Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/zsKGqfleCvDMwN0xjyFpS4xkenw.roa
File: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (raw, json)
Hash identifier: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=
Subject key identifier: CE:C2:86:A9:F9:5E:0A:F0:CC:C0:DD:31:8F:21:69:4B:8C:64:7A:7C
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019652F89A1C33D5E063691FB0CD6E914085
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/zsKGqfleCvDMwN0xjyFpS4xkenw.roa
Signing time: Sun 20 Apr 2025 11:32:26 +0000
ROA not before: Sun 20 Apr 2025 11:32:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 193.36.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:f8:9a:1c:33:d5:e0:63:69:1f:b0:cd:6e:91:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Apr 20 11:32:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cec286a9f95e0af0ccc0dd318f21694b8c647a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6f:61:0d:11:8b:c0:6e:f6:ef:ab:48:36:49:
6f:14:7e:ae:db:55:fd:b3:d4:46:a3:e4:da:8b:cc:
c3:f7:ad:d5:6e:f1:9e:0e:a2:89:55:51:65:69:b1:
a8:8a:6b:12:54:43:71:cf:f8:d9:a6:00:79:5b:7b:
06:43:e3:9b:6c:f5:5a:15:ab:20:0f:25:bb:fa:ad:
1e:c3:32:d5:ce:ef:6a:ca:10:53:0b:df:19:8c:14:
c3:80:8e:07:42:bc:9e:78:f1:c8:aa:d5:04:3e:72:
38:9c:00:c1:d5:0d:8c:01:d2:f5:fd:2f:ea:0a:e4:
cb:61:2b:8e:f4:de:d6:45:00:7f:ac:d2:c3:70:45:
9d:d1:14:d9:e6:1c:5b:2a:af:e1:bf:ef:a7:d9:8f:
76:33:83:5c:16:2b:47:7f:a2:f2:c9:46:00:3a:7a:
25:38:70:76:87:be:88:dc:15:12:87:f4:58:ab:c4:
64:35:f3:4f:43:d0:5c:d9:49:03:f5:d5:80:1b:6a:
56:02:27:9d:18:6d:b6:71:71:ec:4b:4d:5f:f7:c3:
fb:00:78:cb:d4:1d:5d:61:80:db:c5:a5:49:a5:70:
53:d2:2d:55:33:b2:30:27:88:9a:fc:0a:a8:61:98:
68:22:85:f3:d6:80:41:21:2a:9e:86:d9:bd:5b:6d:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:86:A9:F9:5E:0A:F0:CC:C0:DD:31:8F:21:69:4B:8C:64:7A:7C
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/zsKGqfleCvDMwN0xjyFpS4xkenw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.93.0/24
Signature Algorithm: sha256WithRSAEncryption
34:66:77:79:c1:44:15:42:60:44:da:71:f2:da:70:67:df:ba:
e8:a4:69:1c:ca:93:50:a5:91:c1:99:36:1a:25:e4:9c:aa:c7:
dd:dd:61:ef:e9:03:40:d6:c6:4d:ff:2f:0c:c8:3e:c8:19:08:
9d:9f:1c:4b:58:15:81:8d:dc:dd:42:bb:2b:e1:84:f5:bd:3d:
ee:fe:bd:d9:bc:e5:c3:9a:6c:c0:c1:35:31:8c:4f:ea:dc:d4:
2f:cd:7b:5a:bf:ca:29:59:20:c7:f4:ac:f1:fb:9a:09:b5:96:
54:e1:6e:1e:05:8e:3d:88:5a:bb:dc:20:ee:9f:e4:94:95:2d:
26:0d:ab:fe:69:02:b4:63:f8:54:1e:27:3f:dc:0d:d8:6e:2f:
05:62:cb:bc:64:4d:93:a7:e5:d7:64:e4:1c:46:1e:bc:b7:e4:
86:23:8d:26:82:a2:b4:4e:60:15:21:b0:e7:ad:1a:98:45:84:
f8:f8:72:3d:52:fa:37:56:12:bd:da:48:18:3b:45:c7:41:b9:
98:f7:07:06:4f:f9:e6:69:36:b4:52:82:b1:39:2a:45:53:93:
68:25:fb:02:96:d0:b6:4b:13:a6:0a:a2:ec:5e:5d:41:85:13:
ec:f9:54:6e:5b:d8:73:8a:05:61:19:51:57:79:dc:4d:19:51:
5a:ec:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:07 2025 by rpki-client