Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa
File: Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa (raw, json)
Hash identifier: rWWNSNbf0TpPeCx9vIr9DCtT6kmAFEPWocJVPgJZlfk=
Subject key identifier: 67:86:61:CB:C2:6F:53:29:15:DE:75:34:85:FB:55:39:48:CE:2F:EF
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0194206812ED00304B4148712C2A88AF4D06
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216459
IP address blocks: 45.130.54.0/23 maxlen: 23
193.109.137.0/24 maxlen: 24
194.156.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:12:ed:00:30:4b:41:48:71:2c:2a:88:af:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=678661cbc26f532915de753485fb553948ce2fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:52:d1:39:23:2a:2f:a2:a7:bb:c7:a6:00:
a6:7a:5b:45:5a:12:25:91:84:61:7b:ec:03:e4:ff:
c2:1d:e5:ec:9c:51:dd:8c:22:b2:f6:40:e0:11:66:
f6:0a:ba:6a:03:e0:7f:9a:fc:02:72:7c:26:ab:88:
cc:b0:20:5c:b3:54:69:ee:f3:fa:e4:31:2c:28:46:
26:43:55:31:07:f7:af:23:7c:ce:e4:31:18:9c:38:
cf:97:78:48:0d:56:81:52:ab:54:04:37:02:6d:4d:
7b:7e:39:e3:3a:e0:8f:4d:57:1e:fc:f9:05:d1:24:
d0:a9:16:a8:a9:78:94:3b:c7:c6:5a:5f:c9:d4:73:
c3:56:b8:13:2b:56:7d:2b:5e:c7:5b:fb:38:d7:70:
8e:87:61:c8:12:23:51:a3:ba:92:7e:ce:55:1e:24:
0d:24:18:5f:37:62:bf:c0:b7:54:39:50:cc:cf:bc:
58:82:4b:31:56:8e:98:89:0c:bd:f9:e5:bb:f8:1f:
1e:4f:ef:d8:59:96:e4:0f:d5:31:53:e7:65:ba:7f:
a6:fd:1b:a4:95:b7:3f:d6:08:ad:cf:fe:0d:e8:70:
97:17:1b:b1:d1:91:38:61:4e:04:64:06:2d:74:7b:
51:2b:0e:d5:b3:49:40:d1:bb:0c:f5:e2:ec:aa:98:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:86:61:CB:C2:6F:53:29:15:DE:75:34:85:FB:55:39:48:CE:2F:EF
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
193.109.137.0/24
194.156.176.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1a:30:d4:bd:12:08:e5:f0:50:5e:a7:9e:f7:9c:66:10:e0:
da:8d:2c:76:83:32:1b:2b:97:fa:a3:45:a2:d4:87:8f:2b:18:
5a:48:4b:32:16:dd:98:08:27:ee:d0:01:c7:95:0a:ba:5d:8d:
6d:d6:0f:6f:39:b6:e7:4c:45:a6:f8:76:bb:21:3f:a4:ff:36:
1d:a6:39:71:4c:3d:d8:50:05:3a:45:f4:f5:67:02:3e:85:d3:
47:8c:f2:fb:0d:0f:c7:6c:4e:86:d4:10:a1:53:0f:a8:05:b4:
ea:86:ae:9f:d4:9b:1c:b4:3f:82:2f:d0:4d:c5:d4:16:40:a5:
c6:a4:41:a1:92:bb:9f:47:35:52:b6:58:e8:cd:90:80:87:e2:
67:cd:b7:a9:2b:56:fa:ac:13:20:53:9a:04:d4:f5:e3:3b:d3:
46:17:c2:12:4c:4e:5e:02:0e:97:25:85:60:01:be:c0:ed:9b:
4a:af:d2:f3:4f:79:4c:29:c9:39:ec:c6:a4:5b:a9:ee:a1:61:
31:38:e7:37:42:df:27:7d:96:2d:8e:e9:e3:7b:72:6d:5b:51:
9a:38:12:ee:cb:43:ed:4a:03:eb:6b:f2:31:af:a9:34:76:32:
f8:7a:ee:0f:3d:f7:35:a8:d5:97:80:29:98:4b:74:51:37:1a:
fa:4c:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:04 2025 by rpki-client