Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/pzlWJjQzQzoCKZbR26xCajPlSDU.roa
File: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (raw, json)
Hash identifier: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=
Subject key identifier: A7:39:56:26:34:33:43:3A:02:29:96:D1:DB:AC:42:6A:33:E5:48:35
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 01942521F9B4CFA6939A1F6C3D23278246DC
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/pzlWJjQzQzoCKZbR26xCajPlSDU.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 193.164.155.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f9:b4:cf:a6:93:9a:1f:6c:3d:23:27:82:46:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73956263433433a022996d1dbac426a33e54835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:3f:35:e6:7e:a5:f2:3a:11:d0:01:eb:ad:
33:98:15:1c:a9:bb:d5:a7:0a:7d:7f:41:67:90:b4:
a0:b1:55:ff:da:1a:b7:e0:c6:2d:4b:24:5b:75:12:
d2:94:e4:43:5e:4b:9b:3e:a9:ca:59:32:67:84:0c:
21:29:dc:94:8a:a3:01:b5:46:09:d6:b5:45:44:74:
a6:78:5c:6d:6e:c5:b2:38:1c:4b:6a:96:05:51:f3:
04:77:5a:24:eb:6c:e6:d6:f3:f4:1a:ce:f0:5a:5e:
83:11:51:7a:7d:a7:bb:ea:61:c5:f6:d3:a9:8c:be:
b4:23:02:06:76:47:53:5c:11:88:6d:68:00:8a:84:
06:24:ae:0c:cb:7b:71:bb:30:71:3b:b7:02:47:98:
9a:d4:34:99:ab:4d:d4:be:2f:cd:d1:d6:8c:5f:25:
c8:ca:86:c0:95:b6:8c:85:6c:b2:f6:bd:ff:fd:31:
91:c4:1b:a8:56:92:90:34:4c:bb:cf:e8:c2:59:3f:
14:3d:52:54:7e:14:43:a3:18:b4:29:a4:39:d6:7f:
a1:4e:94:ff:3b:c6:95:f2:5f:b2:ad:d2:b1:ad:30:
02:33:6e:c7:03:07:fa:62:78:f5:3d:51:a9:82:08:
53:0c:a9:26:39:14:9f:26:37:8d:b2:e4:19:23:05:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:39:56:26:34:33:43:3A:02:29:96:D1:DB:AC:42:6A:33:E5:48:35
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/pzlWJjQzQzoCKZbR26xCajPlSDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1d:59:5b:3a:18:9e:6f:0f:72:08:8c:74:da:f8:57:7a:b1:
ae:66:ec:56:fc:27:2e:98:66:10:61:af:dc:98:0d:68:c1:8b:
a4:7c:28:1b:7a:85:91:8d:2c:f3:79:6a:34:0d:06:ef:07:51:
2e:d8:98:14:b4:87:15:68:b3:0c:eb:23:ac:46:db:44:52:ca:
81:a9:13:0c:34:95:a8:c6:85:e4:1c:d8:0b:12:1b:08:71:dc:
42:05:6f:3e:47:fa:e0:36:75:8d:08:b2:a0:64:e3:ea:94:40:
68:b5:52:0b:10:b9:95:ff:44:a6:ac:82:3c:f4:b2:18:13:85:
4a:e4:7e:c9:11:c8:e4:6c:84:7a:b7:a3:85:ce:e3:a5:06:a8:
52:75:35:c1:bd:3f:ae:5d:e2:fd:38:39:c6:f9:e8:9a:75:a7:
af:40:1f:69:60:b1:94:d4:3e:da:fa:2f:55:63:8a:1d:6c:91:
08:ef:d7:cd:c0:1a:11:dc:86:78:67:86:73:30:6b:54:01:a2:
6a:72:88:c9:ab:bc:d8:ec:d1:c9:f1:64:01:02:82:9b:54:b7:
b7:ab:49:55:26:ab:8c:76:af:b8:6f:bd:ee:e0:50:d7:1c:9d:
fd:d9:db:63:22:a4:06:52:5e:2d:f8:bc:d4:b3:0d:49:de:1b:
6c:1f:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:31:50 2025 by rpki-client