Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa
File: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (raw, json)
Hash identifier: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=
Subject key identifier: 64:0F:85:B2:9D:61:BB:5E:8F:43:44:78:E4:B7:3B:72:1C:2D:3C:D5
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 019420D60DF5D1C142795BFC362E8701E2B1
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50366
IP address blocks: 109.95.136.0/24 maxlen: 24
109.95.137.0/24 maxlen: 24
109.95.138.0/24 maxlen: 24
109.95.139.0/24 maxlen: 24
109.95.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0d:f5:d1:c1:42:79:5b:fc:36:2e:87:01:e2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=640f85b29d61bb5e8f434478e4b73b721c2d3cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:5b:07:6e:5f:2b:67:02:ab:cb:d5:16:ef:
1c:2e:7c:5c:f0:26:3a:b8:b3:d4:45:39:3c:91:8a:
0d:4b:7a:b2:70:c5:9f:81:fc:ff:46:f9:36:89:96:
c6:e3:f4:e7:b4:5c:cb:5c:22:e7:3b:c9:46:a0:2d:
a8:40:4f:4c:ba:89:77:c8:45:f0:2c:0f:c6:54:a5:
76:26:9a:df:ee:86:4c:21:df:a4:5d:c3:b5:68:8f:
1a:c3:f0:2b:0d:77:d0:0d:e7:cf:95:00:91:4c:b6:
d0:2f:8b:66:16:43:eb:c5:42:e3:7a:38:3b:35:12:
93:0f:10:ed:da:42:41:53:4e:5a:dc:f1:08:7c:f8:
fc:ce:7f:fa:dc:0c:63:d3:e0:fe:2c:ac:a4:4d:d2:
3e:10:38:8c:73:88:91:09:2f:2d:21:71:12:5d:37:
66:5a:6d:ba:09:25:29:46:9d:b9:7c:4f:cd:f4:7d:
a0:25:e7:90:74:1a:89:1f:97:5c:d4:8d:8e:9d:69:
19:f7:f5:e0:7e:f5:22:b3:a4:58:d3:71:82:cb:0a:
b9:37:ef:73:7c:21:bc:ee:a5:5a:39:31:27:f3:29:
f2:57:e6:e3:19:6c:3c:f7:1c:8b:69:ec:c1:a5:bf:
b8:c5:df:dc:e2:a9:cf:41:39:fe:8e:a1:c4:5c:a6:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0F:85:B2:9D:61:BB:5E:8F:43:44:78:E4:B7:3B:72:1C:2D:3C:D5
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.136.0-109.95.140.255
Signature Algorithm: sha256WithRSAEncryption
10:cd:64:0e:2b:17:96:cb:80:6b:de:bd:7e:92:78:19:e2:7a:
b7:95:ea:0b:a1:af:ed:e9:e5:82:4b:9e:86:49:50:3b:10:cf:
9e:03:74:ed:57:e8:2a:b8:17:ff:9e:f5:c1:72:35:90:97:b3:
f1:62:3d:6f:3d:67:be:61:3d:be:3a:25:43:29:5a:00:29:ae:
ee:99:c5:b8:6a:27:30:9b:32:2b:4c:10:4f:b8:3e:44:50:9e:
aa:67:68:f9:8c:e9:bf:15:67:66:23:0e:01:07:66:e6:b3:46:
5a:5c:cc:80:dc:8d:96:65:dd:bb:2b:a5:07:12:e2:48:50:32:
f5:ed:80:0b:c2:f5:6d:db:bc:83:40:7d:42:dc:3c:99:74:0f:
af:6c:d2:bb:a9:c0:fc:7a:f3:6a:3d:bb:40:c7:4d:33:ad:75:
7b:83:08:07:dd:11:bf:81:05:c5:bc:22:fd:41:1c:a7:91:fc:
69:c8:c9:d9:23:7d:02:ce:7e:29:60:c7:27:06:3c:7d:d1:81:
4a:2b:e5:cd:e2:67:4f:5c:77:d7:6d:78:df:96:55:db:0d:bd:
97:80:40:e4:7e:dc:7e:9d:ef:1f:e3:ec:7f:37:5e:3b:6c:59:
ef:fb:35:e4:53:5f:4d:e1:65:91:92:ba:03:40:78:95:0f:92:
99:0d:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:27:50 2025 by rpki-client