Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/l-ZGsydBxlaDCYmuUrju9FPVJ5k.roa
File: l-ZGsydBxlaDCYmuUrju9FPVJ5k.roa (raw, json)
Hash identifier: YsEoIsYTsiy+kVjmNva3VAJhJXaXEqZJGws2DjhqC2w=
Subject key identifier: 97:E6:46:B3:27:41:C6:56:83:09:89:AE:52:B8:EE:F4:53:D5:27:99
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019423D7FAB4BB5C456327FDE9DD049AD897
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/l-ZGsydBxlaDCYmuUrju9FPVJ5k.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 146.247.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fa:b4:bb:5c:45:63:27:fd:e9:dd:04:9a:d8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97e646b32741c656830989ae52b8eef453d52799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:30:82:cd:c4:ef:b4:f9:87:c5:f8:55:c3:
90:fd:6a:01:6f:e4:bb:8d:fc:86:24:b4:fd:b4:b2:
72:8d:9a:76:74:da:b8:db:74:5e:b2:c3:c3:ef:90:
61:82:e0:de:fc:81:b0:97:6f:b5:f3:ca:e8:1c:0f:
42:70:22:e7:81:17:9c:1f:31:79:3e:73:e0:68:cf:
8e:88:77:c4:38:fc:b2:06:28:5d:c5:12:55:91:5c:
e0:35:1a:08:33:d5:e6:74:24:a6:db:3c:01:72:8b:
92:6d:a7:88:48:09:90:08:4a:30:12:e8:58:7b:16:
20:1a:af:9b:f5:19:82:06:d8:3a:34:23:ff:ee:df:
d4:f6:a0:f2:52:c6:ca:02:4c:b3:54:38:d7:9c:4b:
11:86:a0:76:06:3e:00:85:18:54:a9:3b:e4:f9:0c:
a2:ba:96:93:e6:05:57:d3:29:37:af:85:98:bb:6d:
dc:16:0f:2b:63:41:5d:68:32:f9:87:36:5b:b3:38:
14:00:93:51:c6:23:e3:84:fb:15:85:b9:c0:8b:2f:
bc:1e:36:70:ca:ec:ce:b3:5a:e7:4d:ca:d1:44:ad:
4e:67:9f:60:79:21:35:a2:86:83:1d:a8:dc:5d:4a:
9d:f6:26:df:ad:a2:77:4e:8a:71:44:0d:4b:61:34:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:46:B3:27:41:C6:56:83:09:89:AE:52:B8:EE:F4:53:D5:27:99
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/l-ZGsydBxlaDCYmuUrju9FPVJ5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b1:23:5a:13:52:25:d6:8e:f1:1a:66:91:9f:da:68:3d:d8:
52:ff:18:38:6f:fc:bd:6c:0b:7f:5d:25:7d:c7:9c:20:9e:45:
be:4f:ea:c6:66:64:86:8a:5b:3a:0b:60:c6:54:b4:12:ba:a2:
39:62:ca:a7:7f:8f:2a:ba:da:cd:99:5a:84:f6:c2:13:27:72:
1d:74:be:38:db:5f:fb:8e:31:e7:3c:28:08:13:9f:43:d2:24:
ea:aa:56:d9:25:16:2f:b4:df:1a:dd:46:24:4a:5a:34:e4:84:
6d:f5:98:9c:0a:14:ec:90:f3:f0:de:c8:50:30:bd:37:5e:e6:
e5:aa:1f:c3:a1:8e:cf:12:fe:c2:ad:30:fd:b1:d5:f9:e8:55:
9c:ad:95:a3:4c:21:55:3a:0b:20:f8:b8:38:c0:c3:3a:ff:07:
14:e1:1d:ae:e9:d3:e2:e9:d2:4d:2e:de:37:20:93:80:aa:19:
98:0f:75:ae:d1:a7:21:17:43:97:ef:13:87:c1:e5:80:0b:2c:
ae:25:f6:cb:96:fb:1d:ab:60:e0:21:cb:48:ab:3b:c3:38:67:
11:f0:2a:ae:4f:77:a5:b7:f5:f6:b6:57:bd:81:eb:85:9a:00:
16:f2:f2:45:40:ac:aa:c0:70:f2:16:76:cd:2f:0e:ca:e8:d4:
a1:aa:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:24 2025 by rpki-client