Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zLlAqAt3n8FTUrwoKH9m828ItQs.roa
File: zLlAqAt3n8FTUrwoKH9m828ItQs.roa (raw, json)
Hash identifier: 13OTE2BRjgmvi1pyjKsd04Ie7ywsICzVeEBqNUeeCfs=
Subject key identifier: CC:B9:40:A8:0B:77:9F:C1:53:52:BC:28:28:7F:66:F3:6F:08:B5:0B
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281451AFCCF7316EA950A90BA858B7
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zLlAqAt3n8FTUrwoKH9m828ItQs.roa
Signing time: Thu 02 Jan 2025 17:55:02 +0000
ROA not before: Thu 02 Jan 2025 17:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41889
IP address blocks: 88.203.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:14:51:af:cc:f7:31:6e:a9:50:a9:0b:a8:58:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccb940a80b779fc15352bc28287f66f36f08b50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:b2:dd:1c:04:fa:fd:f8:80:d5:08:d9:4a:
72:5e:19:de:94:db:05:fa:68:28:1c:66:08:d7:51:
df:b2:0d:9d:53:2a:68:db:51:49:f5:88:42:f2:b0:
05:8f:66:0d:66:b2:79:01:1c:0d:78:c3:4b:91:ab:
9a:9d:8f:80:cb:3a:22:4c:3b:76:d9:31:2c:f9:89:
65:ed:e9:63:9a:51:47:2c:80:de:dc:68:15:e6:e6:
f4:05:08:ec:fd:5a:af:d6:a1:12:3b:5a:68:f3:e4:
a0:ad:55:8a:90:ba:3b:e1:1e:7b:6d:39:30:9d:40:
1e:10:d1:9b:ee:08:eb:04:24:7c:39:8a:77:92:d7:
f9:69:b2:7f:33:25:b7:6d:a3:80:f5:6c:02:e2:dd:
8b:4e:73:6f:c1:64:2d:55:eb:cb:cf:40:ee:25:bf:
97:2c:78:51:67:06:fb:91:22:c6:f0:1d:1b:01:b3:
86:1c:e3:02:6f:71:42:82:e5:db:c4:e5:a0:b4:ba:
32:22:ee:d0:d0:43:9c:0e:0f:e5:f9:55:d3:18:9d:
06:63:51:ee:67:6e:f9:4c:71:0e:f9:76:d6:e4:3a:
89:dd:72:36:df:54:77:ea:01:7d:df:b6:ba:e7:31:
02:b9:76:31:a7:21:9b:b4:a8:d0:68:17:96:56:12:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:40:A8:0B:77:9F:C1:53:52:BC:28:28:7F:66:F3:6F:08:B5:0B
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zLlAqAt3n8FTUrwoKH9m828ItQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:47:6d:ff:1b:4b:36:50:8c:88:ef:10:62:e4:ee:44:16:eb:
de:f3:d6:91:7e:c0:39:f3:0d:a6:9c:91:93:0c:4f:84:de:e8:
68:ce:74:12:f6:c7:a7:df:0d:3d:23:17:02:fb:33:18:3a:eb:
0b:2b:2b:ed:f0:26:73:73:8a:13:67:ad:41:6f:c3:4f:14:3a:
f3:7d:d6:a9:f4:3b:ca:99:57:8a:40:1f:c6:e4:7d:f5:69:ff:
c2:ac:d6:33:38:44:e3:83:3c:bf:24:aa:ad:c4:3e:22:2b:58:
22:d1:f5:7b:32:7f:d3:28:15:9a:81:bf:0d:be:54:53:f0:a9:
06:77:7d:85:2e:39:59:2c:70:12:e4:69:36:29:94:1b:6b:39:
0d:cf:25:ed:c8:b8:8f:45:77:b3:5d:fd:ea:45:14:3b:0c:1f:
87:61:9e:e6:6f:74:6c:c5:01:ca:50:76:ea:c4:d3:ef:de:08:
41:ae:49:9e:6a:7f:61:9e:37:8f:6c:fa:3f:93:4f:d9:6a:3a:
57:63:6d:d3:a9:86:6d:66:df:72:90:ed:d3:68:5f:86:da:fe:
cf:55:b6:5c:8b:9d:18:05:35:b1:32:91:a2:57:71:82:b4:6e:
6e:bb:b4:a4:89:c1:ff:82:1a:cc:b8:8b:a9:d7:63:5f:58:d9:
38:dc:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:14 2025 by rpki-client