Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/rzOkydR3EHFZXD3XEkRebB02-_4.roa
File: rzOkydR3EHFZXD3XEkRebB02-_4.roa (raw, json)
Hash identifier: df7jTqxQL8Sw059sbRTkyG9ltt5KtHFaW+BfP29wPTk=
Subject key identifier: AF:33:A4:C9:D4:77:10:71:59:5C:3D:D7:12:44:5E:6C:1D:36:FB:FE
Certificate issuer: /CN=28c2202a443537fb8fb280567a17485f1230c411
Certificate serial: 0194258EEA88E7D58AF486ABBC474CB980FE
Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/rzOkydR3EHFZXD3XEkRebB02-_4.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51926
IP address blocks: 91.220.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ea:88:e7:d5:8a:f4:86:ab:bc:47:4c:b9:80:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af33a4c9d4771071595c3dd712445e6c1d36fbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:fb:32:75:fd:d2:e7:2d:5f:61:78:fd:78:
33:ad:da:17:9c:54:c8:48:e9:e4:78:d0:6b:68:46:
95:18:50:76:25:db:a3:00:d9:37:75:82:37:ac:d9:
97:53:24:dc:9f:c1:30:10:2a:6c:7e:38:a0:1f:ed:
b7:1c:6e:1c:17:b6:6b:ce:45:a9:df:78:eb:cf:de:
68:46:1e:06:4e:c4:0b:a0:65:1b:c8:0e:e6:2c:a8:
e2:10:16:fd:bc:e5:ea:6c:99:12:0d:03:ea:2d:c7:
77:b9:1a:95:30:26:2a:b8:5d:ee:63:51:b4:36:46:
a9:66:be:c2:0a:43:c7:db:ae:a3:71:5b:fd:74:2f:
ff:7b:dd:b6:46:28:86:d1:ac:16:e8:4d:7d:53:67:
00:15:e9:c7:72:b9:1d:ed:9f:08:b0:3b:22:08:e4:
c8:bf:1c:de:c0:f4:b2:2f:a2:f0:e0:0f:ec:d5:34:
8d:a6:49:59:61:a1:5f:33:4f:15:3b:73:2a:10:b6:
6a:ba:45:b4:bb:3c:c7:ba:37:55:c1:27:7b:79:2a:
9e:86:f6:86:88:86:5c:ac:40:9a:9a:c9:6a:ae:7c:
38:0e:3f:7e:a6:c0:b2:ac:95:9a:00:29:ee:1a:5a:
64:e6:e4:af:9a:3a:02:d5:80:46:db:76:fb:c0:91:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:33:A4:C9:D4:77:10:71:59:5C:3D:D7:12:44:5E:6C:1D:36:FB:FE
X509v3 Authority Key Identifier:
keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/rzOkydR3EHFZXD3XEkRebB02-_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e4:25:a2:a2:95:2a:ab:86:f9:d2:c3:ce:22:6e:2a:0c:38:
b0:d3:6f:b6:cc:bf:2a:56:af:4b:27:f8:8b:bc:42:fd:4e:92:
17:8f:39:8c:a3:04:c7:e1:9e:68:73:cd:67:4e:31:ec:33:2a:
d6:ee:47:9b:78:87:e6:1c:d0:aa:e0:2b:d8:de:37:04:61:e6:
ff:3f:a0:2e:fe:ee:49:ef:cf:9a:46:1b:47:63:f1:79:66:2b:
39:93:fc:ef:b2:94:75:01:f7:64:70:2f:49:30:71:96:98:f7:
a6:77:2d:40:a1:3b:f5:ba:dd:93:f0:c7:a1:be:7c:8f:f0:a4:
96:73:97:56:9d:60:6f:4c:6f:00:42:6d:3d:a2:29:44:cd:07:
d5:12:d2:9c:7a:50:e3:f1:8d:79:f9:07:88:78:29:e9:5a:95:
23:de:dc:25:02:0b:70:09:c0:1e:53:16:e9:de:e0:0d:81:f3:
d8:53:c1:f1:b3:65:46:aa:f4:e2:eb:d9:17:d8:26:2f:53:4f:
87:74:91:94:f8:e9:f4:3a:e3:a7:e4:31:f9:46:d5:ff:a7:31:
7f:b5:97:3c:58:7a:87:87:6b:f1:49:74:89:e6:d8:6c:1f:a3:
97:fc:f6:d2:b3:fa:5f:5c:85:df:32:7d:20:93:36:e2:39:91:
41:b6:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:48:25 2025 by rpki-client