Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Zk0y4tHHB8Yu3r49IrGLEovlzps.roa
File: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (raw, json)
Hash identifier: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=
Subject key identifier: 66:4D:32:E2:D1:C7:07:C6:2E:DE:BE:3D:22:B1:8B:12:8B:E5:CE:9B
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 019426D9D272FEEB8A8AF33D30CA97F8FE86
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Zk0y4tHHB8Yu3r49IrGLEovlzps.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.222.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d2:72:fe:eb:8a:8a:f3:3d:30:ca:97:f8:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=664d32e2d1c707c62edebe3d22b18b128be5ce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:ce:1d:c3:f6:27:09:fe:12:84:b6:57:e8:
67:d1:a9:4c:8a:32:b9:b6:3e:01:27:f4:cb:5f:f5:
42:23:43:a8:ee:5b:4c:a5:ca:fa:d3:b5:06:27:be:
a4:a4:69:f9:9b:d5:af:bd:40:0b:db:4c:35:55:d2:
71:66:ac:56:70:b5:01:69:fe:eb:29:86:3b:01:4a:
4f:85:10:da:08:39:99:53:0e:0e:ee:07:5a:ec:52:
41:d6:bf:04:39:32:c5:d6:ab:25:e4:d7:72:28:e1:
04:d4:99:0e:e9:50:22:a8:12:ca:33:18:aa:4c:38:
d3:61:0a:4b:06:b0:fe:40:d6:3a:d5:0a:af:40:e4:
88:9c:94:46:af:fa:38:98:8b:62:3f:b1:7c:04:12:
0e:c2:5c:45:2d:b1:96:6d:2a:69:2f:a7:35:75:ce:
4a:03:15:3b:8d:dd:4f:df:b5:ae:fd:d9:e0:2c:5a:
14:15:15:e2:f1:7b:c9:cc:2d:78:15:4f:24:b5:ad:
52:49:2a:40:58:10:42:3b:9b:5e:9d:2f:57:c9:b5:
37:30:2d:e6:39:a5:05:ab:6c:82:cf:dc:eb:a2:2e:
1f:9a:99:47:d3:24:f8:04:05:f2:08:25:52:16:de:
e6:52:4f:43:06:1e:f9:b0:33:c3:87:ac:eb:96:a9:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4D:32:E2:D1:C7:07:C6:2E:DE:BE:3D:22:B1:8B:12:8B:E5:CE:9B
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Zk0y4tHHB8Yu3r49IrGLEovlzps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
54:23:6b:55:7b:d2:b2:89:52:37:4e:d4:a9:64:15:32:f7:65:
0c:df:b3:46:41:a7:f4:8d:17:d6:60:48:9b:69:fe:ed:7c:77:
91:5f:b7:c5:a3:8b:6a:54:aa:fe:77:16:20:43:26:17:de:cb:
66:80:b4:7b:d8:66:28:7f:e0:b3:0c:da:9c:e7:4d:10:58:95:
a4:12:92:53:13:11:da:84:ed:52:1d:23:35:ec:47:b8:61:ff:
9e:28:48:36:5c:36:9e:3b:7d:72:25:1e:3e:c7:ac:da:9d:d3:
ff:f8:31:f6:e7:c2:8c:7c:f4:5d:fc:fc:64:34:37:6b:fe:82:
3b:f4:ee:57:2d:5e:62:48:53:4a:00:f6:bf:03:97:9c:97:17:
31:0a:9e:c7:4f:0e:cc:2b:d2:cd:e9:94:38:8c:b0:8b:9a:21:
7e:f8:25:a5:d2:06:eb:50:ec:8e:40:fb:04:05:62:d7:2b:19:
69:8f:e3:3f:8e:86:cb:ac:d1:9e:c1:47:6f:26:de:1b:d5:e2:
07:fa:70:1d:9c:fb:c9:0e:05:74:a2:fd:4a:d8:43:3b:87:2b:
2e:a1:55:62:03:a0:0a:99:f6:3b:c0:bf:ed:d7:86:50:3f:4c:
5d:2e:03:93:8c:10:75:c1:a0:65:6a:51:55:9b:64:03:66:08:
d1:d7:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:11 2025 by rpki-client