Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/zbnBRUeVPnEEwLI2vvj0r39FPtE.roa
File: zbnBRUeVPnEEwLI2vvj0r39FPtE.roa (raw, json)
Hash identifier: 4AvpkRySedv9+g3/SFfJUIRAayJwpWmaa1FdREtJu9E=
Subject key identifier: CD:B9:C1:45:47:95:3E:71:04:C0:B2:36:BE:F8:F4:AF:7F:45:3E:D1
Certificate issuer: /CN=898825d2f064989b38c781f2a8535189a26928c3
Certificate serial: 01941F8C021CAEA43597A1E199F1BBC04350
Authority key identifier: 89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/zbnBRUeVPnEEwLI2vvj0r39FPtE.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28831
IP address blocks: 62.169.32.0/21 maxlen: 21
62.169.40.0/21 maxlen: 21
62.169.42.0/24 maxlen: 24
62.169.48.0/21 maxlen: 21
62.169.49.0/24 maxlen: 24
62.169.56.0/21 maxlen: 21
62.169.60.0/24 maxlen: 24
62.169.63.0/24 maxlen: 24
185.107.148.0/23 maxlen: 23
185.107.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:02:1c:ae:a4:35:97:a1:e1:99:f1:bb:c0:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898825d2f064989b38c781f2a8535189a26928c3
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdb9c14547953e7104c0b236bef8f4af7f453ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:19:b3:4f:9a:ba:9d:a7:a4:33:c5:f1:c2:
a8:12:d3:89:20:94:fa:9e:66:84:4e:f1:96:38:1c:
05:92:43:2f:6b:d8:b5:38:2b:63:6f:b7:f9:d3:15:
64:04:63:31:84:2c:d6:3a:61:a9:90:72:fe:96:59:
2b:b6:fe:6b:f0:55:9e:30:9b:26:fb:23:64:f0:78:
1a:a5:d7:67:c4:fa:40:3e:cc:b2:7f:5d:d1:d0:65:
b2:93:f4:8f:92:e5:00:23:44:a0:7e:82:c2:03:6a:
97:9e:4a:29:d3:55:4e:02:81:a5:0d:37:3e:e3:f1:
e1:92:93:f7:88:fd:66:ee:3a:7b:39:28:3a:77:d1:
8e:93:57:20:8f:8b:29:11:56:73:69:47:85:2a:fd:
02:22:c4:a2:ea:12:f8:5e:94:fe:ce:b9:15:f4:f7:
ad:4e:6b:50:20:09:b5:97:9c:32:47:b2:90:42:58:
6f:30:97:6c:78:1a:00:4d:28:4d:1d:42:21:b6:77:
50:87:3e:95:1b:55:39:e6:c0:ae:57:eb:1b:a4:41:
f2:19:40:94:f3:17:a9:81:f7:2d:9d:1d:5c:0b:52:
91:dc:31:7f:ba:52:88:91:f6:e4:e4:c4:c4:89:9b:
a0:a7:2f:9a:10:6e:0f:f0:b9:1a:03:ca:5c:eb:dc:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:C1:45:47:95:3E:71:04:C0:B2:36:BE:F8:F4:AF:7F:45:3E:D1
X509v3 Authority Key Identifier:
keyid:89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/zbnBRUeVPnEEwLI2vvj0r39FPtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.32.0/19
185.107.148.0/22
Signature Algorithm: sha256WithRSAEncryption
95:8e:1f:9e:fb:be:19:9b:f0:c4:4b:97:fc:13:07:60:49:f6:
44:fc:93:cc:d0:f1:53:92:5c:53:5c:99:74:72:7e:af:a3:cc:
02:35:24:f0:0f:f7:ef:44:4d:9f:5b:ee:29:4d:0b:27:d1:af:
6e:6f:12:4f:aa:8a:9e:ca:2c:19:b3:43:45:7e:44:e3:4a:c1:
26:bf:8b:39:db:b2:40:dc:bd:1b:01:20:75:bd:66:e3:ef:d1:
c6:6d:6e:ed:bb:b0:ad:ba:3f:ff:a0:87:b7:4c:b0:f0:1a:78:
37:6a:65:ec:ab:42:3e:d7:18:73:6c:df:00:8f:36:19:0c:19:
eb:a6:01:1d:a3:ab:9e:b7:fe:90:18:30:04:a0:b9:fc:98:ea:
9f:53:0c:98:92:e9:a9:e9:de:df:3d:4c:bc:19:67:f1:12:1f:
27:95:4f:43:9a:13:77:df:c8:13:6f:f0:79:0c:96:6e:4a:ab:
e0:70:da:94:b0:9a:52:83:c6:9c:03:5b:e6:90:cf:45:9c:dc:
40:9b:f4:68:5d:c6:ff:d2:17:9f:c4:9e:28:66:e8:ec:45:c3:
fe:ae:12:d6:71:f8:24:c3:4d:e1:a5:e6:8b:b5:20:8c:4b:83:
f0:e4:c6:e6:f5:6a:58:73:1a:37:b5:ef:48:f9:c3:3f:e7:89:
63:51:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:20 2025 by rpki-client