Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa
File: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (raw, json)
Hash identifier: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=
Subject key identifier: 64:94:F4:CE:BE:E6:DB:2E:70:B7:88:16:F5:B2:84:CE:61:88:D6:8C
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 019421B210827498B84E5B67BD866ADC9580
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.10.120.0/22 maxlen: 24
2a0e:3d80:beaf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:10:82:74:98:b8:4e:5b:67:bd:86:6a:dc:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6494f4cebee6db2e70b78816f5b284ce6188d68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:b7:08:68:d4:af:6c:0c:5e:c0:b2:e5:26:
1a:1f:70:e1:12:1a:c1:ce:b3:6e:26:9b:06:8e:cf:
68:17:39:d3:6c:87:ad:75:4e:fa:1b:e5:dc:25:36:
c2:27:62:59:8c:d4:eb:cf:bb:48:4b:9b:3f:a7:9d:
2e:30:31:79:49:e9:1e:e5:45:14:f9:63:c9:d5:cb:
2d:d6:5d:32:7c:f2:79:24:03:18:1f:dc:6e:a4:fd:
45:41:f9:85:8e:fa:92:27:8d:0d:80:c3:ce:d2:c2:
c3:ed:92:90:0c:c2:3c:5d:f5:6a:e3:c8:0a:1b:0b:
2d:17:ea:35:9e:32:0e:67:1d:63:04:1a:ef:14:73:
c0:d1:9c:e6:45:9f:9f:96:b9:d9:d3:2e:78:4f:bc:
59:2e:ab:4e:d6:4b:00:23:42:c1:56:fc:52:83:9c:
be:bb:06:ac:5d:64:fb:53:36:70:43:8d:e7:7b:57:
c5:48:ad:01:1c:aa:06:7b:e5:0f:1a:5d:3a:16:04:
f6:12:ea:ca:0c:5c:5a:79:b9:b1:76:6a:9d:ed:b1:
30:2a:15:bf:45:08:cb:15:3e:11:c9:47:0b:ac:92:
c1:22:d3:d3:78:5d:53:8e:4e:77:c5:f1:c2:7e:cd:
8c:96:79:16:a4:67:a0:25:61:52:e2:02:82:71:f4:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:F4:CE:BE:E6:DB:2E:70:B7:88:16:F5:B2:84:CE:61:88:D6:8C
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.120.0/22
IPv6:
2a0e:3d80:beaf::/48
Signature Algorithm: sha256WithRSAEncryption
7d:f6:e9:ab:92:8b:77:36:24:32:97:b6:20:1c:a1:57:e2:24:
71:6b:eb:a1:03:dc:29:e4:bd:e6:19:9e:c6:f5:01:8e:8b:e7:
07:6c:2b:8a:10:c8:84:53:1b:89:df:dd:c9:9d:ff:b6:66:95:
b6:14:54:c5:b0:1d:cf:86:72:f3:fc:54:81:16:0c:c7:6d:e6:
57:84:27:4f:14:92:23:2b:d8:f3:4c:06:31:c1:f0:f6:42:62:
83:82:24:f6:ff:3b:6c:f0:81:28:a9:b5:b7:fe:c9:59:68:d7:
c4:4f:5a:1a:d0:3b:5b:43:6d:e2:c7:c0:ab:cf:0e:92:04:d7:
0d:7c:a8:ed:03:20:3c:66:90:e8:10:4b:7c:da:07:da:9e:3b:
18:19:fa:40:fd:6a:93:80:d5:94:09:00:46:8c:8c:08:a5:ed:
8a:77:75:45:4a:54:b9:73:69:b5:87:b2:ff:77:2d:78:8b:3d:
4b:f8:59:fb:34:84:fe:f7:55:be:c3:5c:65:c1:30:6c:b1:ce:
40:35:a0:ec:27:a4:7c:23:eb:0c:61:17:98:58:c6:07:fc:6b:
1f:f6:ea:63:86:5e:28:59:c6:4d:59:e6:0e:db:14:9c:40:56:
53:8a:b8:5d:3b:6d:7d:ce:7c:7d:ca:98:6c:70:63:fd:b9:b0:
82:f9:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:56:20 2025 by rpki-client