Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BZ9RZKbpjbdRvCiDoWaI7hrTCLs.roa
File: BZ9RZKbpjbdRvCiDoWaI7hrTCLs.roa (raw, json)
Hash identifier: YkO9HIYkaSghVSCiQnQmxE56Z21bqXCJHH4nIBFmYvs=
Subject key identifier: 05:9F:51:64:A6:E9:8D:B7:51:BC:28:83:A1:66:88:EE:1A:D3:08:BB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282483BC40C5EFAF913587A28B4ABAED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BZ9RZKbpjbdRvCiDoWaI7hrTCLs.roa
Signing time: Thu 02 Jan 2025 17:51:09 +0000
ROA not before: Thu 02 Jan 2025 17:51:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 94.156.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:83:bc:40:c5:ef:af:91:35:87:a2:8b:4a:ba:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=059f5164a6e98db751bc2883a16688ee1ad308bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:f3:7d:de:4c:14:ef:62:0b:3a:af:2c:e7:
1e:80:18:f3:43:a8:64:a7:a5:6d:3d:2c:f7:6b:29:
41:1c:41:d0:cd:6f:8b:ac:e2:df:1e:41:f5:9e:1d:
3c:78:36:0f:99:28:05:1d:d0:5a:64:47:0e:b6:27:
64:9f:94:dc:b7:82:84:de:7f:a9:a5:23:32:22:cf:
bd:ea:d5:ca:a4:90:9b:c8:64:25:d0:9f:c6:85:e7:
e9:62:e0:16:ea:a9:27:26:48:ca:83:e8:7f:e5:25:
a9:1b:5c:16:c0:8d:f7:6d:67:71:64:8c:f8:38:4d:
2c:fa:45:d9:1e:e2:0a:3b:fb:ed:f3:6d:3a:04:8a:
21:c4:d4:de:42:90:2a:98:e0:52:1a:c4:69:cd:6c:
f3:b5:9e:7f:4c:41:8f:82:03:0f:0b:1a:99:65:ed:
98:a3:48:c8:62:6a:5d:06:24:4b:21:06:85:71:93:
f2:b8:d4:7f:a0:86:25:1c:33:42:cd:d4:9e:58:b1:
db:d7:42:4f:c5:bd:c4:c7:50:5b:2c:40:0a:20:08:
e3:4d:8c:56:93:9c:12:14:c6:31:0d:0c:14:78:25:
6a:8b:3c:2d:52:2e:1f:5d:d6:a5:8d:9d:84:a0:fe:
01:f6:84:e8:a1:31:85:49:30:9a:31:10:b2:5e:fc:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:51:64:A6:E9:8D:B7:51:BC:28:83:A1:66:88:EE:1A:D3:08:BB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BZ9RZKbpjbdRvCiDoWaI7hrTCLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:33:74:4f:59:71:a3:22:1e:20:19:7f:ba:94:79:6a:9e:c0:
42:61:01:a3:10:91:5c:78:ac:95:1c:e2:fa:8f:bd:55:7b:58:
c8:9b:77:ab:b3:57:90:04:8f:a8:51:0d:a8:e1:53:a4:64:5e:
7e:5b:3e:16:17:ba:26:a0:3a:00:64:33:d2:61:5e:da:61:17:
06:2d:40:b1:42:6f:d3:ad:50:3c:01:a0:c8:42:11:26:3d:2c:
be:50:44:4d:66:29:38:e6:72:cb:38:36:bc:b6:0a:49:22:92:
33:83:02:b4:df:7b:6a:f2:11:be:ae:26:e7:18:11:90:1e:8b:
d1:56:33:15:d6:a1:ce:4f:a8:bd:d6:43:39:a7:ff:a4:04:59:
56:49:47:86:a2:fb:f8:4b:19:71:f8:59:ef:3e:cb:1d:7d:fc:
97:6d:14:62:de:10:74:1b:02:47:9a:a6:c0:d4:21:0e:42:69:
c1:de:b5:50:8c:21:cc:dc:81:5f:d4:ec:0b:56:89:ab:fa:fd:
c3:e2:b3:ea:91:3f:62:c3:e7:d9:88:fc:9b:04:c7:51:d1:c3:
89:d5:e2:12:b3:7e:5a:31:91:76:f2:fc:c0:e8:b0:65:23:74:
af:09:f3:39:cf:4c:40:2d:3d:1c:9a:54:be:d6:6e:71:3d:c6:
0a:d8:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:33 2025 by rpki-client