Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZlueNo25GUvLqjkuVCFwyElg2rQ.roa
File: ZlueNo25GUvLqjkuVCFwyElg2rQ.roa (raw, json)
Hash identifier: aj/CGKLCRPUdD2tIc7FHrJFT9sJCeOPsSAxO2ThHbg0=
Subject key identifier: 66:5B:9E:36:8D:B9:19:4B:CB:AA:39:2E:54:21:70:C8:49:60:DA:B4
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DC30F637027C39B2BE137F8579E8C
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZlueNo25GUvLqjkuVCFwyElg2rQ.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 94.232.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c3:0f:63:70:27:c3:9b:2b:e1:37:f8:57:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665b9e368db9194bcbaa392e542170c84960dab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:77:e7:c5:58:85:a9:ba:ef:e9:59:7d:9b:
09:db:07:a8:52:95:c4:c5:ab:81:81:f6:2f:8a:1c:
a4:61:8d:5b:f3:ae:2e:7c:32:e3:d9:1c:d1:e5:d4:
04:c5:07:29:db:53:0d:b4:14:24:0d:2b:85:79:3e:
6d:ba:4b:8b:ac:67:4a:4f:b2:cb:e9:de:8e:dd:4f:
6a:cf:05:20:eb:1c:1d:54:18:90:07:4d:46:1c:c1:
44:fd:74:bf:a1:84:62:26:d5:8a:27:36:23:6c:e6:
63:82:c5:0b:bd:91:0b:4f:0c:e9:6e:f3:6d:4a:a4:
55:d6:ad:fb:f4:83:5c:0f:de:55:93:5e:0d:55:8a:
29:ee:76:12:c4:08:de:29:57:b8:65:34:09:ff:3e:
07:d1:0a:55:a9:17:5d:d6:5a:fd:3c:77:cd:41:4c:
37:2e:2c:66:b0:70:b4:7d:d5:30:cf:fc:92:44:99:
97:e8:0a:54:47:40:ef:a8:88:a0:0a:a1:41:66:2f:
ec:3d:be:4d:dd:bf:45:c5:16:b6:84:42:9b:82:88:
40:b1:b2:33:59:2e:4e:3f:73:37:04:38:7a:9b:60:
7e:40:ca:76:da:1b:9b:38:59:5d:1d:b2:7e:a0:8f:
99:5e:87:cb:9c:17:0f:0e:ec:7f:47:db:6b:81:94:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5B:9E:36:8D:B9:19:4B:CB:AA:39:2E:54:21:70:C8:49:60:DA:B4
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZlueNo25GUvLqjkuVCFwyElg2rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:bc:e5:cb:66:fa:30:80:4f:5f:e1:42:1b:e9:8e:07:b1:f4:
93:e4:60:94:d1:f8:f9:b8:c8:5a:79:ab:bd:b8:43:41:dc:c1:
53:f3:f5:18:6b:69:c2:75:c3:70:ad:de:aa:ef:3b:24:1b:dc:
ca:5c:ea:84:23:4f:e0:49:f9:0a:e8:a1:23:0e:d1:1f:7e:09:
4d:68:6a:07:da:87:eb:41:de:c0:09:2e:eb:a7:07:92:dc:67:
49:04:ca:ae:71:37:9b:2c:e5:f2:3a:b6:5c:17:f7:80:21:0c:
a6:f6:bf:2f:a5:50:47:84:8d:fe:3f:d4:6f:df:af:99:a4:68:
54:29:2e:a3:f8:e3:38:16:18:17:4b:9c:dd:a3:66:b0:b1:56:
84:f6:64:93:78:df:d1:0a:50:2e:97:35:10:c6:30:aa:59:4a:
e7:14:d4:f5:b8:2c:67:b6:07:60:5f:ed:3e:d4:04:7f:28:de:
98:37:07:42:7c:05:53:07:11:fb:69:95:5e:a4:0a:73:dd:ac:
f8:25:a6:4a:ca:ec:37:c8:6b:e1:15:fb:6a:f7:2e:73:fb:c0:
78:94:58:d2:de:ed:f1:b2:7a:da:43:36:f8:df:16:0a:7e:06:
3f:02:58:62:20:b9:2d:a2:93:6b:6a:2f:cc:c8:17:ac:78:0e:
f8:86:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:33:22 2025 by rpki-client