Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa
File: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (raw, json)
Hash identifier: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=
Subject key identifier: 66:25:69:AE:5C:30:02:9F:0E:BF:BC:E0:B1:93:52:C1:21:88:92:E7
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FF270A28114FA99CE0DD5D2AA9C1E
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 193.160.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f2:70:a2:81:14:fa:99:ce:0d:d5:d2:aa:9c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=662569ae5c30029f0ebfbce0b19352c1218892e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:7b:78:d5:e7:41:a1:f0:d4:23:18:0b:65:
6c:ac:69:68:9d:97:fa:9e:e1:92:23:91:30:02:18:
15:b0:d5:c7:36:6a:82:e3:53:35:2a:8c:e2:67:eb:
89:8b:b0:4d:c3:a5:1e:10:fb:8a:a4:5a:5f:98:be:
4a:a3:55:4c:54:53:c5:f3:42:e8:43:e8:28:43:25:
fc:83:64:08:d2:ae:76:ab:ac:c5:d9:ba:00:b9:51:
18:37:1d:80:7c:fa:67:62:1a:98:5d:83:e6:82:a3:
00:fb:d5:4f:87:1c:e8:cd:8c:6c:38:ba:45:9e:0e:
c4:b5:23:c4:f9:15:e6:ed:ba:0d:bd:66:70:ec:f0:
d1:51:3f:eb:d0:fe:89:60:a4:4e:c5:1d:52:e5:ab:
e0:f8:c4:e0:80:66:c9:49:b3:6c:e3:76:d2:75:22:
d2:ca:7c:17:d2:f5:48:93:17:dd:02:a3:1d:7e:1a:
ac:b6:ba:9b:81:cc:22:29:b8:79:f0:c5:de:09:b1:
f2:cc:78:38:e0:27:5c:fd:70:b2:5e:46:e6:6b:a0:
06:cd:b1:86:5a:50:d6:0d:76:0c:a0:9b:17:09:2a:
fd:77:73:cf:9c:1d:fc:d5:b8:4b:fa:cc:ff:28:ca:
14:6a:2b:3c:3b:15:ad:97:4a:7a:a3:9f:7e:82:55:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:69:AE:5C:30:02:9F:0E:BF:BC:E0:B1:93:52:C1:21:88:92:E7
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.221.0/24
Signature Algorithm: sha256WithRSAEncryption
11:36:62:39:bf:9e:30:2e:e1:5e:d0:0f:9a:bc:a0:62:dc:08:
80:a0:20:c9:f3:b7:14:4d:67:ac:f3:ba:7a:74:47:2f:ba:0f:
f0:28:86:de:c8:57:9f:b0:bd:3e:7e:37:70:cb:04:3b:2e:b8:
8d:eb:6d:03:2d:ba:49:67:e9:f4:de:52:aa:81:20:2f:61:fa:
59:44:15:f9:38:ec:2c:eb:cb:c9:0f:ae:7d:53:40:44:75:1f:
04:f1:08:4b:92:79:51:57:f6:e1:34:14:66:9c:2c:76:06:d7:
ad:10:e4:20:2c:d3:55:1d:f7:78:ed:3d:d0:5d:ac:93:9e:30:
82:b7:8c:b8:d4:dc:dd:ee:0e:6f:2d:b9:ab:15:35:de:de:5a:
dd:4e:f6:34:8c:a4:16:6d:03:6a:d4:a2:25:70:9c:4d:c1:d2:
1c:a1:27:7c:4a:99:03:c3:0a:f1:8a:67:55:3a:3c:1d:fc:a7:
02:fe:73:10:e6:dc:de:be:8a:c4:30:3e:39:b6:27:75:bf:b4:
fb:07:36:58:4f:9e:4d:64:3d:d0:a6:3c:bb:b0:e4:98:b3:e5:
42:ce:1a:10:48:91:3e:f1:16:9b:21:22:12:ba:90:21:4d:55:
fc:58:12:6d:62:d1:9a:dc:a7:7f:40:f5:a8:ea:56:6f:83:4f:
1a:e8:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:29 2025 by rpki-client