Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa
File: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (raw, json)
Hash identifier: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=
Subject key identifier: 67:3D:C7:88:43:25:DD:78:68:7B:F3:5E:39:96:00:4A:8C:14:2B:82
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 0194252236573C7A5CE0D9504347D43B1306
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57297
IP address blocks: 194.36.116.0/22 maxlen: 24
2a0c:bf40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:36:57:3c:7a:5c:e0:d9:50:43:47:d4:3b:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=673dc7884325dd78687bf35e3996004a8c142b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:9a:e3:41:8d:b2:1f:1b:af:e3:a8:01:cb:
23:86:f3:1e:1e:e8:11:71:10:d6:41:ab:38:b0:b1:
ce:ce:1d:49:63:f3:42:00:63:4c:d1:46:11:fa:69:
be:b0:00:db:37:b5:b3:e8:f5:30:74:c7:21:f9:f6:
fa:85:5e:bc:d4:ac:3f:e6:22:21:bd:ea:59:22:3f:
28:22:56:f5:a9:f3:f6:9d:61:14:62:f7:0e:2b:21:
5f:e9:10:bf:ed:fb:50:3d:f1:37:89:ae:8f:7e:f0:
5b:df:d6:ff:37:bf:99:0c:5e:b4:eb:c7:7b:21:90:
34:71:a1:32:ed:ce:27:6d:1a:ef:7d:ab:23:50:74:
f8:90:d3:bb:10:7c:ce:84:ca:3a:6f:d6:8b:9c:ef:
fa:d3:e7:07:77:db:5f:f2:3d:6f:63:5e:fe:f7:8f:
5f:74:8a:f3:49:ad:ae:6d:e5:7a:12:b7:c9:85:3c:
b0:cf:dc:1c:b0:08:23:d2:17:71:cf:3d:26:78:3a:
63:81:87:17:df:80:c9:da:1f:77:f0:26:26:02:fc:
6f:cc:25:0b:21:a9:62:a6:9c:36:ba:3d:f7:e0:fd:
8c:10:b6:d1:cd:77:19:25:e0:c3:ea:03:37:23:ff:
e8:5f:e8:b0:7c:04:f8:47:36:27:5a:ab:4b:d9:43:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3D:C7:88:43:25:DD:78:68:7B:F3:5E:39:96:00:4A:8C:14:2B:82
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.116.0/22
IPv6:
2a0c:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
76:91:9c:ae:ef:da:d9:12:50:cb:6d:5e:0c:e3:33:18:6b:ac:
57:3f:65:58:3e:59:2e:3c:ce:3d:13:16:d2:ec:01:25:dd:6c:
88:f2:9d:e1:b8:51:50:55:6c:3a:97:5b:64:e8:cc:04:33:bf:
26:93:be:24:7e:d3:12:f7:0c:ae:9f:f5:ee:b5:1c:87:2c:b8:
b3:34:4e:ed:b0:3e:8c:e2:6a:bf:fa:e0:aa:e5:9a:53:72:8e:
6b:c3:62:06:d5:2c:8d:22:e4:71:5e:6a:98:31:ae:21:8d:86:
79:7d:96:09:ae:53:52:15:ca:be:9c:92:c7:9c:e1:2d:11:d0:
56:a0:3b:50:6e:f8:5a:33:81:3c:4b:1a:4e:f2:58:d2:75:cb:
a9:9b:23:6e:5a:51:9b:24:43:0c:70:c2:40:1f:03:1a:73:45:
09:50:6a:c1:28:7f:2c:4c:a3:f2:99:40:90:72:cc:c8:13:c7:
b6:5a:24:60:f5:44:35:f6:40:00:49:2a:77:a8:29:8d:0b:eb:
69:31:eb:46:16:b2:26:a0:f0:b4:a7:27:4b:66:0e:c8:e6:d8:
25:3d:f0:7c:cd:ae:b3:a2:c1:cc:ee:38:43:37:f5:e7:72:c2:
f4:e9:40:32:dc:29:ef:65:03:a3:af:9c:37:2f:f3:81:5c:d9:
d2:ae:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:02:26 2025 by rpki-client