8:7a:b8:ee:d3:13:de:
ef:d0:55:65:63:c3:d0:25:81:36:f2:9f:f3:5f:ec:22:f2:e1:
6f:9b:eb:87:53:5b:33:40:b1:50:f0:e5:ce:78:63:f9:5c:bf:
ee:6c:1e:d2:f7:54:6b:71:4e:7f:4e:ee:b0:21:88:35:4b:a7:
d6:bf:5a:78:33:2b:2e:93:74:da:d3:65:f9:32:cf:43:af:68:
7d:71:cc:59:a7:4e:cc:aa:77:c2:60:60:64:51:88:7e:cb:9d:
4b:fc:9e:87:b6:fa:85:59:12:72:bd:15:57:2c:2e:fc:66:2a:
2b:20:55:12:96:7f:16:ff:26:d1:90:d6:4c:79:62:cf:ec:ac:
fd:76:bf:74:e1:84:67:72:87:95:e0:be:38:02:ea:bf:ff:75:
f4:12:6b:ba:e9:4b:68:ef:f9:30:f2:58:31:78:20:98:da:07:
8a:e0:6c:d7:b8:3a:cc:6c:0d:c0:b8:37:1a:ee:4a:2a:44:1d:
97:e1:c2:37:fb:c8:48:0c:49:0e:91:0a:2b:be:f8:8e:e0:9d:
cb:78:09:a3:45:0e:ce:59:c4:31:da:dc:3b:17:00:3e:81:fd:
eb:64:49:ea:53:df:8f:b1:f6:4a:13:c5:d6:8a:8a:e5:10:2f:
46:52:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:24 2025 by rpki-client