Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa
File: zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa (raw, json)
Hash identifier: qlcz7bJ9k+K7bMbtiBCeKabs37EBPQzpy/kDcVYHEOo=
Subject key identifier: CD:B4:80:75:24:AC:98:E5:3C:5F:98:8E:FB:27:C2:2B:6F:86:B0:DA
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 01942746690E3F54C9BA05CBD8B6509E788D
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa
Signing time: Thu 02 Jan 2025 13:48:33 +0000
ROA not before: Thu 02 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16177
IP address blocks: 82.195.32.0/19 maxlen: 24
193.41.176.0/22 maxlen: 24
194.9.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:69:0e:3f:54:c9:ba:05:cb:d8:b6:50:9e:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Jan 2 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdb4807524ac98e53c5f988efb27c22b6f86b0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:6f:f6:dc:84:71:82:db:6b:26:dd:16:51:
55:3b:6a:7b:cf:f3:34:3c:c8:49:5a:04:d3:60:e9:
11:81:81:c3:a6:b7:9e:63:01:6a:f4:90:1b:55:ba:
50:3c:e6:6d:48:b5:3d:23:d2:2d:b9:1a:98:f7:61:
c4:9f:e3:00:42:26:88:cb:ef:12:fc:6c:a3:4c:b7:
87:a6:79:01:d4:5e:5c:fc:50:f9:6e:b3:46:ba:1f:
d7:79:a2:b0:7c:e4:06:68:72:74:d8:2f:a2:0c:b9:
92:a3:0e:35:2b:00:d3:ca:f6:bb:a1:d6:03:b0:e5:
1f:8c:c7:c7:77:77:03:91:7f:4f:87:0d:3c:7a:61:
86:0f:fa:9c:e3:81:f5:cf:23:0d:c8:f9:02:4e:5e:
a2:5e:89:81:ad:24:c5:74:65:bc:92:35:28:1e:c8:
68:cb:f6:95:74:3b:a2:80:01:97:e7:74:f2:57:51:
07:99:48:dd:28:20:8a:17:df:81:1b:f9:ee:fd:07:
80:ab:f5:c8:76:56:61:e7:23:48:9f:8c:59:8b:6d:
0c:41:c3:56:4e:40:52:93:c3:68:1b:4e:7a:d8:e0:
e2:a3:80:ee:68:65:c5:0f:8f:84:58:05:54:86:d9:
2b:ee:d9:5c:12:0b:4c:81:79:ad:22:d5:cd:f6:2d:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:80:75:24:AC:98:E5:3C:5F:98:8E:FB:27:C2:2B:6F:86:B0:DA
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.32.0/19
193.41.176.0/22
194.9.220.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:e9:21:17:9b:16:02:3b:a8:b3:3f:38:80:54:79:f4:b8:ab:
4f:66:66:9d:60:fa:2c:a0:62:df:bd:ad:6f:d1:0d:e9:65:8f:
34:b2:d3:18:66:84:6d:ba:e3:e9:e4:47:a2:30:be:cb:25:cd:
d8:80:62:a5:61:54:70:e6:32:f7:21:d5:09:f4:b5:94:e7:51:
90:e8:ef:79:38:15:7a:e6:25:f8:cc:cd:db:fa:19:e4:48:2e:
e1:f2:10:01:7a:4c:a5:e9:72:63:fd:6a:b5:18:11:0d:13:71:
ad:be:88:fa:20:11:0a:1a:c7:6c:3b:89:f4:9d:91:e5:39:d9:
5d:31:ec:94:51:00:19:33:52:18:97:23:0f:de:d2:15:24:8b:
a0:81:94:ac:0d:61:99:4b:0c:1a:c4:ac:2f:3d:6e:b3:7d:89:
57:c8:1c:33:1a:6b:4b:c4:3d:df:23:ff:c9:ed:c4:06:ec:15:
64:19:49:e5:20:4c:28:68:e2:ab:31:bd:cb:d4:e1:c3:b6:3b:
cd:84:16:43:5f:8a:55:29:af:72:18:b9:22:fe:b8:be:9c:6f:
c0:cf:42:f7:65:0e:90:23:97:ab:4c:29:12:fe:09:72:4b:a2:
5b:c3:29:d8:e5:e6:d8:8e:1f:1b:e7:a2:d6:18:03:ec:ef:1a:
44:1a:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:16:57 2025 by rpki-client