Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/zIZvUw6LEttnk9GqCkFL8S-ncbM.roa
File: zIZvUw6LEttnk9GqCkFL8S-ncbM.roa (raw, json)
Hash identifier: g5dRThI/Wu6nM24igsF8Y2hQEgVjjdxUN3aRLJWGc3E=
Subject key identifier: CC:86:6F:53:0E:8B:12:DB:67:93:D1:AA:0A:41:4B:F1:2F:A7:71:B3
Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial: 0194421D72A7FCD92EE08BC681E56E9221BF
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/zIZvUw6LEttnk9GqCkFL8S-ncbM.roa
Signing time: Tue 07 Jan 2025 18:53:33 +0000
ROA not before: Tue 07 Jan 2025 18:53:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29670
IP address blocks: 193.96.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:1d:72:a7:fc:d9:2e:e0:8b:c6:81:e5:6e:92:21:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Validity
Not Before: Jan 7 18:53:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc866f530e8b12db6793d1aa0a414bf12fa771b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:cc:83:df:a3:ac:16:83:f0:aa:65:e0:25:
a3:3b:a6:69:06:4f:05:44:11:70:aa:55:b4:29:94:
86:81:54:52:bd:b6:10:34:2a:e8:9c:c3:1e:3f:5d:
cc:6b:f8:fc:27:cf:1f:dd:61:5c:45:0c:d6:09:a8:
9d:b7:ac:e5:49:1d:82:12:c3:55:af:fd:83:ea:77:
98:00:97:a3:d8:83:25:ad:8d:6a:85:63:7a:d8:ca:
a3:0a:08:0b:4d:6b:79:0b:70:1d:7e:70:26:a2:c8:
c5:e6:2c:c3:f1:a0:0e:b0:39:4b:08:6c:4a:53:74:
8c:11:f4:ed:e6:35:33:52:9c:c4:36:c1:1a:dd:54:
82:77:58:64:f4:f5:bf:f8:4e:dd:8b:18:63:18:5d:
96:07:b2:1b:b3:6b:eb:9e:01:58:05:19:7d:13:e6:
9b:50:9d:8c:5d:6c:fc:f3:df:2c:24:42:5b:d1:fd:
76:51:c8:de:b1:8d:9e:a4:20:6a:6c:c5:7c:d9:bd:
62:12:68:f8:96:97:fb:26:53:24:5c:a1:19:d2:7d:
36:54:c2:2e:2a:dd:f4:a5:b7:31:4c:3e:3c:ae:13:
4b:fe:f8:8d:05:27:53:bf:da:f7:37:83:d7:ab:26:
22:b7:c2:39:1f:c9:40:9a:55:1d:3d:8c:71:ec:65:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:6F:53:0E:8B:12:DB:67:93:D1:AA:0A:41:4B:F1:2F:A7:71:B3
X509v3 Authority Key Identifier:
keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/zIZvUw6LEttnk9GqCkFL8S-ncbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:90:24:7b:29:69:a5:7f:73:32:9f:c0:fa:ad:ca:dd:0f:7b:
e0:da:6e:05:a0:de:ff:9d:0f:80:1c:87:f2:2f:c2:58:bc:7d:
da:7e:21:a0:62:a3:cd:48:17:75:6b:1a:bd:29:6f:c7:41:69:
9b:cc:43:98:f6:72:52:9e:02:59:a9:e2:9d:c6:5b:1c:cf:3a:
69:e2:78:65:af:66:e1:02:6b:8c:51:79:68:aa:94:83:2f:3e:
d2:cd:b8:fb:8e:e5:16:c5:87:97:12:ad:30:9a:57:70:ff:56:
01:8a:93:f4:3c:f9:9e:2f:7f:50:7c:5f:08:fc:94:15:7f:2b:
84:d9:1f:ff:d2:d9:57:cc:6f:bb:82:e0:1c:fe:7a:98:d5:76:
b4:01:bf:24:13:01:72:d9:86:c8:24:67:6f:87:73:0e:6f:fd:
ef:29:00:70:58:cd:fb:41:68:03:12:d1:04:24:ba:80:26:9c:
45:82:e2:db:b5:f2:0b:ef:af:04:40:28:08:21:07:1c:13:45:
0b:08:3d:7b:a5:13:43:3f:1f:05:97:c3:3c:a1:2f:df:1a:29:
51:1c:07:8e:48:13:8a:ec:6d:cb:e1:96:b2:a2:65:67:da:7e:
38:5f:a0:27:a7:10:ce:e8:42:de:d7:66:03:67:3c:ff:cc:d8:
ab:6a:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:50 2025 by rpki-client