Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa
File: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (raw, json)
Hash identifier: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=
Subject key identifier: 64:61:39:02:2C:EB:29:B5:E5:86:23:A0:52:91:1A:D0:17:E1:BC:A1
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019426D921ED87ADAA53ED4B54A081627D09
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa
Signing time: Thu 02 Jan 2025 11:49:11 +0000
ROA not before: Thu 02 Jan 2025 11:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.1.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:21:ed:87:ad:aa:53:ed:4b:54:a0:81:62:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Jan 2 11:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=646139022ceb29b5e58623a052911ad017e1bca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:7d:72:09:39:84:3c:c3:a3:7b:17:89:b4:
19:d2:e5:12:47:6b:90:dc:66:e2:e6:06:e6:be:a5:
8b:11:fa:4f:78:ed:e7:0c:b0:8e:35:1e:eb:a7:3c:
7f:fb:ec:6d:1d:f2:dc:53:8f:2e:4b:41:d0:5d:64:
a2:0e:75:a2:1c:3e:68:2c:1c:77:6c:26:d9:1e:d8:
eb:41:2e:1e:05:a0:c9:ee:e5:67:c5:4c:1b:df:36:
f0:04:79:cd:b3:d6:5f:1f:89:5b:c9:45:19:a7:e5:
65:ed:06:79:70:d6:7f:84:49:88:c2:3e:e9:b9:58:
66:02:f6:a8:4e:f8:12:a6:44:cb:e9:eb:ee:72:c2:
2f:fe:15:d1:2a:31:c4:ff:52:60:0f:e8:51:21:6f:
dd:8e:50:b4:3c:5a:58:57:cf:cf:c6:c2:d3:b7:d6:
34:0d:cc:70:b6:52:16:ae:80:1c:6d:b4:ad:6b:de:
bc:3b:50:76:ca:f5:02:85:1c:37:2c:e2:73:2b:cf:
c0:33:11:5e:83:5c:4e:c4:d9:4c:d2:cf:3c:bd:08:
74:0b:4c:11:92:d4:29:ff:92:70:5a:9e:36:9c:b0:
1d:ba:9e:1f:2a:cb:49:a2:fe:76:d5:69:c7:6e:30:
19:7a:bc:af:21:69:40:7c:2a:3d:f3:0b:b4:13:38:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:39:02:2C:EB:29:B5:E5:86:23:A0:52:91:1A:D0:17:E1:BC:A1
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.158.0/24
Signature Algorithm: sha256WithRSAEncryption
42:92:8a:88:e9:9d:15:40:ed:06:23:1b:de:40:98:7e:78:ba:
02:9b:93:5e:ec:fc:4a:c4:fa:0f:a3:70:4a:4e:d6:4b:98:a3:
5d:df:f9:d1:09:57:7c:9e:e3:b0:2f:f7:0b:e0:35:3d:2d:ba:
61:c0:5e:97:14:65:a2:81:ef:1a:15:ae:08:b6:5a:74:b4:35:
c4:c5:46:c8:a2:5b:7f:72:4c:7c:a8:0b:86:a2:6f:4f:9e:95:
31:bd:69:fc:67:1c:4e:63:78:42:71:0a:de:03:11:d4:a1:82:
6d:f6:cf:bc:49:2e:ce:ea:8f:0b:2e:0c:c4:ea:1f:09:e9:39:
82:60:0d:7f:aa:1b:81:6f:69:23:56:2e:ee:db:46:eb:f9:68:
70:29:16:2e:05:db:21:a3:24:f1:f1:30:b9:53:da:4a:31:ec:
ba:2c:f8:78:71:7f:05:3e:e8:bd:bc:a7:55:2d:b5:ea:a0:39:
fe:d7:4a:ad:51:0f:2f:48:2b:f6:ac:7f:b2:3c:0e:4c:42:dd:
9d:bb:3c:17:99:ae:e4:a1:db:e2:31:1f:48:49:8c:db:bd:b9:
73:12:46:13:b8:ca:b2:7a:68:9c:98:40:f4:02:c4:6f:54:c2:
db:96:b2:c3:02:31:be:e7:d0:4f:59:be:db:f6:13:f4:a0:11:
30:b4:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:25 2025 by rpki-client