Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/zlltM2nOjh81UxcytVZozmvMUKM.roa
File: zlltM2nOjh81UxcytVZozmvMUKM.roa (raw, json)
Hash identifier: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=
Subject key identifier: CE:59:6D:33:69:CE:8E:1F:35:53:17:32:B5:56:68:CE:6B:CC:50:A3
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 0194258F9AA739DBA962C1C5678E2D8507C3
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/zlltM2nOjh81UxcytVZozmvMUKM.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21472
IP address blocks: 185.98.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:a7:39:db:a9:62:c1:c5:67:8e:2d:85:07:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce596d3369ce8e1f35531732b55668ce6bcc50a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:1b:80:ba:a9:e1:65:15:fb:6e:b6:72:0f:
c0:51:7f:a1:05:3f:3a:0f:c2:32:f7:9d:5b:f3:1f:
73:88:83:95:65:3f:d0:5b:d6:d4:7a:a2:16:e0:e2:
d7:df:45:41:ba:e7:52:be:87:40:64:65:21:df:2d:
d9:9a:68:d9:6c:92:01:6f:b8:97:58:d6:5e:3e:1e:
10:1e:5f:bc:60:a7:cb:f4:73:19:d2:32:27:5f:1b:
90:ca:b5:a7:7d:cf:8c:be:dc:d3:b6:eb:b5:d2:59:
0a:84:2d:ac:8c:4c:48:3c:f0:e4:a6:87:79:5e:ac:
04:6f:6b:37:82:b1:82:52:69:27:77:e5:2e:28:0a:
08:f5:33:b1:e0:e9:8a:5e:12:61:5a:d4:21:cc:72:
fb:cd:5a:eb:2c:2f:aa:92:ff:4c:e9:23:e7:2e:e6:
de:9a:c7:d2:ea:02:62:53:49:08:d4:a6:ac:d5:ec:
1e:02:46:83:9d:9d:8e:ac:42:51:f6:b3:b4:0c:25:
81:b8:01:13:37:e0:3b:54:fd:80:ba:09:53:20:72:
d7:d1:22:c1:6b:22:c7:c0:a3:42:1e:60:45:05:5c:
df:85:fe:ac:30:2d:ee:10:ff:c1:7c:c2:e0:65:24:
74:cb:30:97:d7:0a:2b:03:47:7b:6c:18:71:ee:6c:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:6D:33:69:CE:8E:1F:35:53:17:32:B5:56:68:CE:6B:CC:50:A3
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/zlltM2nOjh81UxcytVZozmvMUKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.214.0/23
Signature Algorithm: sha256WithRSAEncryption
71:1f:3a:21:05:30:99:64:82:ab:63:68:97:94:2a:8c:f8:70:
ba:45:5a:e5:66:76:37:29:e9:8b:96:28:30:80:55:76:a6:74:
8d:7b:de:d3:44:93:94:23:fb:34:d9:ae:a2:a0:f0:85:aa:b3:
db:f6:e3:1e:c3:28:44:3b:72:66:89:cb:7b:8e:94:44:86:1a:
30:01:c3:a0:81:66:b5:99:db:73:ec:af:dc:96:84:b7:64:b0:
9c:2b:5f:11:b7:e1:a5:a4:d1:b7:42:11:e0:46:ad:8a:17:5d:
b6:bc:d7:f7:cc:25:42:e8:bc:47:1a:7b:51:c0:02:74:95:02:
b7:11:94:91:42:b3:32:fa:b6:bf:ce:cb:f4:3e:6c:f5:c4:3c:
be:aa:84:0e:d2:64:50:0f:45:b0:78:fe:0a:12:24:2d:19:6a:
40:d3:37:57:ad:e4:b0:c6:25:0f:45:73:ed:37:ec:02:c0:d9:
0d:f1:dc:f1:90:22:f6:45:e2:5f:9a:7a:6b:94:bf:15:78:4e:
9d:57:00:ab:89:cc:c1:2d:00:a9:e1:5b:68:dd:61:9b:41:13:
f5:9d:29:ab:96:15:f4:f8:76:f3:d3:ee:0d:f1:66:8f:2f:35:
40:9f:2e:b6:04:2c:e5:f3:05:8d:c4:50:ee:26:1b:ba:7f:d6:
62:e3:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:54:58 2025 by rpki-client