Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZpbxNdGUBZswJgA5vQaZPF7C0Sk.roa
File: ZpbxNdGUBZswJgA5vQaZPF7C0Sk.roa (raw, json)
Hash identifier: eUwh0U4Fv8PB3mdCZbrd1Wms0puctsmNn5T/JG97skE=
Subject key identifier: 66:96:F1:35:D1:94:05:9B:30:26:00:39:BD:06:99:3C:5E:C2:D1:29
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206848DB365E138BDA6BC5AC45271230
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZpbxNdGUBZswJgA5vQaZPF7C0Sk.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59504
IP address blocks: 147.45.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:48:db:36:5e:13:8b:da:6b:c5:ac:45:27:12:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6696f135d194059b30260039bd06993c5ec2d129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:8c:8f:5b:6a:9c:ef:80:75:d0:c4:d1:2f:
95:b6:78:ca:2b:4c:05:fd:9d:82:63:4f:28:5f:c0:
d6:32:cb:e6:a3:08:b4:93:07:3e:29:74:05:20:24:
ec:85:39:77:0d:62:c8:33:e5:0d:91:2e:78:e4:68:
0a:b2:f3:09:b0:fe:29:54:c1:66:81:8a:d6:c8:0c:
3e:cc:c3:b8:54:f9:0b:7a:ca:0f:eb:aa:da:1e:2c:
bf:4e:2c:d3:0e:45:db:df:4c:a7:d1:76:4b:05:c8:
d2:04:16:b2:32:8e:ef:c2:0e:32:e5:e3:85:3a:87:
ba:53:e5:5c:fd:b6:83:ee:ed:bf:f7:df:bc:8c:07:
14:06:92:f5:00:e2:09:89:70:42:28:b9:53:8d:b1:
00:57:0c:01:62:4a:f9:f5:44:47:c9:18:ea:aa:a4:
41:4c:11:16:70:c4:10:44:af:4f:08:a0:1e:6c:60:
e0:6b:5b:14:63:49:53:f9:36:fb:b8:84:37:70:62:
1d:89:9d:91:d5:d2:5d:45:f4:fb:49:a9:f1:ae:71:
f9:35:fb:ec:34:9f:6f:96:44:b8:05:76:14:3f:50:
86:40:d7:bb:6a:14:fa:f2:28:31:47:be:af:45:bb:
4a:5b:e3:7a:1f:4c:f3:ac:83:e9:db:88:1c:0b:30:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:F1:35:D1:94:05:9B:30:26:00:39:BD:06:99:3C:5E:C2:D1:29
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ZpbxNdGUBZswJgA5vQaZPF7C0Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c0:43:aa:9c:3b:d3:60:d3:ec:4a:72:76:07:b4:03:4f:40:
b9:af:c0:34:bd:d0:74:50:88:cb:8f:b7:10:ae:e2:b3:72:a5:
22:a6:f8:67:93:ec:e7:73:9c:46:da:d1:72:58:16:14:04:27:
1f:df:32:ce:24:02:8e:f3:1a:4c:b6:34:d4:4a:28:c5:fc:df:
ef:89:66:e7:8b:ea:f3:3a:72:a0:de:99:fe:2d:3d:d3:27:7f:
a6:74:dc:af:27:c1:c1:20:81:e0:17:8c:42:cc:b1:f4:74:6c:
5a:a1:3b:8d:1f:fd:4a:71:37:b9:89:94:ec:1b:61:6a:c9:39:
6f:99:61:91:fc:82:b9:84:ec:ed:b5:77:a5:4e:39:50:8e:0c:
83:e9:e8:a5:75:b5:27:84:70:de:bb:a7:dd:47:a7:d8:66:bd:
37:03:ae:b6:70:9d:99:84:cf:f9:73:a9:2b:4c:cf:8a:02:70:
ec:5f:08:9f:95:dc:84:ee:33:40:1a:f8:0d:97:28:02:87:d6:
fb:19:95:5c:21:75:32:a7:3a:18:98:b2:93:23:e2:62:b6:35:
26:37:37:f3:ce:22:f9:d5:13:11:6d:c0:04:60:55:ea:26:28:
17:e1:e6:70:bf:b8:97:a8:d3:33:6c:38:52:3a:02:24:00:64:
92:1b:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:27:17 2025 by rpki-client