Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa
File: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (raw, json)
Hash identifier: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=
Subject key identifier: 67:1E:2C:10:73:4A:0A:5F:CB:87:91:73:3A:D4:23:65:87:77:64:21
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 019423D7C3AC2FEE8DBA1D6397A31AD390BA
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa
Signing time: Wed 01 Jan 2025 21:48:50 +0000
ROA not before: Wed 01 Jan 2025 21:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 185.115.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c3:ac:2f:ee:8d:ba:1d:63:97:a3:1a:d3:90:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=671e2c10734a0a5fcb8791733ad4236587776421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:30:06:b9:c2:ed:c1:af:00:02:9f:d7:bc:
90:d0:d3:d1:2a:eb:98:3a:75:a2:16:f2:b2:28:2e:
c7:90:1d:f5:75:0c:53:67:f1:fa:4d:8f:1d:fe:c8:
2d:f1:34:ad:c6:8a:ae:a7:c1:5a:85:8e:c8:69:b1:
2c:a5:d2:2d:c1:f5:e5:f3:48:d0:1f:99:d6:25:43:
78:d2:11:c5:90:68:4d:18:79:7a:25:ad:7b:a3:ae:
a4:75:b6:b6:f2:34:83:46:8e:d9:22:44:43:35:39:
04:bd:51:d0:22:e8:a1:8d:6c:0a:6b:4e:34:95:9b:
96:a7:f1:16:e7:67:f1:ba:5a:43:10:86:b3:d5:b7:
40:8f:b3:4e:b3:76:05:57:43:4b:7a:30:b0:59:2d:
fd:f3:1d:23:26:34:ad:cf:3e:33:84:db:f5:cf:d2:
57:94:d3:7b:7d:17:7a:45:75:d4:03:52:38:c2:9b:
f4:14:ba:62:34:19:fe:1b:0a:21:56:ec:dd:dc:ae:
c7:72:8c:7e:5d:86:c0:b6:a8:09:8b:bf:25:58:7d:
8b:05:b6:c7:2c:40:e1:c0:f7:8d:d2:32:85:ce:b5:
a9:e7:03:b3:9d:b4:2d:29:ea:20:a3:e7:f1:6b:12:
d3:dd:bb:0d:24:38:78:d6:8d:bc:7f:e4:b9:46:ac:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1E:2C:10:73:4A:0A:5F:CB:87:91:73:3A:D4:23:65:87:77:64:21
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.160.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:43:a4:3a:98:cf:c9:c0:c2:54:cd:8b:8c:ad:27:12:e6:28:
fd:57:62:00:ae:75:ee:dc:a8:3b:11:76:27:1c:d1:dd:26:cb:
2f:c1:c2:9d:c9:0a:d9:06:c3:a9:82:ad:07:36:d8:88:fc:f4:
b8:f7:3e:0f:f4:b9:e7:f3:61:6c:f0:ef:cf:0c:8a:41:64:3a:
4d:b9:e0:c7:a6:c8:11:22:51:90:53:9d:d2:d8:7a:82:e1:47:
2c:9b:ab:29:f1:eb:78:d3:c4:11:ad:21:63:26:06:e3:28:6f:
d1:55:7b:ae:59:31:ee:04:43:04:ce:79:b5:2f:56:84:a2:f6:
31:b9:c7:c6:b7:71:4e:7f:7d:92:8e:1d:6d:bc:cd:bb:58:0b:
ec:d3:b1:52:e2:a3:1f:2e:84:f3:34:1e:a9:fb:78:1a:89:34:
92:ed:fb:1e:97:4c:9f:42:a7:da:ae:cd:ba:25:2c:10:3e:fd:
2a:db:e2:a5:e8:84:ad:75:47:89:2a:b5:b6:4c:13:55:a4:31:
01:9f:c2:8f:37:69:b5:b0:e5:fa:1a:8b:fe:8a:28:7c:14:be:
88:b1:62:a5:c3:9d:86:01:54:a5:6b:60:79:ae:51:60:46:55:
d5:ed:d8:86:ef:d0:3c:02:6e:e6:9a:42:5f:ab:06:55:c2:29:
48:3a:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:06:04 2025 by rpki-client