Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa
File: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (raw, json)
Hash identifier: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=
Subject key identifier: CD:25:23:95:50:3F:DE:6C:C0:32:9C:AB:84:A6:40:68:F2:DA:34:9B
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 019420D5E41327B31F83ADA0E3357753FE5E
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56756
IP address blocks: 91.226.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e4:13:27:b3:1f:83:ad:a0:e3:35:77:53:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd252395503fde6cc0329cab84a64068f2da349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:86:dd:c2:a8:a0:3f:3b:47:cc:35:b0:26:
3a:62:9e:4d:ad:da:6f:66:32:a5:6f:df:eb:e1:f1:
98:9d:4a:23:a8:5c:ab:30:e1:31:3a:5b:48:34:d1:
0e:80:d4:a6:fc:86:9e:a3:e6:74:b6:43:53:c2:b0:
a9:e8:1a:ea:96:9d:c1:b7:39:6f:e7:c9:12:ff:13:
ed:d8:18:1c:46:f4:0e:dd:9e:5a:c3:92:24:23:91:
77:fd:3e:85:7e:df:f8:5a:db:ad:c2:36:ad:e3:0c:
98:93:1f:5b:7b:78:93:f7:8e:fd:98:87:5f:1e:9c:
24:94:11:66:11:7d:64:9b:0c:02:cc:ea:8f:ce:60:
08:bb:a2:61:04:d7:51:93:9a:e4:17:02:1b:8a:46:
84:aa:e2:b8:de:61:0d:6e:bf:c4:14:06:21:e3:47:
b4:ee:52:d6:b6:30:59:3d:48:d9:89:7e:4d:63:0d:
ab:61:30:60:01:bd:46:bc:6b:56:83:e1:60:86:9d:
2b:be:cb:e8:61:19:16:1a:f4:43:08:44:ee:74:bd:
7f:13:99:e0:11:9a:97:1a:e6:78:fc:f9:b2:88:1f:
24:a3:4c:5f:de:ce:cb:5c:60:c1:48:5a:9f:38:74:
0c:f6:d0:71:fa:3c:16:21:0d:d5:09:a9:fb:9a:58:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:25:23:95:50:3F:DE:6C:C0:32:9C:AB:84:A6:40:68:F2:DA:34:9B
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.207.0/24
Signature Algorithm: sha256WithRSAEncryption
98:59:ae:06:ab:1b:2c:45:ca:d9:ba:be:2d:eb:e9:1a:85:76:
83:90:33:8b:ae:25:af:dc:23:c0:34:e3:e2:02:a6:78:22:59:
f8:93:a5:d8:38:4e:7a:96:85:f1:b9:56:ed:22:b3:fe:a5:03:
b6:68:11:bc:49:7f:32:91:0a:3f:8b:76:5e:99:70:60:e6:d4:
ee:a0:da:b1:15:81:f2:b6:d1:62:8a:10:cd:fb:28:9b:1a:90:
b7:60:d2:a1:e0:e4:0c:7a:13:95:36:c5:40:54:95:e8:17:d9:
8b:66:d4:e4:b7:84:60:5f:e4:24:5d:1f:19:af:c5:63:ee:5a:
d7:c4:85:aa:fb:3b:db:1f:61:11:f9:b3:f2:44:14:9c:16:97:
48:ce:8d:2a:d6:0d:e8:fe:fb:4d:3c:de:66:ad:7f:03:25:1b:
41:08:4c:9c:3f:81:b6:8f:ba:70:0b:91:60:71:8d:11:bc:00:
f8:84:0f:3c:4f:55:1b:bf:16:84:f0:27:71:18:17:b1:da:8b:
b3:d9:4b:e9:83:ea:a3:c9:ec:89:db:75:7e:e1:a6:11:e1:eb:
cd:62:33:73:27:39:41:31:2f:56:85:ce:15:6c:44:c4:89:d2:
ad:ed:ba:43:0b:df:04:5d:6f:ae:8b:f3:3a:58:6e:fa:fd:06:
e5:2a:9a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:45 2025 by rpki-client