Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa
File: ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa (raw, json)
Hash identifier: jziH1YUdOxO0fjTZX1NtG9i3whM5NpQBefgYhtAFo6Y=
Subject key identifier: 65:46:C0:C6:BF:17:FF:18:72:C0:D9:8E:AA:71:CA:5E:89:D7:49:0D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA5607219A68FE1A5992F1A81F466
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35830
IP address blocks: 89.19.35.0/24 maxlen: 24
193.151.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a5:60:72:19:a6:8f:e1:a5:99:2f:1a:81:f4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6546c0c6bf17ff1872c0d98eaa71ca5e89d7490d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:0b:59:72:aa:d5:ee:d9:b3:2c:e9:2a:5c:
61:6a:ef:b1:65:43:da:93:84:14:2b:6a:55:0c:f9:
51:2b:9a:28:ed:e5:d1:bf:12:25:38:dc:aa:9a:d4:
a9:6d:d6:56:9e:36:b1:8f:27:b1:60:06:55:2d:c7:
e2:55:cb:dc:28:e7:81:f0:95:d7:3b:54:b0:6b:7b:
fe:0c:c1:46:db:c0:2d:47:34:8f:51:df:88:9d:2f:
be:f4:4a:bc:86:e3:a1:07:f2:de:99:da:51:f1:c9:
be:e3:3c:a3:b0:9b:b2:93:16:de:12:bd:d4:33:f0:
90:03:d8:ff:fc:46:27:18:00:05:16:c8:19:fe:7e:
94:c0:01:25:e4:a0:57:61:84:87:3f:09:84:5e:32:
4d:1a:2e:c0:26:c2:41:5b:a3:6d:a9:15:a1:d4:7b:
ad:55:ce:4f:58:09:5e:6d:52:81:c8:16:4d:af:78:
3c:14:1c:b6:d7:f9:25:56:6e:87:94:91:73:76:79:
bf:aa:0a:b2:0e:d9:1a:ef:6f:d5:be:37:42:d1:1f:
97:dc:38:51:00:cd:78:43:ac:b6:f6:95:77:ad:16:
3c:7b:6e:2c:be:c6:90:e4:87:d6:75:61:0b:cc:51:
b6:b7:41:13:90:7d:fd:67:13:b3:3f:79:91:ed:ff:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:46:C0:C6:BF:17:FF:18:72:C0:D9:8E:AA:71:CA:5E:89:D7:49:0D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ZUbAxr8X_xhywNmOqnHKXonXSQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.35.0/24
193.151.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:79:22:88:b4:1b:cd:a2:e6:09:36:c3:a5:fc:c5:3b:cf:cc:
a9:7f:31:80:13:1c:e7:8e:95:47:6a:5b:0a:4b:4b:2f:49:d2:
82:d1:e5:1c:d7:ff:94:aa:a4:0f:2f:cf:d3:a4:ef:b0:01:21:
97:51:05:ba:61:c7:83:80:5c:b6:23:27:90:d9:dc:5f:59:07:
b2:7a:46:ad:76:08:3a:3e:3a:09:f4:1a:f3:8f:f4:21:17:61:
b5:ff:25:a4:f4:6c:ab:21:03:f5:a3:cc:c9:8e:a1:20:00:ff:
a4:eb:71:eb:8c:bc:2e:04:f4:f1:81:03:4b:57:45:00:5c:4e:
4d:33:26:39:f3:9e:0d:aa:3c:23:21:a6:b0:dd:d5:05:90:9e:
be:c8:07:71:97:1e:a7:bb:4a:44:ef:98:8d:64:07:46:04:e0:
99:04:14:10:18:ab:91:21:5d:42:d4:fd:2c:c0:16:d8:ea:22:
78:24:4b:5d:ed:08:a4:47:63:fd:aa:51:18:83:69:ce:c8:50:
d0:0c:4c:a0:de:e5:ae:9f:59:8a:f8:cf:c6:f3:e5:ea:84:0f:
a4:75:2b:7a:b3:00:d5:0d:d9:9f:86:0a:cb:03:6b:f6:39:b6:
6a:f6:17:ce:74:ef:df:26:a1:81:d2:93:3d:4f:e2:f9:58:ac:
d0:c5:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:19 2025 by rpki-client