Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/ZLWyuBUCt9zFxazwwbh7yb1QxX8.roa
File: ZLWyuBUCt9zFxazwwbh7yb1QxX8.roa (raw, json)
Hash identifier: 3SdpbSxYjCjCYkTQyy2TBjnfRY/eKE3ltVUJz5yw6+M=
Subject key identifier: 64:B5:B2:B8:15:02:B7:DC:C5:C5:AC:F0:C1:B8:7B:C9:BD:50:C5:7F
Certificate issuer: /CN=aa8093354e565ac4838a51f47d2769769c66944e
Certificate serial: 019425FDEDDCD2E903774728A37677145BF8
Authority key identifier: AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/ZLWyuBUCt9zFxazwwbh7yb1QxX8.roa
Signing time: Thu 02 Jan 2025 07:49:46 +0000
ROA not before: Thu 02 Jan 2025 07:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 193.163.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ed:dc:d2:e9:03:77:47:28:a3:76:77:14:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8093354e565ac4838a51f47d2769769c66944e
Validity
Not Before: Jan 2 07:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64b5b2b81502b7dcc5c5acf0c1b87bc9bd50c57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:60:c4:c0:1e:e4:23:39:10:6e:b4:38:dc:
81:79:9f:c3:bb:8d:d3:60:cb:58:fa:56:6a:45:a1:
f8:ae:ec:1d:44:2c:ea:b4:40:39:fa:a3:18:1b:9c:
a3:40:91:ec:0d:1b:f3:c2:98:d6:3f:e5:55:8f:26:
72:13:2f:0e:9f:56:0b:3f:e6:ea:5a:1c:03:62:e0:
fd:a6:13:24:98:51:38:3b:19:30:6e:68:a7:f6:48:
0a:6d:72:62:c3:2c:db:c1:65:60:e0:48:e0:53:06:
6c:f2:39:7d:0b:44:65:9b:55:cc:9e:03:e6:5a:67:
84:9b:ee:5a:0d:6a:67:68:55:77:8d:98:1d:d3:ff:
d4:47:a1:45:f0:77:c6:c8:37:1f:64:7e:a6:ff:12:
41:f0:aa:95:46:ac:5e:c3:00:fd:5b:c0:f6:e5:27:
3d:58:36:13:ad:55:8b:b5:55:a8:e4:a2:53:25:08:
c0:fa:55:8e:63:ea:25:36:24:34:cd:2d:cc:0f:d0:
08:31:06:b8:ef:6d:c5:16:2d:d4:5e:18:98:77:aa:
0f:ff:dc:35:48:69:bc:dc:8c:f5:67:21:60:d8:04:
65:d1:b4:a6:00:ae:1b:0d:de:ca:aa:27:ac:94:ad:
b7:14:b5:91:1f:e1:86:d9:ff:1f:8f:82:34:9f:64:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B5:B2:B8:15:02:B7:DC:C5:C5:AC:F0:C1:B8:7B:C9:BD:50:C5:7F
X509v3 Authority Key Identifier:
keyid:AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/ZLWyuBUCt9zFxazwwbh7yb1QxX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.170.0/24
Signature Algorithm: sha256WithRSAEncryption
29:99:65:62:42:88:cd:09:c4:78:7c:49:37:5f:42:53:12:e7:
51:14:18:a4:0a:08:5b:27:58:9a:04:c9:64:d1:14:73:f4:e7:
47:31:76:34:2b:eb:22:4f:e1:7a:17:b0:8b:6f:f2:78:fe:49:
8b:18:2c:64:d7:3f:42:06:03:b7:74:f7:60:1f:f3:d6:5b:b8:
b7:7b:c4:5a:f0:c5:3f:dc:ea:4a:20:43:22:d2:5a:32:58:8e:
70:a4:72:6e:bc:62:ee:8c:9d:ea:5a:5c:6e:f2:68:00:a1:b4:
a2:5a:34:9b:50:56:d4:a0:6d:e2:34:ae:e0:52:0a:60:e2:03:
bf:5c:08:09:86:98:6a:f2:40:b5:1b:d8:e0:e7:16:81:a7:a2:
b4:ad:a4:e6:11:79:09:17:d4:c3:ad:2f:d0:04:05:2e:5d:98:
ee:5f:c7:82:b9:be:3f:23:82:2d:4b:91:5d:36:62:9f:78:31:
7b:00:38:ff:59:28:79:b9:fd:51:fd:88:40:77:80:27:37:94:
69:f2:c6:ad:d1:f2:9f:3f:5d:33:a8:99:fe:b7:42:35:4e:e6:
f5:9a:5b:ed:b8:32:cc:80:05:01:1b:45:68:78:6b:8c:7a:cc:
8c:93:5e:5c:31:80:44:3e:f9:5d:b1:9e:7c:64:86:c6:c3:c7:
72:71:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:13 2025 by rpki-client