Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa
File: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (raw, json)
Hash identifier: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=
Subject key identifier: ED:26:BA:D5:1F:8C:3A:1F:B4:64:DF:7D:E4:0C:99:53:C6:72:15:28
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01942521F298B6CB5712F17FDF482B06A01F
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53755
IP address blocks: 104.245.88.0/24 maxlen: 24
2a0d:da07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f2:98:b6:cb:57:12:f1:7f:df:48:2b:06:a0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed26bad51f8c3a1fb464df7de40c9953c6721528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:e5:33:f2:64:73:e2:4a:e7:76:b4:32:c5:
82:ea:88:56:55:48:fd:7f:fa:cb:76:b6:6f:71:8e:
05:dc:4a:f9:57:0e:bb:8c:73:07:79:b5:fc:61:a6:
cb:fa:fc:e3:ae:e9:e7:95:01:f4:3d:b5:3b:53:8a:
eb:d6:26:35:b9:ff:36:78:69:7b:3b:de:a7:ec:2e:
b9:ac:62:fc:bf:9e:c6:fc:00:2b:71:ec:de:2a:d2:
12:3a:ca:02:41:3a:2f:8c:73:c5:94:e8:32:b2:71:
35:cb:b0:fd:a8:25:7b:04:1e:68:01:5a:75:7e:ee:
7f:26:35:0a:92:e0:10:99:4f:ce:98:0e:4e:28:76:
ee:81:d5:a1:96:3b:3c:a1:e1:e4:b1:d0:b6:65:81:
b3:45:a6:34:98:ad:4c:4b:55:ea:62:0c:7a:aa:aa:
5f:57:59:1d:ef:3a:19:d6:c1:c1:d4:f0:55:64:5d:
c7:9f:5c:c7:c9:41:80:5a:84:9c:8f:4e:2d:ea:a6:
5c:49:4b:b9:f4:76:0b:2c:d9:39:14:c5:94:31:79:
25:5a:81:22:86:84:2c:e3:5b:f9:78:7f:6e:5b:6d:
9a:1c:f8:cf:f1:c3:6e:7e:9a:66:e7:e8:83:d9:db:
16:f0:88:23:00:d2:af:8c:0e:00:a2:44:0e:0c:89:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:BA:D5:1F:8C:3A:1F:B4:64:DF:7D:E4:0C:99:53:C6:72:15:28
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.245.88.0/24
IPv6:
2a0d:da07::/32
Signature Algorithm: sha256WithRSAEncryption
b8:d5:4e:46:13:08:9b:d6:98:4f:ef:e2:1e:43:37:1b:91:04:
e1:ef:54:76:2b:f6:60:bf:7c:d5:44:15:25:64:a4:46:3e:a5:
da:8d:5a:5f:3a:b4:24:9f:7c:9d:8c:e6:a0:c2:cc:4d:f8:b5:
bb:33:76:61:51:7a:7a:56:5e:8a:6a:30:9d:3f:a8:07:e9:77:
57:06:05:08:0e:01:1a:eb:5e:9d:01:b3:05:1c:2f:11:4f:6f:
47:b2:36:85:e1:b9:41:0a:8a:7b:da:24:b6:aa:ce:f0:af:29:
df:2c:e2:56:2d:25:0c:12:48:ad:17:75:2f:1e:ce:3e:76:1d:
7d:9a:7a:6a:e1:ea:2e:73:3d:0a:a8:bc:2d:8c:48:b6:a4:bb:
86:1d:22:fe:8b:25:ba:19:43:b1:ae:3f:14:56:d6:fd:bb:63:
17:5b:60:7e:0a:7e:09:6b:f5:2f:40:aa:8e:4b:4f:76:83:16:
23:3a:5d:b9:c4:d2:87:ae:b1:ac:b5:a2:d4:27:1f:17:f1:76:
56:4d:03:eb:79:e3:4b:13:51:cc:d8:18:53:8d:8a:d7:96:a7:
92:34:dd:89:90:b4:74:13:f1:5b:05:9c:e9:f2:11:4d:3a:fd:
f9:54:7b:f2:f7:aa:c1:a6:27:78:53:2a:78:f6:c0:79:3e:7d:
43:5d:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:17 2025 by rpki-client