Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa
File: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (raw, json)
Hash identifier: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=
Subject key identifier: CD:5D:85:AA:31:65:18:97:B5:B1:0E:E6:A1:B2:1E:89:6E:57:1F:39
Certificate issuer: /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial: 0196633B43789EBD213BF0AC22FCEB22778F
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa
Signing time: Wed 23 Apr 2025 15:19:10 +0000
ROA not before: Wed 23 Apr 2025 15:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213241
IP address blocks: 195.22.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:3b:43:78:9e:bd:21:3b:f0:ac:22:fc:eb:22:77:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Validity
Not Before: Apr 23 15:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd5d85aa31651897b5b10ee6a1b21e896e571f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:dc:bb:cc:e5:4b:38:29:82:f9:8a:34:6d:
60:95:3a:2c:09:82:d1:cb:29:b6:24:ff:96:39:da:
e1:f7:b9:61:19:ce:1f:c1:1e:68:3b:54:b9:7a:8f:
e7:98:23:87:91:dc:ba:6e:29:38:9f:7e:2a:09:3b:
4c:81:79:00:33:bf:a0:82:7f:ac:da:c1:80:f2:68:
47:c0:60:76:22:65:af:5a:ee:75:b7:d6:31:64:3c:
41:36:b7:dd:4b:4c:8d:f2:a2:2e:9d:44:6d:9d:dd:
e5:c4:61:de:dc:73:47:ab:94:ca:d7:69:ca:38:5f:
34:ea:24:fb:1c:f2:d9:58:5e:2b:21:b6:1e:ce:e7:
3b:70:86:cd:e9:ea:cb:27:4d:a7:49:53:2a:d6:7c:
00:a0:d0:f5:d9:4b:e1:a9:87:ea:04:fd:89:cd:ba:
83:a2:95:e1:46:b8:f9:8e:5c:1a:8d:94:72:5e:bb:
bf:a8:e5:1b:9d:6f:b8:25:07:d8:01:40:3c:c7:cc:
2d:88:8e:74:61:47:aa:76:cf:72:1f:97:3c:53:7e:
be:ee:9b:ac:61:dc:4d:11:db:6b:07:c3:4f:92:3f:
11:15:af:9a:2c:2d:ff:da:cd:52:5a:0f:4b:d3:20:
9a:21:b3:5b:26:8a:a4:24:2b:c1:68:5b:65:04:f1:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:85:AA:31:65:18:97:B5:B1:0E:E6:A1:B2:1E:89:6E:57:1F:39
X509v3 Authority Key Identifier:
keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:e8:f3:51:0b:c9:c8:26:1b:05:14:f8:38:48:c8:9b:76:49:
51:87:4d:c7:47:b6:ce:02:97:19:9d:97:e0:8f:b6:b4:82:5f:
e1:39:b9:49:c6:eb:aa:ae:bf:c6:73:7e:97:d0:27:55:47:91:
67:64:b3:cd:ad:97:4c:7d:93:c5:b6:ef:9c:5f:82:67:8d:66:
be:5e:bb:f4:88:43:db:38:6e:d7:01:f1:0c:1b:15:6a:ac:b7:
87:2b:85:f8:47:25:ea:13:e4:0b:ab:77:e0:b1:b7:fa:25:98:
46:8a:cb:c4:e8:b3:74:02:ea:56:93:ed:0e:47:55:84:e4:14:
cd:eb:c8:95:7c:d1:c6:1a:ed:20:5f:6c:81:37:00:11:2e:fa:
58:11:3e:f9:ff:96:d5:a8:af:0f:00:6e:74:a1:9a:fa:74:d0:
ac:0e:30:0c:c4:be:87:19:86:91:37:15:c0:6b:3b:4e:05:44:
51:cc:35:6a:de:75:a9:33:87:ec:ea:de:85:10:36:d6:39:49:
5d:fc:1f:02:0e:1c:be:2d:ff:ee:7f:5a:e2:e7:dd:12:7e:fc:
52:23:e4:3c:1f:02:c0:54:b9:51:32:c9:1c:73:9c:e9:ce:54:
9d:38:19:ee:22:8a:21:3f:dd:7d:eb:7b:de:b8:87:d6:b9:c1:
89:14:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:51:01 2025 by rpki-client