Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zGwWrkSRQZP2IpWi5-NjcilHQh8.roa
File: zGwWrkSRQZP2IpWi5-NjcilHQh8.roa (raw, json)
Hash identifier: SIMBYvu3SCnsZgfhXaRLO5XQKkZloilVxiX0vDack9g=
Subject key identifier: CC:6C:16:AE:44:91:41:93:F6:22:95:A2:E7:E3:63:72:29:47:42:1F
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D7863F35D8B4B7AC3385538B4D4BAB
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zGwWrkSRQZP2IpWi5-NjcilHQh8.roa
Signing time: Wed 01 Jan 2025 21:48:34 +0000
ROA not before: Wed 01 Jan 2025 21:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58269
IP address blocks: 87.246.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:86:3f:35:d8:b4:b7:ac:33:85:53:8b:4d:4b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6c16ae44914193f62295a2e7e363722947421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:0d:e5:b5:4b:22:67:54:6c:8d:0d:36:af:
66:f2:f8:35:7b:02:34:70:54:1a:5d:b1:d1:ab:63:
47:6a:bf:7b:61:23:45:71:96:f2:e4:4a:a0:41:e0:
0a:d4:d9:10:b9:78:33:fa:9d:a9:12:25:59:74:98:
49:2f:cd:18:f6:40:43:db:84:a1:85:46:2a:29:5e:
59:5c:7b:05:00:54:79:38:25:d6:93:a5:57:50:ee:
03:f8:e4:f7:36:62:c0:f6:ad:2e:6a:a1:90:07:53:
f5:4d:b4:4e:0a:26:07:95:5a:97:a3:8e:b7:e5:96:
3e:33:f7:72:af:1e:c6:10:e0:21:21:17:65:e5:0e:
b1:d6:67:2b:40:56:d5:05:c8:35:ce:9b:43:05:69:
f7:75:67:c9:b7:cc:f0:27:7b:ce:85:83:81:cc:ba:
dc:9e:1a:98:2c:cf:47:75:a2:7d:21:50:3f:90:03:
ce:08:de:bf:56:04:56:28:9c:b9:c8:0d:1a:97:f3:
5e:a8:e3:0a:51:b8:4d:3b:81:f4:5c:55:f3:89:b2:
33:ac:88:3c:f4:ae:4a:39:dd:64:93:10:dc:93:50:
82:de:b8:d5:4f:db:38:82:38:52:9d:97:dc:d3:9a:
54:9c:cd:95:e5:f1:c2:77:f5:ed:66:1b:55:6a:e1:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:16:AE:44:91:41:93:F6:22:95:A2:E7:E3:63:72:29:47:42:1F
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zGwWrkSRQZP2IpWi5-NjcilHQh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.183.0/24
Signature Algorithm: sha256WithRSAEncryption
27:04:71:3b:a4:67:40:0c:7c:79:9d:41:17:17:7d:8f:42:8a:
40:37:53:8c:10:bb:52:af:90:eb:e0:9a:57:27:cf:83:a7:6f:
3a:ef:9e:13:7d:b5:18:c2:dc:3c:aa:5c:d8:57:3d:9e:7f:11:
45:47:3f:c2:ce:96:8e:43:46:f2:d7:90:a8:94:87:51:4a:bf:
99:fe:52:a7:fb:c1:94:9a:b5:d9:73:53:8a:5a:2e:37:89:18:
a7:5f:58:d8:9d:99:93:37:f9:ec:87:08:1d:cc:71:ce:bc:ad:
c1:e5:01:13:24:e5:1b:03:df:80:29:bc:0d:0a:56:ad:b2:5a:
48:f4:d8:73:c0:90:12:54:b8:97:75:5c:10:33:91:30:5e:c0:
33:0e:90:2c:c1:ef:2f:ed:40:fa:fc:b6:89:c9:c5:da:d4:76:
47:80:5f:fc:a1:d6:f0:94:a2:19:38:54:81:6b:0d:c1:c9:91:
3e:2b:49:9f:8a:6e:36:f8:9a:b4:67:db:25:f4:db:6d:01:3a:
f8:8a:63:fc:b0:a4:8b:cf:12:a1:b1:24:c4:2e:ba:2a:3d:ea:
8d:e5:03:25:86:23:42:34:99:f8:55:b4:a1:1d:b7:f4:e6:2c:
0a:01:46:e7:60:bf:37:52:59:2c:a2:ec:98:5b:76:22:13:0e:
7c:77:b3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:46:32 2025 by rpki-client