Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/zwifaiebir_mFla_bV8p6ToycZs.roa
File: zwifaiebir_mFla_bV8p6ToycZs.roa (raw, json)
Hash identifier: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=
Subject key identifier: CF:08:9F:6A:27:9B:8A:BF:E6:16:56:BF:6D:5F:29:E9:3A:32:71:9B
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019422FC33B37C02E1897E04AF84777339D9
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/zwifaiebir_mFla_bV8p6ToycZs.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56876
IP address blocks: 81.31.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:33:b3:7c:02:e1:89:7e:04:af:84:77:73:39:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf089f6a279b8abfe61656bf6d5f29e93a32719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:c1:c4:78:aa:5c:88:8b:97:d8:01:9e:88:
70:3e:01:11:1a:a1:da:c1:7f:ea:d2:ed:c0:0a:44:
c1:17:c2:3b:c0:44:38:51:cc:3b:2f:25:53:2c:54:
96:97:c0:f7:33:dc:9d:4b:13:4a:81:eb:a4:94:94:
68:e1:5c:30:67:0b:67:11:48:a4:e0:f3:0c:b4:c8:
5d:c7:6d:11:28:a5:26:3d:14:7a:15:3e:fc:30:71:
b6:c6:89:bb:c0:4d:e7:ff:24:58:b4:af:f7:66:e7:
75:8e:83:b8:8a:f1:71:a4:de:a1:af:03:8a:5c:45:
35:66:39:9a:e7:57:3c:b6:9d:6e:c7:be:2d:30:06:
77:02:e2:23:6d:1d:2a:f9:ef:08:50:d8:31:74:ac:
08:8a:60:a3:a9:20:f5:9c:fe:f4:2f:dd:3d:5b:71:
0f:ad:5d:32:9b:d1:7f:59:76:ee:95:53:22:f0:82:
1e:00:f8:5f:f6:95:86:ff:9a:f2:97:db:62:a3:eb:
69:b8:69:1f:38:9b:e1:56:c6:ce:a4:5c:82:fe:40:
0b:2d:44:36:90:ff:f6:db:0b:c5:d6:c3:75:70:4c:
fc:49:35:d6:ef:9c:52:54:bc:2a:43:ff:45:f1:18:
6b:73:d5:16:62:3b:37:6c:f7:03:45:77:be:e3:ef:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:08:9F:6A:27:9B:8A:BF:E6:16:56:BF:6D:5F:29:E9:3A:32:71:9B
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/zwifaiebir_mFla_bV8p6ToycZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.252.0/22
Signature Algorithm: sha256WithRSAEncryption
da:04:9d:88:e6:dc:20:bf:b8:cf:6e:31:2c:4c:66:2d:a1:df:
29:26:b9:6f:d8:5b:f9:c2:a1:04:20:88:21:c3:ac:b6:4f:00:
c9:c1:b4:66:e4:1b:f2:f1:e0:22:1e:b7:ca:4b:47:5d:ff:95:
ae:10:89:01:dd:60:7e:2b:3c:7d:96:44:f3:fb:a0:f0:f7:02:
78:14:0c:ec:e6:d1:1b:a1:b3:66:6c:b6:33:4c:fd:73:22:b0:
62:10:6b:e1:79:3a:22:85:cb:9c:ba:aa:40:88:61:b5:32:02:
47:e7:29:a8:6c:c1:10:c7:13:e8:73:93:29:47:ba:81:8d:be:
09:12:16:88:c4:0c:5b:29:9f:e3:08:a4:f9:43:06:33:99:e4:
44:7a:09:bd:be:8b:be:a1:4e:5c:a9:e9:4b:a0:98:f1:e8:25:
bf:de:ff:88:e4:90:1f:22:e6:e5:1f:14:91:8b:37:12:94:fc:
a7:ad:b0:f6:5c:76:dd:06:b7:22:db:d2:c2:b2:7c:8c:49:eb:
b3:a8:c6:0a:63:74:2e:cd:bb:76:62:c7:9f:43:f7:ec:24:e7:
51:df:40:b7:ec:a6:5b:7a:16:d6:80:2c:1b:6e:8c:19:04:1b:
9b:c9:ba:15:af:df:82:c8:66:7c:ee:0c:35:eb:e1:11:6d:76:
d7:22:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:02:05 2025 by rpki-client