Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/znlbEhSL3OBIUicM0zTghSzFWq4.roa
File: znlbEhSL3OBIUicM0zTghSzFWq4.roa (raw, json)
Hash identifier: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=
Subject key identifier: CE:79:5B:12:14:8B:DC:E0:48:52:27:0C:D3:34:E0:85:2C:C5:5A:AE
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 01941FFA43BF8EE3A29D23555C9953E8C8EB
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/znlbEhSL3OBIUicM0zTghSzFWq4.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31078
IP address blocks: 31.220.136.0/21 maxlen: 21
193.34.24.0/22 maxlen: 22
217.115.0.0/20 maxlen: 20
2a00:1328::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:bf:8e:e3:a2:9d:23:55:5c:99:53:e8:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce795b12148bdce04852270cd334e0852cc55aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:4f:8a:dd:aa:57:11:ac:16:6e:28:23:18:
c4:62:04:aa:0f:98:77:1f:27:9c:24:24:84:46:d4:
9f:2f:4c:6b:aa:d1:24:d3:78:21:07:f8:51:33:69:
fa:e2:b0:4e:83:45:01:4d:b7:f2:bb:7c:6f:12:a3:
70:38:aa:6c:bd:84:45:a8:7a:5d:2f:26:14:22:5e:
06:3a:e9:c3:9d:f0:19:11:a9:39:f8:f4:9c:5d:18:
69:e0:bc:a0:e8:d8:73:f1:b9:46:01:fa:2f:90:15:
dc:f2:d7:90:c8:cf:29:b0:d6:04:18:57:f6:fa:16:
89:ab:11:6c:b8:80:23:fd:dc:3b:c6:1d:b9:d5:27:
14:3f:f9:89:2e:b7:92:28:0e:ed:0d:e7:d1:f0:ad:
41:74:8a:1f:af:9a:75:a6:29:2e:27:12:2e:21:2d:
ca:6c:03:ff:cc:e6:de:2a:70:6d:c0:61:60:58:ed:
b3:f2:95:95:83:c9:b3:36:13:19:6f:44:a3:64:49:
99:32:99:85:df:ec:ac:ee:8c:6c:d7:f1:03:73:16:
6d:6d:42:40:71:a3:84:f3:f4:1a:94:36:d3:02:ee:
93:50:88:85:03:e3:f4:29:a9:5a:4a:57:0f:78:90:
72:7f:69:2a:2c:d5:9e:f5:fb:2b:82:d1:a6:95:c9:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:79:5B:12:14:8B:DC:E0:48:52:27:0C:D3:34:E0:85:2C:C5:5A:AE
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/znlbEhSL3OBIUicM0zTghSzFWq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.136.0/21
193.34.24.0/22
217.115.0.0/20
IPv6:
2a00:1328::/32
Signature Algorithm: sha256WithRSAEncryption
12:a4:1a:a6:86:c0:e0:33:e9:3d:2b:75:84:55:86:04:aa:19:
e4:a5:fe:81:aa:7c:76:d9:fd:b8:b8:ef:de:e2:2e:a7:6d:9d:
60:c9:48:c3:ee:27:77:7c:ba:ae:eb:a8:01:84:05:50:30:1e:
54:37:7c:20:f0:9f:cf:70:53:ee:26:bf:dd:17:43:17:8b:03:
15:d7:c7:d6:42:1b:d6:71:fe:91:ae:20:26:71:ed:04:69:2e:
48:b3:08:34:ee:8e:d5:55:87:af:04:be:2f:1b:c1:d0:14:08:
18:52:ff:6c:01:cf:9c:26:6b:3e:63:41:79:21:f7:16:4e:47:
93:44:a9:a3:26:a8:79:41:4b:77:f9:d0:4e:ac:c9:ec:c6:f0:
38:ad:10:3a:5e:91:f2:86:77:af:f1:f4:3f:64:1d:da:c2:81:
cc:fd:2e:e8:ad:11:67:82:91:89:02:43:2a:a9:af:72:64:40:
6e:b0:11:42:e2:44:c8:66:5f:a7:2f:64:31:97:3b:e9:30:2b:
30:0b:05:9a:76:8b:b8:00:6a:8b:6f:bf:3b:be:92:1d:59:27:
78:8d:6f:bf:aa:80:b0:0c:fd:01:5f:d6:ac:f6:b0:ea:63:23:
27:11:dd:14:8e:c2:c7:bc:93:de:47:50:bd:33:75:2d:98:f6:
10:81:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:34:51 2025 by rpki-client