Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa
File: z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa (raw, json)
Hash identifier: gzKeSIds853lGCFoWu+NS/HRph4q2guB/dUt5Y5WdPY=
Subject key identifier: CF:BC:53:41:BC:6B:87:4B:96:8C:AE:F3:A6:33:D8:AB:FC:E8:49:0A
Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial: 019423D8034D4D14967CFBA57196DE98EB52
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213146
IP address blocks: 94.158.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:03:4d:4d:14:96:7c:fb:a5:71:96:de:98:eb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfbc5341bc6b874b968caef3a633d8abfce8490a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:9d:c8:87:16:d5:4b:6b:2a:21:91:85:2d:
c2:1a:80:4a:26:05:e1:25:fd:8c:08:06:3a:23:aa:
a2:4c:52:df:5c:34:5d:ef:81:a3:04:ff:bc:e6:43:
a1:e2:e5:f7:76:68:bc:6a:25:ca:49:8f:08:01:f3:
2c:02:b0:0e:f5:65:72:34:ec:4f:af:57:2f:52:e3:
6c:03:a0:9d:73:99:d2:08:0d:6c:d9:ca:3b:b0:48:
fa:ba:0c:92:ff:21:fd:cf:da:b9:9f:c3:9b:20:17:
c6:e9:30:a8:56:c1:17:1c:09:ce:7f:ec:7b:d0:e4:
68:df:52:1b:ed:8a:d8:88:97:4e:d9:d5:73:72:05:
f3:32:e8:38:ed:1d:e8:f0:fb:a2:eb:7c:dc:24:0d:
84:ec:83:bd:30:24:ea:8b:c8:57:8f:1b:6a:8d:f5:
7d:30:c1:f8:d2:ff:ee:c8:3b:9b:14:56:8b:e2:44:
eb:1b:af:ac:75:b8:f5:9b:07:e9:82:b1:51:19:89:
70:5d:65:6b:9d:e7:54:e8:ef:0b:2e:cf:de:a9:aa:
30:b8:58:01:df:e1:54:3a:f7:72:01:d9:e2:dd:0f:
36:98:d7:52:59:bc:b6:49:fc:e1:e8:3d:78:93:8f:
4a:f8:6e:81:e5:72:ad:c0:0a:86:37:f3:3f:b7:c6:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BC:53:41:BC:6B:87:4B:96:8C:AE:F3:A6:33:D8:AB:FC:E8:49:0A
X509v3 Authority Key Identifier:
keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.223.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ef:b8:0c:0a:01:61:d6:2a:a0:9b:46:83:a8:a5:41:54:c3:
f8:30:44:f5:cb:eb:35:0e:6a:77:a2:2e:ce:87:14:38:84:ba:
d9:8b:d5:7b:60:17:df:85:c7:81:76:b9:11:ea:48:34:eb:71:
7d:e1:26:bf:d8:7f:16:99:2a:1a:d7:c3:d6:22:9e:9a:73:f8:
8d:ec:b0:df:1c:e5:e2:a0:65:16:15:21:3f:4d:a6:41:5d:8a:
db:26:48:41:65:ad:1b:82:63:2c:62:17:c8:4d:7c:46:36:ea:
4e:cd:c4:55:61:a5:59:a7:0d:79:fa:06:41:d2:bf:5e:b1:f9:
61:f4:1b:fc:bf:8c:69:a6:23:3e:54:f3:7e:f9:9a:65:72:06:
a0:6e:ff:3d:9a:ca:b5:c2:6f:71:68:2e:65:b0:63:26:12:ca:
c7:18:2f:e8:70:e3:13:dc:52:0b:c7:e5:3c:de:b0:65:26:ee:
85:18:e1:e1:fc:e6:6d:e8:4f:24:8c:35:dc:2a:22:5b:ea:7a:
84:99:21:f2:85:26:b5:62:87:2c:e2:31:02:b1:76:f2:6e:6f:
92:08:96:09:10:73:e8:13:26:28:6d:88:b3:24:c7:79:f5:a8:
55:e3:31:38:7c:00:c9:e0:2d:d7:67:99:d4:6f:e6:26:3a:dc:
90:fe:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:01 2025 by rpki-client