Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/RZCNuFYkMVfet6khSeCWtqT4r3s.roa
File: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (raw, json)
Hash identifier: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=
Subject key identifier: 45:90:8D:B8:56:24:31:57:DE:B7:A9:21:49:E0:96:B6:A4:F8:AF:7B
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7791BB8D5CB0B2B3D9B22B7395E8
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/RZCNuFYkMVfet6khSeCWtqT4r3s.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41573
IP address blocks: 89.40.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:77:91:bb:8d:5c:b0:b2:b3:d9:b2:2b:73:95:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45908db856243157deb7a92149e096b6a4f8af7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:0f:81:80:d3:7c:17:7c:23:66:94:a5:21:
3b:8f:fe:41:96:78:43:e7:15:09:ba:b5:44:94:09:
22:e4:3e:20:a9:0e:f8:0c:74:8d:b3:ff:08:f4:45:
7f:6c:0f:f6:d1:64:55:a3:28:bd:5c:78:aa:5b:46:
9f:22:dd:99:c0:76:0a:8a:b8:a2:6e:fa:bf:31:28:
99:d7:fe:ea:a0:ad:86:88:17:b8:b6:c6:64:e7:c2:
c9:e6:67:ef:a5:9c:49:78:41:67:b7:89:0f:54:6f:
40:44:55:39:e6:4c:c7:21:67:cc:37:2e:2c:2c:60:
af:eb:5f:0d:06:68:64:d5:05:16:c8:97:31:f4:d1:
09:b2:85:65:1d:7c:7d:00:3f:76:fe:67:de:e1:f6:
32:ea:6e:4c:d0:ce:ac:08:37:27:35:2c:90:3f:4e:
00:29:5e:04:b6:2f:67:5e:8d:e5:72:bd:fb:f4:d0:
a6:8e:32:1e:7e:c6:27:74:ed:74:e9:0f:42:52:f9:
4e:89:33:1d:21:f6:46:3c:00:21:63:11:bd:d9:ad:
c4:3f:7f:46:1d:d4:f3:96:2a:10:f7:85:d2:cc:21:
0d:18:d7:d6:a1:9d:4d:f6:57:17:33:35:24:b3:9a:
fa:8b:ee:04:34:69:c7:46:a9:9d:64:33:ec:11:31:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:90:8D:B8:56:24:31:57:DE:B7:A9:21:49:E0:96:B6:A4:F8:AF:7B
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/RZCNuFYkMVfet6khSeCWtqT4r3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.225.0/24
Signature Algorithm: sha256WithRSAEncryption
46:76:bb:df:bf:33:8f:c4:10:2f:3a:de:80:4a:5b:69:b0:8c:
28:f3:52:50:7c:a7:29:9c:3d:66:2f:0e:a4:8e:37:20:4b:83:
58:09:fe:2f:c1:cd:38:bf:e1:9f:1e:4d:1d:e7:83:bf:aa:6d:
0f:4a:c5:c1:43:ec:c8:49:3a:4f:e5:b7:09:7d:a5:5f:36:f0:
56:31:73:80:61:6b:d3:21:3d:2c:c0:3e:5e:b3:46:97:c6:34:
3b:72:24:66:81:1e:cc:71:f2:32:7e:61:fc:c9:b8:fc:01:cf:
23:e1:4b:79:4c:13:38:56:2b:99:90:f7:64:7d:44:46:a3:35:
c4:6a:19:df:c7:75:84:13:49:11:3a:65:d3:e5:85:c2:06:c4:
7e:37:d2:f3:3a:07:a0:cc:a4:cb:48:bd:5e:a0:cc:11:f2:85:
fc:63:e1:73:06:1a:83:6c:22:26:98:8d:fb:cd:0a:fb:d6:f7:
e1:99:e9:11:41:35:dc:be:f8:f4:69:7f:45:91:61:25:32:31:
80:9e:32:09:6b:44:ce:60:e8:22:56:ac:f0:1a:25:0f:ff:8e:
99:71:6d:15:97:a7:3e:9d:42:ce:0f:c2:d4:fd:1b:5c:24:8a:
2c:4d:ca:e2:e1:3d:e6:09:01:59:6d:a7:e4:73:1f:28:47:f0:
71:ec:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:24:49 2025 by rpki-client