Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa
File: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (raw, json)
Hash identifier: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=
Subject key identifier: CD:0F:E6:76:B1:8B:EE:20:C4:C1:E4:64:00:F2:FA:9A:F9:B7:69:10
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 0194266B53DD782F8680EF327745D2409E80
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 185.54.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:53:dd:78:2f:86:80:ef:32:77:45:d2:40:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd0fe676b18bee20c4c1e46400f2fa9af9b76910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:9a:13:4d:f2:9a:ea:75:a2:d4:e4:89:fa:
cc:92:31:0c:47:ed:b0:e6:ca:09:c5:4f:eb:b8:50:
61:5d:5b:02:a8:64:47:c9:fb:7f:7f:29:03:ed:1c:
9f:29:36:3c:0e:de:22:66:d4:8b:ac:22:c3:a5:34:
6f:eb:3e:ad:54:10:7b:7c:e9:bb:61:13:15:0a:14:
45:71:14:72:24:9c:59:1c:a3:2e:94:3f:ce:7b:3c:
d4:6a:ef:a5:5c:ac:45:68:bb:e6:58:56:52:52:5a:
92:39:ca:8f:4e:6c:c7:26:9e:7a:e9:94:fe:d3:38:
13:30:ef:2d:02:d4:16:ba:3c:08:73:ba:6f:66:eb:
60:1b:56:14:10:e7:e5:31:35:a2:34:34:4b:d2:1a:
0a:b0:51:3f:48:33:ab:a3:77:0c:5a:d1:c1:c0:45:
25:cf:d5:df:ba:4d:ad:45:fd:14:92:9d:c2:80:2c:
eb:1b:c2:38:d2:2d:a6:38:b0:14:94:97:42:04:66:
87:30:c8:72:7a:92:8a:e6:67:87:84:d7:75:37:6b:
9f:f7:ae:b2:fb:aa:56:8f:6e:de:44:45:1b:bc:a1:
df:8d:c4:f1:9a:6b:16:86:67:b1:2c:8f:96:f2:34:
53:d9:81:f3:b5:57:05:7b:05:b6:7b:ec:cf:59:8a:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0F:E6:76:B1:8B:EE:20:C4:C1:E4:64:00:F2:FA:9A:F9:B7:69:10
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.14.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:66:fb:67:93:f7:54:ae:f1:30:0b:9d:27:68:f3:00:4b:95:
7b:ea:fe:6d:8c:6c:ac:90:4b:7a:2d:2a:3c:94:cb:f7:3e:82:
5e:cf:29:97:8c:65:6d:ef:78:56:de:ed:1c:d3:b6:be:43:ee:
20:75:24:ce:46:cb:6d:7b:22:68:80:73:7d:8e:c3:09:9b:c7:
92:25:6a:b0:e2:f5:2e:74:cc:67:dd:60:83:4c:6c:f2:7a:26:
0a:ed:19:44:00:68:fd:5a:a2:0a:0d:0c:6a:55:1b:7d:8b:37:
24:1c:f2:c5:16:09:33:c4:af:a9:81:32:24:66:21:93:ec:63:
87:d9:aa:4a:e6:f4:e2:d6:92:fc:e3:3d:13:6f:3c:86:36:46:
b5:67:e0:47:e1:73:5a:bc:7a:07:e8:0b:2d:90:6e:ea:a1:92:
de:44:f5:26:62:6a:e8:88:58:8f:1a:d0:38:d0:3a:8d:82:d1:
25:7e:b1:75:40:eb:b0:4c:68:54:90:7e:1a:92:7b:45:13:77:
07:2c:3c:59:58:52:0b:80:07:c3:74:b9:8a:51:aa:40:cf:ed:
6d:bc:ea:30:30:17:fc:1e:b3:46:d1:6d:20:f2:95:4f:42:bd:
11:e0:19:f6:60:c7:33:e2:01:cd:68:85:fe:1e:ef:f5:71:7e:
eb:3c:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:57:59 2025 by rpki-client