Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/zPHnCBVUs92hfFEc7nhs1RWC7pA.roa
File: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (raw, json)
Hash identifier: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=
Subject key identifier: CC:F1:E7:08:15:54:B3:DD:A1:7C:51:1C:EE:78:6C:D5:15:82:EE:90
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 0194214461CFF1165816256CCBDFD79FE444
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/zPHnCBVUs92hfFEc7nhs1RWC7pA.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31727
IP address blocks: 46.175.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:61:cf:f1:16:58:16:25:6c:cb:df:d7:9f:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccf1e7081554b3dda17c511cee786cd51582ee90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:31:46:e0:9e:68:9e:58:ee:17:4f:1d:8f:
f6:06:2d:c6:38:76:b2:de:d1:0f:9b:36:5b:65:a4:
23:7e:28:c1:5f:70:71:62:d0:d2:7f:10:25:87:13:
98:36:73:cc:ac:b0:22:0d:e5:05:a3:01:08:90:4e:
a0:20:c8:74:0c:8f:73:4c:f5:76:84:8c:62:15:88:
03:61:89:0f:7d:8d:3f:31:e0:ab:cb:ac:ba:e9:37:
7a:31:3f:34:16:60:23:e2:3a:74:fb:2d:31:24:bd:
49:e0:fb:24:2b:7e:05:d4:7f:60:e1:81:cf:68:d5:
5a:e1:c2:89:32:bd:6b:12:a1:a8:66:de:58:ca:72:
c6:de:0a:94:39:44:4a:95:eb:01:9c:71:5d:6c:a5:
54:ea:d7:d6:78:c8:77:ad:34:8f:8f:6e:30:14:0c:
6e:d0:5c:31:fd:1f:04:02:8b:fc:e2:b9:c4:89:cb:
00:41:e9:28:f9:3b:c9:bc:03:aa:81:91:6f:76:98:
a2:da:0b:41:39:5c:8c:f0:e9:d6:89:d9:33:eb:0f:
1d:fb:c0:fd:33:4f:e1:58:c9:63:07:bf:37:8f:1b:
3e:90:6b:90:cd:b1:d3:a1:d6:33:33:b8:74:9e:c8:
5d:70:52:e8:f7:3b:13:f3:cc:2b:37:38:e6:a1:17:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:E7:08:15:54:B3:DD:A1:7C:51:1C:EE:78:6C:D5:15:82:EE:90
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/zPHnCBVUs92hfFEc7nhs1RWC7pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:95:33:0d:5a:68:c4:49:7d:83:5c:4d:01:08:5b:f9:07:c9:
99:2e:93:ef:55:df:1b:87:4c:13:ff:f8:53:a4:de:fe:f6:71:
1d:3f:38:1e:25:e7:92:b8:66:bc:5b:0e:e1:df:c5:5a:2d:85:
cc:54:73:70:ca:90:b6:a3:92:d0:8b:0f:e2:29:bb:c1:17:0f:
8c:6c:fc:de:3e:06:b1:9c:a3:ca:79:ab:be:ab:85:87:92:78:
58:ac:3b:66:43:b8:73:cc:4f:b6:bb:20:58:7d:0e:a7:f7:7b:
87:43:90:7c:38:38:50:bc:ce:c0:36:71:54:47:56:57:cc:7d:
2d:35:fa:33:79:a1:53:fe:b9:8f:36:4b:02:97:e1:05:5c:cf:
40:6f:2c:b6:82:7e:d5:b0:21:30:b2:fd:db:c5:2d:f9:bd:cb:
4f:94:e6:99:5a:40:5f:95:63:72:e9:5b:f0:1e:52:58:8c:48:
55:2c:e4:93:8e:96:14:66:fd:f9:3c:6f:87:5a:9a:8d:d9:ac:
39:83:f8:e5:ec:56:63:15:5f:a2:dd:91:ed:aa:ac:26:52:0e:
0f:c3:0f:80:6a:83:0a:34:29:f4:96:98:27:bb:a0:eb:2a:56:
c7:3e:10:57:2c:f3:31:83:1e:7b:93:96:16:29:5b:87:ce:00:
6a:b4:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:24:12 2025 by rpki-client