Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/znlmvW2DpaFnQW1nyRCgCW8WLGw.roa
File: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (raw, json)
Hash identifier: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=
Subject key identifier: CE:79:66:BD:6D:83:A5:A1:67:41:6D:67:C9:10:A0:09:6F:16:2C:6C
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 01942521B329FC4AEEAE6511AF03C1F70719
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/znlmvW2DpaFnQW1nyRCgCW8WLGw.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48095
IP address blocks: 194.4.168.0/23 maxlen: 23
194.4.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b3:29:fc:4a:ee:ae:65:11:af:03:c1:f7:07:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce7966bd6d83a5a167416d67c910a0096f162c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:6d:ef:ee:9f:02:ab:b0:89:e7:47:cf:76:
27:34:22:cf:11:cf:ef:d4:3d:87:12:ce:4c:81:4f:
5b:b3:5a:cc:4a:17:04:bb:56:fc:0c:d8:b6:e7:5e:
07:69:d0:db:93:41:0b:95:33:97:f5:01:cd:17:c0:
c8:7c:37:c7:08:3c:e4:33:2e:f8:76:0f:47:5b:f2:
08:de:6e:b0:5c:8d:27:cd:50:57:9f:5a:16:60:58:
53:d6:00:f2:c4:cc:db:d5:a5:d8:bc:b5:18:4e:e8:
2b:5a:ed:e3:9c:2d:7f:04:e2:20:00:df:78:d1:ae:
79:94:60:05:0c:e1:43:cf:42:07:fd:b1:65:63:71:
41:4b:1f:ff:14:47:03:ce:54:30:05:c5:54:8b:fa:
bc:d3:41:75:17:0c:ea:bb:b5:e5:26:52:29:95:13:
a3:51:20:c4:e3:9e:f5:fd:c2:f3:fa:49:78:d3:eb:
1a:84:40:63:0f:c1:ac:b3:19:e2:b1:bd:88:45:79:
61:4e:c9:78:5c:ee:13:00:cc:c8:72:0e:6f:bf:b3:
3a:d9:29:16:ea:39:69:f6:9c:ed:01:e7:9d:c5:4f:
46:e1:46:d9:81:62:9a:84:c7:e3:1e:09:0f:38:d5:
32:31:8b:43:36:93:06:e2:c1:30:b9:ab:b4:06:c7:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:79:66:BD:6D:83:A5:A1:67:41:6D:67:C9:10:A0:09:6F:16:2C:6C
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/znlmvW2DpaFnQW1nyRCgCW8WLGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:a3:b1:a7:62:d4:f0:3c:c9:96:f9:5a:71:fb:f8:57:08:fe:
bf:2d:0e:82:34:e3:40:be:c2:8a:11:2e:ce:51:62:27:7f:76:
6f:83:d2:6c:2f:42:94:df:14:bb:3b:a9:a1:2b:68:10:22:dc:
91:bf:4e:24:af:8d:18:e2:67:a2:7c:9f:59:7e:a3:30:58:56:
a6:08:24:29:73:f8:44:97:2d:f3:8d:ba:1c:f7:51:fe:0f:5c:
68:80:70:cb:1d:31:4f:a3:ea:df:f1:42:41:c4:35:dc:d0:f6:
e0:2a:90:7d:c2:8d:3c:76:8c:25:3e:75:70:7f:da:a0:bd:0c:
f8:34:f1:eb:26:98:9f:70:ce:00:9a:22:c4:4a:9f:8f:78:69:
ce:ad:b2:f0:19:ed:81:ed:2f:68:61:30:6c:f9:a7:ae:6e:41:
47:f8:3b:50:f3:39:76:c4:6e:30:11:0d:d7:bf:6d:69:33:a8:
6f:3f:35:ec:21:88:7c:e7:06:ee:69:52:c2:a9:50:79:ba:62:
4e:ff:88:7c:7f:77:0d:15:94:62:cc:ce:60:b9:3a:02:56:93:
52:c8:e6:4b:33:5d:2a:d3:e6:66:20:0e:43:3b:e3:c0:94:66:
42:a0:da:d0:a4:e4:2d:c1:80:f5:d3:81:78:f2:cd:a5:b8:ed:
1d:c4:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:50 2025 by rpki-client