Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/zKQIfOeURvANDMREU7yI_nE_KFw.roa
File: zKQIfOeURvANDMREU7yI_nE_KFw.roa (raw, json)
Hash identifier: rsODojes6psnJwHqpB6iZWFEwYShL6Rps2nkmwoPbsQ=
Subject key identifier: CC:A4:08:7C:E7:94:46:F0:0D:0C:C4:44:53:BC:88:FE:71:3F:28:5C
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 01942368EC76E7D1A61A828026254C76A8D8
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/zKQIfOeURvANDMREU7yI_nE_KFw.roa
Signing time: Wed 01 Jan 2025 19:47:46 +0000
ROA not before: Wed 01 Jan 2025 19:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60354
IP address blocks: 185.251.113.0/24 maxlen: 24
185.251.114.0/24 maxlen: 32
185.251.115.0/24 maxlen: 24
2a0c:1940::/44 maxlen: 44
2a0c:1940:10::/44 maxlen: 48
2a0c:1940:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ec:76:e7:d1:a6:1a:82:80:26:25:4c:76:a8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Jan 1 19:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cca4087ce79446f00d0cc44453bc88fe713f285c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:a4:a2:f6:c9:14:50:1a:6b:eb:55:55:21:
6a:a4:21:b1:82:e0:2d:15:bf:a6:13:9a:92:e9:11:
ae:af:93:25:ba:b3:da:f7:43:22:de:6a:a7:58:56:
2b:05:e0:ba:50:30:76:28:e4:46:6f:f4:9f:7d:e6:
40:4a:0d:09:df:b0:fe:14:00:ca:36:73:68:7a:d2:
a1:dd:e4:c0:53:08:1d:9c:11:cf:4c:c6:5a:6c:e3:
bd:bd:c6:ef:63:a7:ab:2a:f5:77:68:68:f7:44:cf:
2f:f7:91:b3:bc:ef:b9:33:46:cb:41:e1:af:fe:44:
08:68:75:d8:56:b0:d0:44:e4:fa:fb:4e:0b:07:36:
f6:8f:78:d5:ef:c7:1a:56:ae:97:b2:e3:e6:27:bb:
d5:cd:fc:5f:17:36:dc:c1:c5:50:7e:69:35:ed:fa:
a7:77:86:e4:a9:1c:3b:db:ac:2e:be:bd:a7:3b:29:
e2:96:91:78:4a:04:29:82:15:59:73:37:e6:dd:32:
1a:be:23:1a:9d:65:86:9a:24:df:19:cf:ae:4e:6c:
de:a3:a7:77:85:bb:83:80:fe:12:0e:0e:61:f9:72:
35:89:5a:13:7d:83:24:08:7e:26:d8:52:75:58:e4:
cc:d6:82:2e:c2:64:1e:4a:9a:67:63:05:8f:74:de:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A4:08:7C:E7:94:46:F0:0D:0C:C4:44:53:BC:88:FE:71:3F:28:5C
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/zKQIfOeURvANDMREU7yI_nE_KFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.113.0-185.251.115.255
IPv6:
2a0c:1940::-2a0c:1940:2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:2d:85:2b:40:b2:77:ab:47:3d:ff:3f:45:d9:26:b3:08:6d:
00:63:45:37:5e:23:7b:00:12:5c:29:1f:4e:dd:03:52:b5:dd:
dc:ea:cd:2c:8b:4e:38:b5:bc:aa:71:e4:31:e5:21:12:54:11:
78:ee:69:f9:e2:f7:6e:0a:e9:02:01:c0:e4:e9:35:f5:92:69:
0e:0b:dd:10:a8:3b:d7:d4:18:66:fe:0d:a7:5c:38:09:25:1c:
b6:ed:55:60:a9:b9:ed:dc:bc:80:98:26:b5:3d:7d:96:63:8c:
ec:68:e4:fa:e4:4c:96:f0:fd:41:cc:1b:73:5f:05:37:7d:2e:
4e:a0:2e:0f:2b:d3:8d:8f:f0:00:d7:22:8f:ec:97:f1:10:ef:
11:00:82:c8:bd:ef:04:30:8e:c4:fc:14:ed:96:ca:70:ba:fb:
9f:ba:fe:b6:63:52:b8:fd:a3:0c:c6:d8:2a:f1:ba:29:5e:f3:
ba:d9:d7:89:4a:40:b9:ed:12:c8:df:9d:7e:9c:19:92:03:df:
b8:63:4b:91:b4:32:98:2b:ba:6f:43:dd:b4:55:8a:b1:48:48:
6a:a7:90:14:a6:f5:02:21:c9:15:da:f3:d9:d0:b4:f9:33:00:
32:ae:83:c3:b7:c9:d7:6d:27:bf:9b:a0:8b:30:e3:6e:15:be:
d4:2e:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:42:05 2025 by rpki-client