Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa
File: 1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa (raw, json)
Hash identifier: okZD4KMt3vd7NMiadPiaHzBYrfOLxrrZpbs/oGs3PRE=
Subject key identifier: D7:3F:29:C9:FC:02:DA:DE:1D:86:54:5A:37:C2:0B:D9:5C:F6:1D:AA
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 01942143F8837B86968971EDF2301478C4A4
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201863
IP address blocks: 93.190.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f8:83:7b:86:96:89:71:ed:f2:30:14:78:c4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d73f29c9fc02dade1d86545a37c20bd95cf61daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:72:9d:4b:7b:f1:7e:e6:3c:02:00:62:15:
2c:a1:33:01:d8:56:c6:72:66:32:f4:56:a7:33:fe:
2e:c5:a7:5f:7f:be:84:64:12:02:fb:91:16:68:37:
24:52:b3:db:6d:9e:d8:f2:fd:64:a4:da:d5:cd:00:
3c:a9:c8:fa:7f:da:1c:e3:7c:1b:ef:4f:fd:56:9b:
cf:d7:8d:78:18:73:18:90:43:9f:4a:bd:49:0b:5f:
58:94:dd:4f:ae:e3:b0:76:95:77:29:d0:f9:63:51:
e7:af:47:51:fe:c9:59:d0:f4:82:4d:ae:ce:4c:82:
4d:35:db:14:8e:a2:03:c0:34:ef:fd:4f:49:3c:9e:
b9:c1:ee:ea:33:2b:01:5f:11:12:f7:b2:62:b6:b6:
9d:6d:49:16:04:18:a3:91:90:6a:80:63:b8:b2:72:
62:4d:ac:9a:ae:38:b7:95:02:0d:93:bb:f8:d0:bd:
49:c7:bf:13:81:3b:89:81:59:3f:76:47:43:0a:1d:
ad:56:8b:9a:4c:61:e8:00:be:c8:ef:e5:4d:88:aa:
09:2d:5c:74:b8:cb:94:92:02:84:3e:26:b5:2b:0d:
9b:d2:fd:a8:41:24:c4:9b:70:25:23:39:ea:81:e7:
cb:4a:e1:d1:4d:e7:65:89:84:88:82:8b:52:c8:cc:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:29:C9:FC:02:DA:DE:1D:86:54:5A:37:C2:0B:D9:5C:F6:1D:AA
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/1z8pyfwC2t4dhlRaN8IL2Vz2Hao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.216.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:70:e1:46:b3:78:dc:7e:e0:db:ab:0d:b6:43:7d:78:c9:5e:
97:fb:d4:21:4d:3b:10:bf:52:0f:f8:79:23:14:f9:ac:fd:79:
60:d9:3c:06:ee:c2:aa:59:21:98:63:e3:de:ec:b9:88:f1:0c:
4c:81:01:f6:81:47:99:33:c8:fc:f8:95:3b:a6:20:b4:6c:3e:
2d:c2:e8:c8:d7:32:b0:96:df:16:72:27:37:93:3c:29:f7:5d:
ec:3c:92:82:d3:33:15:24:3f:78:dc:f1:b6:34:6e:8a:de:8e:
3f:9e:8a:cc:76:10:93:4f:8e:7c:03:6a:51:f1:cb:55:3c:e0:
75:0a:3b:dc:82:97:16:6c:b4:15:b5:2c:8a:55:d0:a2:59:06:
d3:c5:92:2b:5e:ed:13:4d:d4:54:11:6f:88:bf:5e:d8:f7:bd:
c3:9b:bc:4c:e0:14:61:16:e6:aa:16:dc:18:65:df:c5:ee:99:
a2:cf:63:4f:25:2d:c4:ae:6a:9e:20:f6:fc:3a:48:32:16:4b:
27:fc:9b:10:62:43:a4:6e:49:12:18:02:0b:63:0e:5a:28:58:
25:e8:aa:21:4f:f0:6b:a4:8a:9b:60:b2:fd:d9:c1:be:a1:7e:
36:e2:50:6e:a6:16:a2:da:2e:0e:8a:7f:88:b9:ed:40:7f:1e:
e3:73:3c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:54:29 2025 by rpki-client