Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/zM4hFOeWneXhfMX60yWm7dJXOqc.roa
File: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (raw, json)
Hash identifier: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=
Subject key identifier: CC:CE:21:14:E7:96:9D:E5:E1:7C:C5:FA:D3:25:A6:ED:D2:57:3A:A7
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D63C679B34C5C60DAB600B2C48F1E9
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/zM4hFOeWneXhfMX60yWm7dJXOqc.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64473
IP address blocks: 107.150.174.0/24 maxlen: 24
2a07:22c0:c100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3c:67:9b:34:c5:c6:0d:ab:60:0b:2c:48:f1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccce2114e7969de5e17cc5fad325a6edd2573aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:7d:ec:df:42:0d:b1:35:44:00:31:df:9a:
a8:29:fa:13:dd:1c:56:a5:62:df:67:68:85:9c:89:
f1:9f:10:9d:1f:0c:73:13:ba:c2:79:1d:22:1a:c3:
8f:09:1a:6a:57:e5:70:4b:76:cc:dc:2f:76:33:df:
90:28:a7:32:10:71:fd:88:49:f1:c9:b1:31:8b:50:
54:c1:96:ce:a1:32:12:f8:59:28:11:5f:8c:1e:52:
24:72:4c:2d:60:cf:cc:58:d2:dd:97:83:36:9f:01:
47:66:3c:31:0b:fb:b1:85:fc:2e:72:1a:0c:97:55:
2d:66:9d:ad:03:bd:66:1a:a8:57:ec:0d:ca:a7:52:
e7:8e:86:94:cc:c8:8f:65:88:87:e7:3a:2c:52:15:
82:2c:96:76:c7:fd:04:9c:45:c9:a5:b2:ee:22:3b:
51:c1:77:c8:b7:ad:5c:85:c8:66:1d:fd:fd:06:6e:
87:54:62:3c:dc:2e:85:f7:45:6f:63:10:2d:bd:6a:
77:2c:ef:4f:82:49:31:22:93:a3:39:e4:21:d5:54:
79:c8:59:a3:a5:5d:04:09:f9:fc:b4:65:50:d1:1f:
4e:fa:9e:84:ba:0f:70:20:e7:15:aa:8e:01:1f:b9:
ac:c1:e7:f4:fa:b1:f3:07:24:05:d0:f3:08:8b:9e:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CE:21:14:E7:96:9D:E5:E1:7C:C5:FA:D3:25:A6:ED:D2:57:3A:A7
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/zM4hFOeWneXhfMX60yWm7dJXOqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.174.0/24
IPv6:
2a07:22c0:c100::/40
Signature Algorithm: sha256WithRSAEncryption
14:5c:b7:4a:7e:7e:32:4c:4b:c0:0c:50:a3:66:ca:e3:8b:4f:
ab:17:df:ee:f8:15:1f:58:50:84:91:44:95:9d:22:94:18:37:
06:78:d0:7d:cb:fb:9a:da:47:38:98:f6:74:6a:00:e1:17:b2:
25:7f:93:d9:35:24:47:6e:1e:71:f0:44:1e:5e:09:69:98:52:
45:f9:d9:da:c6:7b:40:76:da:4b:17:bd:3b:0d:85:05:11:2e:
a0:78:6f:be:9b:0d:4c:88:ea:9a:74:e7:d4:74:50:4e:55:ef:
8f:fc:05:6a:73:5e:40:75:40:4b:34:fb:d4:13:51:17:75:92:
66:1b:5e:61:29:65:67:38:ed:63:b0:c2:5f:6f:3c:84:bf:dc:
c2:73:53:32:98:3f:e9:44:df:34:17:76:8a:54:bb:c3:60:ff:
08:80:aa:f1:c6:ee:e4:df:3d:a2:15:b7:04:55:6b:79:1c:6c:
d9:6d:ec:03:df:2e:6c:c4:ed:32:85:2d:be:1a:51:d6:f4:65:
41:b7:30:97:0a:0a:c9:9e:9c:88:83:ee:b0:fb:4b:c6:a1:4b:
de:72:d5:a3:c6:8e:58:aa:97:d0:aa:5b:cf:20:22:94:28:20:
fd:c1:19:93:fa:3e:35:fb:0d:0d:9c:be:52:f1:57:0f:dc:7b:
5d:5e:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:16:30 2025 by rpki-client