Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/AzK-5uw0ahC3CV9jwG8-CZ0R7qY.roa
File: AzK-5uw0ahC3CV9jwG8-CZ0R7qY.roa (raw, json)
Hash identifier: by4SQi6waCg8rMkV+K4hoUKjFoOrijqZj3m6ddb7ocE=
Subject key identifier: 03:32:BE:E6:EC:34:6A:10:B7:09:5F:63:C0:6F:3E:09:9D:11:EE:A6
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0195FA72E9CC1FB4FAD18020C12EF5F6E027
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/AzK-5uw0ahC3CV9jwG8-CZ0R7qY.roa
Signing time: Thu 03 Apr 2025 06:59:49 +0000
ROA not before: Thu 03 Apr 2025 06:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211995
IP address blocks: 130.0.11.0/24 maxlen: 24
130.0.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:72:e9:cc:1f:b4:fa:d1:80:20:c1:2e:f5:f6:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Apr 3 06:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0332bee6ec346a10b7095f63c06f3e099d11eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:43:7a:58:d6:02:d4:7e:e0:bb:7e:db:e4:
d1:78:08:8c:c5:89:73:0c:d4:a4:e3:32:ee:9b:aa:
3f:9e:15:94:90:3e:16:36:38:d2:0f:85:a8:3f:04:
fb:a9:f2:c2:84:a3:4c:5f:4a:1b:23:1e:5a:ed:5d:
04:15:a4:d7:38:8a:7d:78:23:41:0a:18:b5:20:d1:
21:b5:ac:49:e2:7d:7b:4d:1f:3a:15:3f:35:4e:db:
ff:1a:8c:83:f4:6a:45:93:85:1a:f6:3e:43:09:09:
fc:67:e0:ed:31:ca:76:be:b5:b4:9a:7e:93:d6:34:
92:5a:e9:10:59:6f:8f:ba:b6:cd:ca:7d:44:fc:96:
d4:c3:21:da:5e:e2:31:6e:6d:25:ac:c7:ad:98:25:
3a:2b:ce:8a:fe:70:4e:e1:cb:6b:bf:73:11:78:8e:
1c:ea:93:2d:ab:78:0f:54:5b:92:2e:33:35:a5:02:
48:d2:66:00:d9:f2:4f:8e:0b:5c:62:89:cf:8f:c7:
97:cc:74:c9:60:2f:6c:cc:93:64:67:10:a7:80:55:
6e:30:48:9a:8e:e7:4e:2f:48:1c:e7:51:7f:35:7e:
78:b3:6a:a5:b6:d6:23:61:b4:32:ef:88:36:af:95:
2e:b1:9a:a6:84:58:d0:5b:26:77:95:ef:14:08:04:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:BE:E6:EC:34:6A:10:B7:09:5F:63:C0:6F:3E:09:9D:11:EE:A6
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/AzK-5uw0ahC3CV9jwG8-CZ0R7qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.11.0-130.0.12.255
Signature Algorithm: sha256WithRSAEncryption
1b:29:e6:e1:2a:1d:c0:f9:3a:00:fa:f0:db:08:98:db:5f:88:
c5:08:b8:03:e0:c5:97:e1:65:bf:a8:db:dc:6a:ab:8c:5b:e1:
75:c8:84:30:49:1b:4b:6b:19:ba:dc:cb:fa:bb:3e:e9:c9:17:
7d:8d:66:24:26:fc:ac:b7:e2:b6:19:8d:08:0d:d0:80:ac:36:
3a:13:3b:6b:30:60:3f:50:a3:ab:02:d2:ee:5d:fb:eb:c5:1d:
03:ec:06:75:67:9b:d5:ee:e4:37:ea:60:71:7f:b7:4a:a5:e6:
47:a5:6a:1b:3e:bf:5a:4b:ef:4d:4b:f7:4c:b8:35:a1:84:d2:
d6:af:af:58:86:ee:80:6e:4c:c6:f8:0f:25:58:81:71:a0:25:
cb:f6:41:75:08:6f:8a:39:c6:86:8b:f0:ee:de:69:95:95:78:
d3:4f:2e:07:4d:49:e6:53:14:e1:f3:1f:e9:08:41:39:79:8a:
82:01:c2:51:4d:3a:94:66:04:31:80:d4:72:13:1a:2d:e8:a3:
27:3c:8a:16:c5:bf:40:18:f0:a2:ca:c2:43:ef:27:71:e7:a5:
d0:1c:08:eb:93:a3:b1:c1:bf:6c:63:0a:2f:21:3b:81:c6:5d:
a0:36:60:65:2d:c8:89:22:0e:24:c8:b5:d3:cc:a5:91:a1:04:
c9:f5:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:44 2025 by rpki-client