Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zYLvva0hUU0EB8re6S0gVLhdVJc.roa
File: zYLvva0hUU0EB8re6S0gVLhdVJc.roa (raw, json)
Hash identifier: kOSJzuKNz1Eg9c8zP01xDhxzvwia5h0JcDyMbgofBuk=
Subject key identifier: CD:82:EF:BD:AD:21:51:4D:04:07:CA:DE:E9:2D:20:54:B8:5D:54:97
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067DE2375B5AB7A78967B3695A540DD
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zYLvva0hUU0EB8re6S0gVLhdVJc.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210998
IP address blocks: 194.6.177.0/24 maxlen: 24
217.193.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:de:23:75:b5:ab:7a:78:96:7b:36:95:a5:40:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd82efbdad21514d0407cadee92d2054b85d5497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:87:45:89:9d:49:41:ac:de:db:8b:1f:09:
0f:be:6e:92:ad:b2:1d:d4:f6:b7:0c:45:0f:89:87:
b7:7c:e9:e2:eb:cd:da:eb:63:e8:69:e0:60:6e:d5:
d9:24:3d:ef:b1:af:ed:a3:10:75:bd:9e:18:e5:b8:
69:a4:72:1d:71:14:55:55:b8:9d:3d:48:b0:5f:6e:
20:08:ec:81:f0:10:a7:06:cf:2f:c6:63:d3:ca:56:
aa:7e:fa:0f:bc:45:37:0b:b3:d8:71:db:00:52:12:
2f:0e:65:bd:f6:61:85:78:f9:2a:fc:c8:da:59:b2:
7a:2f:74:f8:37:e0:94:64:c3:32:6a:36:6e:95:59:
d8:db:28:63:81:79:28:df:aa:db:fe:fe:e9:1d:1e:
c5:7e:62:c9:3e:8a:9c:90:8d:a7:f0:29:a2:89:6c:
53:1a:59:68:07:c3:ae:75:24:95:a2:3f:ea:98:3c:
be:43:5f:21:2d:60:24:e6:14:87:74:dd:46:cf:9a:
50:bf:56:73:08:9c:f8:e7:b1:26:f2:5a:c4:2e:ad:
71:da:da:0d:84:b4:37:ef:22:a6:f3:07:ab:24:0c:
82:02:46:36:e1:0c:5a:c3:b0:53:d0:83:9b:32:9e:
19:d4:c0:3e:b4:5a:3e:9b:1f:98:9d:4f:71:f7:fb:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:82:EF:BD:AD:21:51:4D:04:07:CA:DE:E9:2D:20:54:B8:5D:54:97
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/zYLvva0hUU0EB8re6S0gVLhdVJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.177.0/24
217.193.221.0/24
Signature Algorithm: sha256WithRSAEncryption
18:91:b0:e2:82:56:6f:25:92:ea:73:d9:b5:ab:ec:89:f0:85:
51:ad:f3:3a:61:ca:79:48:a0:7b:8e:fd:cc:d4:85:3f:f5:d4:
2f:15:c4:b0:0d:5e:5f:65:5c:3b:fa:98:a1:d2:58:ef:47:67:
84:56:e2:8e:28:53:d9:00:25:b4:96:45:89:cf:77:81:38:31:
ba:48:bf:a6:41:fb:06:58:bd:95:ee:36:36:fb:6c:00:9e:b4:
7e:7c:e3:a0:fa:0e:0a:21:86:ec:53:93:6e:00:48:3c:47:d3:
ae:9b:1c:4b:b0:7b:ff:82:39:ef:fa:c7:5d:ca:75:c6:e6:d3:
ab:35:9f:33:42:e1:78:a0:be:58:70:6b:46:24:2d:31:57:22:
37:59:93:d8:59:54:5d:6c:4a:cb:9b:10:48:41:2b:2c:6c:ec:
4e:69:a5:18:8d:d8:28:d0:3b:22:c6:12:91:64:79:3b:f1:40:
51:0f:46:87:27:34:86:0b:39:08:0e:40:19:34:01:40:5b:30:
3e:37:23:bc:dd:8d:a0:6c:cf:ac:a6:4e:18:ba:35:db:3d:57:
23:35:5d:6c:89:af:55:5c:cf:a2:0b:55:b1:35:55:53:d0:27:
a4:d0:c5:17:72:c6:a2:ea:cc:1a:c1:51:18:88:77:01:0f:88:
5b:09:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:05 2025 by rpki-client