Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa
File: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (raw, json)
Hash identifier: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=
Subject key identifier: 65:9F:D2:F1:B6:DD:85:6A:8D:92:C8:06:72:AE:D3:2B:40:BF:3B:AA
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B80CDD3F41F198785B7FA8A1EF32A
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198343
IP address blocks: 176.103.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:80:cd:d3:f4:1f:19:87:85:b7:fa:8a:1e:f3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=659fd2f1b6dd856a8d92c80672aed32b40bf3baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:7f:94:13:01:75:f2:9d:68:74:e2:56:3d:
7f:8a:85:c2:58:0a:87:95:d1:95:f1:58:70:c8:19:
15:af:9e:7f:8a:ea:1f:41:6a:95:90:f4:f3:a8:b6:
f9:a7:3c:fd:0c:37:a2:4f:9b:71:3e:99:14:7d:5d:
34:62:10:e9:a4:cc:f2:40:a5:a0:0e:b6:bf:23:18:
ac:d9:57:2e:f7:95:66:dc:67:4a:70:0b:f0:21:df:
a6:2f:a4:a5:91:9e:c0:ea:6a:22:39:c0:ee:bf:8f:
33:64:77:12:65:10:e9:f7:b5:03:b8:4e:92:8e:07:
46:ce:38:8b:93:23:c9:ca:3b:cc:bf:1a:78:e6:3b:
48:f8:9d:92:5a:d4:2e:6a:89:74:48:eb:9d:ca:de:
78:09:7c:94:ee:12:f4:64:19:e3:f4:7a:30:a9:f6:
3a:ab:30:7f:bd:7f:38:b4:ca:d4:4a:a5:43:ac:4b:
ca:22:8c:5b:55:71:48:20:f2:98:ee:04:42:4f:01:
48:be:88:be:cb:04:59:83:41:17:06:e4:17:08:06:
75:69:56:01:a6:0e:cb:b8:ed:87:ed:b9:96:23:98:
1b:7e:86:3c:bf:d1:c7:9f:ff:58:b4:0c:57:5c:c5:
b6:73:24:79:b6:fe:ba:08:03:20:37:d3:1b:a6:41:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:D2:F1:B6:DD:85:6A:8D:92:C8:06:72:AE:D3:2B:40:BF:3B:AA
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.186.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fe:77:60:ff:60:59:d9:87:26:f6:e3:e9:36:82:f7:ac:d5:
f6:09:f5:84:5c:25:d1:24:56:40:02:f0:0e:ec:bb:90:ab:c8:
3f:03:b1:87:27:db:69:da:9c:04:50:d0:9e:22:4f:ce:c2:a0:
6c:02:26:a4:47:53:dc:5a:fa:d0:73:93:d9:fa:91:b6:52:73:
54:36:e7:2f:0c:5e:94:7d:74:27:70:81:b6:e6:ba:af:4c:6d:
10:74:ed:5e:10:c0:bf:b0:11:44:2f:97:41:96:ae:de:4e:d8:
70:05:99:ec:f7:0f:ff:18:36:0c:51:66:9f:7a:04:4e:6c:47:
34:12:54:51:93:4c:39:1c:81:a3:bd:ff:f8:dc:e5:bd:dc:4a:
2d:0b:f9:89:6d:b5:8c:56:cd:7b:59:b4:87:a7:01:8e:fe:d0:
be:ea:e4:78:4b:de:1f:4a:e0:a5:8f:95:20:24:df:b0:da:25:
84:e5:89:c7:1b:b5:17:31:d3:24:82:3e:5c:00:e3:17:c2:fc:
b9:8c:95:06:94:6c:77:45:f4:23:ad:2c:67:fa:39:cf:3a:6b:
df:ee:37:f6:07:db:1f:73:1f:e5:de:5a:12:e5:45:7d:d6:75:
cd:ad:ab:5e:46:fc:46:b1:8b:9f:6b:8c:a9:e3:fc:b8:23:14:
47:b0:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:14:00 2025 by rpki-client