Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zuywp51hZO8pJxdpr4Mm49x4GQE.roa
File: Zuywp51hZO8pJxdpr4Mm49x4GQE.roa (raw, json)
Hash identifier: EkHy5dROzFDlkFvUX1t2ytSqBiAg5+rgc6GsAXcOHHA=
Subject key identifier: 66:EC:B0:A7:9D:61:64:EF:29:27:17:69:AF:83:26:E3:DC:78:19:01
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FAA2FB36044AE683F6C5B71FA976C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zuywp51hZO8pJxdpr4Mm49x4GQE.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395092
IP address blocks: 2.57.151.0/24 maxlen: 24
45.158.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:aa:2f:b3:60:44:ae:68:3f:6c:5b:71:fa:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66ecb0a79d6164ef29271769af8326e3dc781901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:77:49:aa:5d:02:19:8d:e6:f9:4e:78:3b:
b0:ed:a5:a9:5e:b8:51:d4:20:96:35:2c:72:da:31:
04:18:dd:a0:3b:ca:62:9b:91:c9:bc:0a:a0:3d:d0:
95:ea:ae:47:e8:e8:da:7f:f7:7f:b2:6f:fe:6f:27:
35:39:2c:8e:ba:c9:9d:de:e7:0d:3c:65:ec:7d:ec:
0b:af:29:fc:ee:3c:2a:f3:8a:15:28:1c:bf:e8:da:
2c:3d:d7:42:55:58:91:58:3f:53:c4:76:9a:70:57:
52:4a:26:2a:8c:22:c1:0d:4b:75:b5:ad:9b:a8:77:
57:6e:19:3c:d9:83:8f:55:aa:74:ef:6b:b0:9e:0e:
4a:a3:11:81:0f:8f:af:4f:fb:ca:45:7e:95:31:a3:
7e:bf:f6:55:68:eb:a8:e1:a2:7c:df:08:a0:6c:b4:
29:b5:74:2f:94:82:dd:00:15:85:a3:28:ef:89:96:
8d:ab:7b:cf:64:94:b4:9c:1e:42:96:41:51:23:89:
b3:ca:e0:8f:38:c3:1f:e8:ac:32:fb:2d:48:a4:ae:
d1:83:35:ff:f7:e4:1e:b9:1d:3d:67:76:ca:0a:ec:
e0:31:12:e2:2d:0c:45:ef:4c:ac:97:c8:12:d0:2d:
52:d4:a8:e5:34:21:ab:90:f4:c8:0a:49:5f:31:b5:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:B0:A7:9D:61:64:EF:29:27:17:69:AF:83:26:E3:DC:78:19:01
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zuywp51hZO8pJxdpr4Mm49x4GQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.151.0/24
45.158.44.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b8:3f:10:35:5e:db:83:bd:e7:1d:b4:a6:1d:70:ae:82:69:
4d:de:6e:51:34:67:30:92:fa:cb:e5:a4:4d:f1:44:58:53:4e:
90:7c:38:33:6f:6f:54:f7:ec:b5:56:c0:08:20:c1:4f:a9:da:
53:86:a7:39:38:de:e3:45:6c:22:20:61:7b:c2:98:b3:e1:fa:
fd:50:1b:7e:bc:a4:ff:cf:83:12:b7:f0:b9:9d:97:f9:e3:0c:
ed:4e:49:dc:49:f4:6b:3a:be:17:45:a9:42:aa:60:6d:13:59:
e9:62:a8:2c:3a:84:4f:3b:bc:e4:06:4a:4f:8f:46:e2:c7:f4:
de:55:bb:24:07:87:86:85:04:38:8b:1f:f1:30:1a:1d:a3:83:
bd:7c:d3:e4:b8:cc:e9:13:7f:48:4c:9f:9e:4c:ba:bd:60:3f:
bb:74:e4:a4:8c:c8:b7:36:3a:10:43:94:ec:d4:5d:a8:61:cb:
61:bd:a1:83:59:55:67:85:03:84:35:46:e8:07:79:da:e4:7f:
30:50:0e:1f:73:a4:cc:ae:bf:08:36:25:ad:d7:04:ff:b1:f0:
e6:66:c0:76:53:41:0d:25:66:97:31:f4:45:94:80:f7:33:70:
17:ca:bd:a1:06:fb:a9:c4:63:74:5d:94:53:8a:3e:ba:cb:31:
67:fc:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:15 2025 by rpki-client