Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zSSh5zClV5fNxftUSf9ZDU9G6MY.roa
File: zSSh5zClV5fNxftUSf9ZDU9G6MY.roa (raw, json)
Hash identifier: 6/iIcEMKoblbPWIiY9yapRXccxrEUVxPjGNL0gusrxw=
Subject key identifier: CD:24:A1:E7:30:A5:57:97:CD:C5:FB:54:49:FF:59:0D:4F:46:E8:C6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01968054EA38F5B07664F58E98B70CF48ED1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zSSh5zClV5fNxftUSf9ZDU9G6MY.roa
Signing time: Tue 29 Apr 2025 06:56:10 +0000
ROA not before: Tue 29 Apr 2025 06:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
194.87.72.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:54:ea:38:f5:b0:76:64:f5:8e:98:b7:0c:f4:8e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 29 06:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd24a1e730a55797cdc5fb5449ff590d4f46e8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:c8:aa:26:30:cd:89:ed:2d:e6:d1:12:7e:
59:98:6a:4a:fb:22:b4:7d:2a:ce:c9:85:52:cf:e6:
89:8e:59:e6:cb:7e:2d:ec:9c:97:54:45:36:5d:d6:
d3:ed:cd:43:36:29:66:b2:73:4a:1a:9c:44:2f:02:
5d:f2:43:b8:85:0f:f5:ca:ab:3c:a0:16:73:b2:17:
37:c6:17:ce:aa:e2:43:1e:9b:37:f9:1f:b3:b1:6e:
60:0e:45:51:7b:cb:ba:44:31:ee:c3:d0:26:34:2e:
1b:35:3f:10:56:7f:c5:34:7b:68:71:1b:a8:4b:82:
9c:8e:2e:7f:a1:84:9d:cc:ab:0c:68:46:23:8e:9b:
29:65:08:f1:c5:01:ff:88:6e:eb:6c:f7:6d:0a:a2:
95:ec:e6:5c:17:79:3b:82:37:87:e3:a8:db:21:59:
ac:8d:21:88:0a:16:a9:d2:a6:ec:ef:7e:a6:ca:8a:
aa:31:ff:60:16:e8:5f:bb:0d:de:7a:5f:79:c9:83:
65:26:50:33:c8:e4:9a:67:6f:d2:5c:29:89:4f:e9:
75:b9:49:6f:ee:81:d3:64:08:d6:59:47:d2:73:b6:
88:90:69:cc:5c:51:95:cc:4e:0e:93:59:9b:c9:2b:
18:a5:96:fc:5b:c3:4c:a0:16:b2:c2:da:04:7b:4e:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:24:A1:E7:30:A5:57:97:CD:C5:FB:54:49:FF:59:0D:4F:46:E8:C6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zSSh5zClV5fNxftUSf9ZDU9G6MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.16.0/24
193.124.44.0/24
194.87.38.0/24
194.87.72.0/24
194.87.114.0/24
194.87.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e8:98:a4:9b:04:8e:8c:34:0a:0b:7c:10:ff:2c:be:16:74:
dd:85:0f:ab:89:d2:0a:b7:b3:58:65:ea:98:64:8e:0e:75:c4:
1a:37:a7:a5:00:c8:89:e6:d2:b4:17:85:bb:5b:14:4f:be:70:
a6:9b:a0:5d:b0:ff:7d:4f:00:d6:e2:3e:f5:90:a8:f9:9b:7e:
71:b3:12:82:73:2f:b8:d8:01:c0:3a:0d:46:de:50:ab:6c:a7:
b1:e9:52:a1:6e:8a:4a:68:4e:2f:55:12:59:81:3a:6d:a3:e2:
3f:91:08:02:df:6c:2f:27:15:a0:d2:72:ba:62:54:6c:ee:24:
fe:96:83:27:62:fe:92:16:44:da:1f:79:f8:31:bb:4a:8f:46:
ac:f9:0a:1e:de:33:10:39:cf:96:bc:09:58:22:c0:0e:10:c0:
0f:a6:58:6b:7f:5f:7a:04:d2:32:2d:4a:0c:6f:5d:c7:1b:e7:
2e:0d:3b:3c:b6:08:7b:f8:b1:01:7f:bb:fd:82:75:4f:fe:73:
be:ab:44:3b:e7:12:8d:76:95:63:89:05:e6:bb:d4:76:fa:69:
47:95:3a:41:68:05:5f:fc:13:65:6a:3f:14:ae:60:84:a5:89:
3c:2e:66:dc:19:3a:32:c9:a1:ed:75:e3:87:78:93:5a:69:38:
1a:bc:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:07:03 2025 by rpki-client