Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/pZQHnfA_k8dTB5bHbQK0g4BGgdY.roa
File: pZQHnfA_k8dTB5bHbQK0g4BGgdY.roa (raw, json)
Hash identifier: oc9Jry6mpLBx1EcjyJgcA+rkemXAiYs0sKkWisz+acw=
Subject key identifier: A5:94:07:9D:F0:3F:93:C7:53:07:96:C7:6D:02:B4:83:80:46:81:D6
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 0196A6FBEF5510C6F45BE25F71736129D820
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/pZQHnfA_k8dTB5bHbQK0g4BGgdY.roa
Signing time: Tue 06 May 2025 19:04:10 +0000
ROA not before: Tue 06 May 2025 19:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 5.252.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:fb:ef:55:10:c6:f4:5b:e2:5f:71:73:61:29:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: May 6 19:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a594079df03f93c7530796c76d02b483804681d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:fb:7b:df:68:91:29:1e:01:5c:61:ae:5a:
ef:53:16:bb:9c:ee:46:6a:b8:a8:8c:d9:65:ad:ac:
ab:17:cb:46:88:70:3c:0a:17:40:a3:89:29:3b:6c:
b9:b2:33:9b:1e:81:54:c3:a3:aa:f3:83:3d:4f:1d:
a4:5a:d9:f9:ee:b1:02:82:3f:70:55:4e:4e:91:03:
8a:3d:6c:6a:7e:07:c9:da:4f:1e:26:e7:2f:34:7f:
4f:26:e9:2b:0f:99:da:cf:90:8b:f2:b1:e1:2d:50:
d1:46:ed:09:05:0c:86:69:c2:07:79:d9:79:5d:f1:
e7:ec:c7:64:64:1a:23:71:24:90:9b:70:ad:ae:c6:
b4:a0:a6:7d:1e:61:44:56:a4:fe:78:d3:0d:0b:55:
b5:ac:5f:f2:91:06:10:0b:e7:f5:05:37:59:86:36:
49:72:d6:ab:91:6c:e1:70:ba:10:40:15:87:5a:87:
25:b6:87:9e:f2:90:75:f9:2a:ce:9e:7e:ce:9e:f8:
ed:75:3c:5b:21:cc:4a:8c:46:24:c8:81:79:00:3f:
f0:4f:23:f4:42:3d:99:22:8c:57:8f:d5:b7:39:aa:
40:af:7e:a2:2b:70:ec:49:05:5c:22:96:c0:cb:7d:
82:71:fc:56:83:35:a0:f0:14:f3:79:f7:2c:56:73:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:94:07:9D:F0:3F:93:C7:53:07:96:C7:6D:02:B4:83:80:46:81:D6
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/pZQHnfA_k8dTB5bHbQK0g4BGgdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:40:70:0e:f0:6f:5d:17:a9:92:65:e5:f0:76:83:2f:37:36:
a1:5c:ec:54:49:f6:ab:05:fe:b9:a9:5b:58:c9:40:e2:2d:39:
2e:4b:e7:4a:f4:32:30:20:70:61:1e:44:67:b1:07:40:7b:68:
91:12:52:c1:21:a9:cd:41:15:1c:5b:22:86:89:8d:4b:bb:a7:
d0:46:73:51:f9:c5:ad:0f:14:fc:05:3d:c7:f5:ee:59:b8:41:
a0:15:45:a3:58:da:f9:1e:22:22:59:3b:98:42:f4:b5:87:d9:
b0:9b:39:f9:ad:6b:9f:49:f9:b9:f0:ad:ff:dd:53:5c:66:d3:
69:41:03:15:1d:23:0b:d6:a8:73:cc:f8:c2:51:00:39:3c:57:
3c:d0:7b:08:31:fc:96:1a:65:66:80:58:76:92:cc:a9:b8:96:
b9:b7:ef:de:aa:16:f5:1e:0b:01:b3:88:a5:70:23:e4:52:70:
ec:a0:c7:ff:33:56:f2:27:66:04:25:cb:00:93:ca:37:27:07:
de:c7:b5:d8:d2:3e:88:23:0a:76:23:d4:ef:0f:18:4b:18:36:
b1:d8:1f:b5:7b:86:cd:91:b8:74:77:bd:0f:47:ab:3c:6f:7d:
1f:79:e1:26:6f:d9:c8:e7:6d:89:a3:cf:12:fa:e3:0b:2e:3c:
7d:53:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:05:12 2025 by rpki-client