Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/8Z3aUD_PAmXD6dv52YsOghcqB84.roa
File: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (raw, json)
Hash identifier: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=
Subject key identifier: F1:9D:DA:50:3F:CF:02:65:C3:E9:DB:F9:D9:8B:0E:82:17:2A:07:CE
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 019421B20C52A324EA775DA061395A9CC403
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/8Z3aUD_PAmXD6dv52YsOghcqB84.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42160
IP address blocks: 195.225.221.0/24 maxlen: 24
195.225.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0c:52:a3:24:ea:77:5d:a0:61:39:5a:9c:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19dda503fcf0265c3e9dbf9d98b0e82172a07ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:e3:a0:81:25:5c:da:20:c9:d8:de:9b:82:
f4:04:c9:cf:d6:4f:d0:4b:28:49:b8:1b:61:e6:ab:
48:99:2f:0d:78:36:27:49:25:09:ea:06:2b:30:a2:
58:4c:4a:ac:2f:48:69:75:d5:24:f8:0b:75:0e:df:
2d:af:f1:16:4c:1f:ad:af:1c:b4:8e:99:65:11:ee:
b6:1f:c2:4f:8a:92:27:0c:79:a1:00:90:9b:c3:40:
3d:f4:08:b3:81:8e:e7:6a:48:96:81:35:a8:f4:70:
73:6a:2f:26:ff:2f:93:51:a6:1f:7a:eb:24:78:ef:
b8:21:bf:c9:02:27:19:77:55:0b:16:25:01:88:a6:
6b:02:6f:68:92:de:e5:fc:50:30:00:01:74:23:53:
e7:20:ab:49:c7:78:17:d8:e3:e3:8a:7b:47:32:61:
09:57:21:82:3e:6b:cb:0a:3a:19:95:f0:42:7f:f2:
48:84:91:01:fc:46:c6:69:eb:61:44:d0:66:40:e0:
5d:66:95:87:fb:44:7c:00:bb:41:e8:49:09:61:7e:
32:9d:10:40:14:db:f6:d4:b2:70:2e:2d:2e:df:17:
f3:8e:41:9c:4e:8f:fa:04:4c:1b:aa:79:ea:86:8c:
5c:c7:fa:18:05:51:5b:48:c9:1a:9a:68:05:ab:ba:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:DA:50:3F:CF:02:65:C3:E9:DB:F9:D9:8B:0E:82:17:2A:07:CE
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/8Z3aUD_PAmXD6dv52YsOghcqB84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.221.0-195.225.223.255
Signature Algorithm: sha256WithRSAEncryption
54:2d:c0:03:3a:99:29:ab:7e:87:1a:b6:74:95:02:90:73:66:
07:a0:cb:82:7e:2c:e3:3b:29:d9:ad:ea:61:58:d2:67:91:ce:
21:91:e9:c3:c7:6a:76:c3:a6:94:00:39:d5:ca:ce:47:4b:86:
ef:68:00:e6:23:0d:de:74:d0:da:8a:9c:0c:f3:7e:9d:a5:5f:
22:32:1d:b5:40:3e:6b:aa:d6:49:30:56:2e:cf:88:3d:f5:fc:
73:cd:82:86:99:07:04:5b:e9:16:3b:32:a0:ff:7e:85:cb:86:
77:6f:1f:cd:c0:71:87:07:91:69:73:44:dd:03:b9:f9:52:0f:
1c:31:33:07:cc:59:74:bf:13:d8:02:72:01:4e:c9:a3:2b:68:
75:67:2e:07:85:fe:a7:2d:64:8b:89:50:fe:ca:9c:4f:9b:c9:
88:5f:ae:30:bb:43:00:6d:f2:cd:7c:a3:b5:1f:98:12:9a:12:
0a:1b:5b:80:ac:b8:e7:3d:d5:96:06:25:df:dd:f3:e5:19:e3:
53:50:c4:cd:84:57:cd:63:59:2d:8f:01:03:41:20:d9:1f:64:
8a:e7:a6:2d:b5:2d:22:de:4e:cf:0d:0d:57:eb:d3:09:75:bd:
8d:0f:f0:9d:f0:75:c7:60:6a:b2:1f:e1:06:fe:d3:26:56:2c:
a2:70:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:39 2025 by rpki-client