Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/zBo_iKzjdrZH1koNuXflz2DEVFo.roa
File: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (raw, json)
Hash identifier: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=
Subject key identifier: CC:1A:3F:88:AC:E3:76:B6:47:D6:4A:0D:B9:77:E5:CF:60:C4:54:5A
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 01941F8C65588C2320953B8A484B2C0D76E0
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/zBo_iKzjdrZH1koNuXflz2DEVFo.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61327
IP address blocks: 185.11.40.0/22 maxlen: 24
185.42.216.0/22 maxlen: 24
2a03:68c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:65:58:8c:23:20:95:3b:8a:48:4b:2c:0d:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc1a3f88ace376b647d64a0db977e5cf60c4545a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:77:1d:ed:e9:c1:a0:e0:67:93:32:53:bb:
b8:ac:92:96:b0:c4:32:8f:b4:cd:14:da:4d:7a:9d:
af:a9:05:ef:3b:ad:28:96:ac:42:a4:4c:08:bd:3d:
26:bf:c9:68:61:8e:06:6d:d5:98:78:9c:bc:24:1f:
f8:56:c1:61:13:98:cd:7c:10:a8:01:63:d3:ff:bc:
6a:9e:12:86:3e:38:ac:84:73:83:4f:d6:db:35:27:
20:d5:98:2d:5b:5a:b1:5a:6d:15:ef:6c:c1:c9:db:
95:a8:c2:b0:f4:81:dd:cf:af:8c:15:41:92:8f:6a:
7e:a7:c0:df:1b:8c:5d:91:3c:e4:02:b1:d4:07:bb:
12:84:c0:f0:b2:5a:de:9a:34:8e:da:a6:eb:c1:12:
f1:a2:4f:f7:3d:84:a3:dc:32:fe:77:40:42:99:a0:
8a:95:a9:bf:f9:13:ba:37:0b:2c:84:03:2e:f0:3d:
60:6d:ad:a5:d1:aa:5a:ab:56:07:1a:9f:be:ff:2a:
25:d6:5f:98:11:c1:5a:78:d9:48:75:9a:84:48:51:
a8:42:32:ca:1e:19:86:a6:86:17:03:00:0e:dc:eb:
45:b8:ed:b0:c1:3a:ba:a6:cd:2b:60:8a:8e:70:46:
f9:55:61:61:86:a0:6b:1e:44:85:45:7e:fd:de:b9:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:3F:88:AC:E3:76:B6:47:D6:4A:0D:B9:77:E5:CF:60:C4:54:5A
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/zBo_iKzjdrZH1koNuXflz2DEVFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.40.0/22
185.42.216.0/22
IPv6:
2a03:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
51:9b:d7:fe:37:e8:b3:d9:cc:a5:c1:36:4b:b1:e5:a6:23:26:
eb:ce:c9:4b:ca:43:8f:2c:b3:09:49:b3:e8:2c:3f:08:0a:7e:
e3:fa:9c:bd:5b:65:80:23:6b:43:d8:ed:d6:3f:a6:7e:d7:c7:
3c:a8:6d:fb:df:7b:29:b2:a6:d8:48:83:5a:85:2e:75:97:97:
5c:f6:8e:ab:6f:8a:c8:56:bf:c5:78:b2:94:90:98:98:4f:16:
6a:99:4f:e0:c9:4b:93:01:97:a1:4f:20:60:52:8e:16:a4:cd:
74:01:f5:ac:d3:26:5f:93:2c:12:58:f8:54:4f:96:0d:61:cd:
90:2c:d9:61:33:29:08:ab:07:9c:63:e6:eb:12:9d:db:7e:2e:
49:75:d1:01:b1:7d:f8:77:f3:2a:9e:14:31:2b:e9:0f:b4:60:
42:1a:d0:0f:14:66:25:bf:ec:4d:75:ce:b7:69:1a:0a:c4:5f:
c1:30:8f:74:e6:42:1f:9a:c8:e4:55:1f:d1:bb:56:19:62:8e:
ca:bb:ee:06:67:aa:d3:74:8f:d2:33:22:48:85:a8:5f:9a:6b:
4f:c9:09:a2:1c:b0:ed:f5:e9:77:fd:be:4f:0b:78:12:84:d3:
d9:41:48:48:a5:cc:7d:22:2f:a6:ac:8d:ca:30:e6:3e:46:ab:
3e:90:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:41 2025 by rpki-client