Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZNEy3K2T14RzRnaZT87Xby8zPg0.roa
File: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (raw, json)
Hash identifier: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=
Subject key identifier: 64:D1:32:DC:AD:93:D7:84:73:46:76:99:4F:CE:D7:6F:2F:33:3E:0D
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B8283CDC55A93481C3FB0DFAE0816
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZNEy3K2T14RzRnaZT87Xby8zPg0.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206902
IP address blocks: 84.38.140.0/24 maxlen: 24
87.99.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:82:83:cd:c5:5a:93:48:1c:3f:b0:df:ae:08:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64d132dcad93d784734676994fced76f2f333e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:8b:8f:1a:e1:e8:a3:2a:23:19:dc:95:05:
7d:27:67:a8:51:94:91:f2:8f:04:1c:1b:ff:b4:d7:
26:bc:1f:39:b5:30:08:f0:db:a8:98:38:02:0f:4e:
b7:38:89:29:8d:a9:c3:d6:aa:d4:e0:25:94:aa:42:
e2:fa:24:d2:05:95:e8:3b:4e:c7:18:63:d3:5c:f3:
c0:25:48:4f:b1:71:96:de:c5:64:6a:8a:c6:f0:a6:
79:72:13:da:3b:a2:69:5f:ca:55:95:73:ec:4e:50:
f6:05:0c:ac:26:e5:88:13:8b:13:42:44:89:d5:87:
3d:cb:dd:80:7a:a7:f2:83:cf:29:8d:d2:7a:c3:f4:
4a:f5:ed:70:77:0b:5e:c8:b3:3e:f2:1c:54:56:b2:
3e:3a:d3:d2:e8:7e:83:20:df:59:43:8d:36:39:10:
53:49:af:51:ce:22:57:61:92:21:0b:23:8d:36:7d:
3a:8d:7b:73:18:0d:cd:32:99:17:08:a8:c1:dc:cf:
89:68:18:09:2a:49:74:22:fa:7e:01:f0:cb:8d:5a:
09:30:08:ba:e2:2b:35:b6:b7:2e:69:55:62:5e:0e:
b9:4b:68:9a:b7:de:93:25:f2:8d:f4:0a:4c:7f:60:
62:b7:3f:17:7f:96:39:5f:d4:a3:b4:53:76:9d:04:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:32:DC:AD:93:D7:84:73:46:76:99:4F:CE:D7:6F:2F:33:3E:0D
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZNEy3K2T14RzRnaZT87Xby8zPg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.140.0/24
87.99.73.0/24
Signature Algorithm: sha256WithRSAEncryption
05:39:48:7a:0a:ef:be:f7:2f:b0:6b:22:c0:89:e3:ef:0e:03:
b9:97:43:97:aa:75:41:d4:48:21:31:f8:92:ae:c9:0b:94:ea:
95:28:25:67:0b:e3:f4:ba:35:47:75:a6:3c:d2:b4:f3:55:94:
9c:e4:4c:22:54:b5:61:95:2a:f0:e9:3e:bb:88:53:95:78:72:
fd:90:08:be:cf:92:d5:62:a9:d6:96:94:a6:9d:bd:16:cb:3c:
42:86:95:9c:2a:ee:db:0f:2b:7b:9f:db:87:b6:23:6d:22:73:
3d:47:21:fd:57:8b:2b:bd:08:d9:24:0e:79:89:68:19:c4:01:
b1:44:b2:7c:81:0e:66:ee:a3:7a:e3:1d:80:97:ab:19:26:63:
07:2b:0f:ba:21:43:34:81:7b:65:b9:40:f7:5c:97:d5:43:05:
26:8a:56:63:92:5e:9c:62:fe:b5:dd:bd:6f:ba:4f:cd:b3:5b:
82:14:f9:8f:74:83:1b:26:d9:d1:46:62:ba:bf:6b:bf:77:d8:
58:ea:f2:77:f3:e0:67:10:10:6c:56:2d:1c:76:d4:e1:d6:51:
65:c5:cc:4e:59:c0:4b:54:dc:bb:a9:74:54:9b:fe:bf:e9:30:
5d:ad:2c:bc:40:0b:31:aa:14:b2:e7:d8:c2:1f:e9:70:25:8f:
f9:66:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:05 2025 by rpki-client