Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa
File: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (raw, json)
Hash identifier: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=
Subject key identifier: 65:BB:BD:95:5F:93:5D:1A:F5:9A:33:DA:6E:47:5B:42:2F:AD:73:69
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 019424B38EF4CF260308F35A43F013C9FCEA
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42523
IP address blocks: 194.62.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8e:f4:cf:26:03:08:f3:5a:43:f0:13:c9:fc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65bbbd955f935d1af59a33da6e475b422fad7369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:45:f5:5c:b9:30:50:bd:c0:cb:cd:c4:8e:da:
33:bd:30:93:f8:9f:4b:d9:30:d1:0a:ec:9d:25:fe:
64:90:f1:d8:e2:39:9f:3a:c6:4e:28:52:d6:ff:4b:
3e:be:ca:4a:aa:77:ca:6d:40:39:90:0b:98:68:08:
52:4a:e6:67:a7:eb:77:28:fe:94:ee:56:5e:99:df:
71:43:b7:cf:1d:a5:75:6e:72:ec:ed:7f:75:13:da:
ed:98:a1:2f:63:82:92:d5:7f:dd:4a:f1:58:40:8c:
c5:6e:da:21:8d:dd:55:55:aa:73:fd:66:ca:ad:5d:
33:23:9f:5f:47:26:d9:d7:ed:3a:11:13:87:2c:d6:
96:cb:dd:a1:b9:a1:35:d0:c8:a1:ba:bd:76:58:22:
63:91:01:ed:4a:2b:93:47:45:93:ad:11:3b:24:7e:
62:03:21:68:93:07:24:12:27:54:8a:3a:28:97:06:
fd:d2:79:a8:d7:3b:50:27:0a:f8:ef:d4:6b:3a:67:
5b:b6:45:0a:dc:2a:ce:0a:40:bc:70:71:99:2b:35:
8b:e3:1d:84:51:3c:98:33:b0:d0:c7:90:e0:4b:d5:
6a:2e:b9:b5:a5:ee:ee:34:8c:bf:d9:62:f1:ba:34:
04:db:71:ab:ca:56:74:d6:5e:8c:c4:40:30:08:b0:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BB:BD:95:5F:93:5D:1A:F5:9A:33:DA:6E:47:5B:42:2F:AD:73:69
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:68:d3:9d:6c:82:35:e5:25:7d:bc:c4:51:f2:b2:e7:10:f8:
be:fb:73:ef:b8:42:3b:eb:9f:53:d3:97:56:62:63:62:58:1a:
5d:1c:26:46:62:d3:cc:06:b8:4d:fb:63:32:cd:f5:a6:80:95:
b6:80:5a:75:3d:92:a6:b9:04:70:c6:79:e5:f1:84:07:68:e3:
1a:c8:2b:52:d4:57:8d:c7:c1:16:ae:92:20:be:34:ed:24:75:
d7:dd:c3:81:9e:d2:47:4a:9e:45:a1:85:2f:5e:7d:5b:31:42:
58:8b:7c:f2:74:74:f1:fe:cd:18:f2:78:06:a5:23:26:00:8d:
d9:5c:df:72:4e:ae:79:bd:6d:ce:de:94:11:0f:ab:36:72:b6:
56:79:b4:ce:23:a7:8e:fa:d4:13:44:96:fa:38:e7:d2:27:0b:
05:a7:0c:94:ed:d4:38:d8:c8:57:65:c0:0e:54:cb:df:87:54:
4c:22:a3:5d:1b:eb:bb:9b:0b:3f:77:66:2e:06:9d:ff:94:75:
44:81:7f:50:29:19:fa:ae:48:2d:07:0b:95:a5:37:88:cb:84:
99:37:43:33:a9:0f:78:02:4a:e6:a7:bc:64:bf:74:53:e9:d8:
ca:22:ab:72:3b:64:87:d0:e2:58:51:22:3c:92:99:32:7c:19:
99:99:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:39:09 2025 by rpki-client