Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/zqLBYDBfWNqychEyI3nXYt2CCRQ.roa
File: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (raw, json)
Hash identifier: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=
Subject key identifier: CE:A2:C1:60:30:5F:58:DA:B2:72:11:32:23:79:D7:62:DD:82:09:14
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 019426D958AB1806AFB3AF24177568D17F22
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/zqLBYDBfWNqychEyI3nXYt2CCRQ.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12731
IP address blocks: 194.113.42.0/23 maxlen: 23
2a0f:f640::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:58:ab:18:06:af:b3:af:24:17:75:68:d1:7f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cea2c160305f58dab27211322379d762dd820914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:04:08:01:2a:56:6b:d1:b9:d2:aa:4f:ef:
81:21:8b:1e:67:e5:3e:6e:ec:bf:06:63:b4:a8:5d:
11:76:be:06:61:ee:d5:d2:8d:20:91:aa:7c:e6:15:
41:8c:09:54:0e:b5:bf:80:69:95:24:a8:e9:eb:06:
01:b0:11:3b:f8:70:72:ba:d6:40:10:e0:38:6d:c3:
0a:51:1f:47:b1:cc:38:9a:8a:4e:6f:02:a8:4a:e3:
48:f6:19:e1:97:43:00:9a:5e:b3:40:4b:b1:70:d1:
bb:71:ec:60:0d:ed:0e:38:bb:ae:e4:04:2d:35:31:
c4:dd:84:bb:a3:16:96:86:be:9e:72:4d:64:f5:9f:
1d:bd:60:48:5c:c8:e8:39:a5:b7:3d:05:d1:2e:d3:
a9:bf:c7:46:c2:83:48:42:09:9c:8c:98:79:60:c1:
ae:9c:79:21:32:16:ba:b6:12:71:e8:4d:4d:76:a4:
91:ec:7f:42:1a:5d:e4:d3:7b:66:94:21:fd:77:10:
f3:5f:2f:bf:c9:da:cd:ae:86:6a:79:c4:f9:4d:a5:
39:02:f9:4e:97:9c:36:94:c2:f9:85:5d:d8:a6:4e:
df:12:b2:f8:2c:86:0f:ab:31:7b:82:56:de:62:dd:
fe:ff:18:74:3e:fa:65:fb:ec:bb:c7:95:4e:87:6b:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:C1:60:30:5F:58:DA:B2:72:11:32:23:79:D7:62:DD:82:09:14
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/zqLBYDBfWNqychEyI3nXYt2CCRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.42.0/23
IPv6:
2a0f:f640::/47
Signature Algorithm: sha256WithRSAEncryption
52:c5:f1:12:91:2f:fa:5a:b3:30:cf:a7:24:35:f6:a8:07:07:
46:8c:1e:5e:45:6b:fa:b9:38:1f:df:b5:17:59:90:01:74:dd:
0b:33:f5:d3:af:ad:f0:6b:4c:51:e9:ad:ec:79:8f:a6:38:44:
48:0f:b7:aa:14:b6:d8:e8:d6:93:09:9a:e3:4a:d0:41:e8:cc:
50:3c:f3:97:56:e9:19:1a:64:cc:4f:91:cf:67:14:62:94:d5:
35:d3:a7:70:1b:6f:94:45:54:1d:5d:a7:93:ef:80:af:c5:4e:
73:0b:2e:31:f8:9c:0e:76:d7:0c:f9:bd:e0:60:ea:05:fc:83:
d9:b5:f3:1a:dd:2b:bc:ff:ad:01:cf:43:84:29:69:f9:5a:72:
dc:3b:ab:8c:5c:32:32:2d:cf:b4:9c:e2:7d:f4:f6:75:89:f1:
2d:5c:76:ff:13:e2:df:40:6f:57:5f:f9:84:d3:92:32:90:cd:
2b:3a:12:83:48:51:29:ff:df:fd:f1:c9:63:b4:7b:f1:81:a0:
59:f8:43:33:3e:0a:e6:af:9f:3e:cc:47:6d:8a:60:e8:49:29:
71:f6:5a:b6:f6:3e:86:d6:ed:f6:44:9b:14:c9:6a:9f:93:24:
b7:c0:92:61:8f:4d:eb:5b:99:1b:f3:5f:88:d0:32:30:99:e4:
4c:e7:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:54:57 2025 by rpki-client