Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/zJ66DcCgja2POU7oenk15QdK9KA.roa
File: zJ66DcCgja2POU7oenk15QdK9KA.roa (raw, json)
Hash identifier: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=
Subject key identifier: CC:9E:BA:0D:C0:A0:8D:AD:8F:39:4E:E8:7A:79:35:E5:07:4A:F4:A0
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 019422FB048E55F7494C4B5B332EB7D6B101
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/zJ66DcCgja2POU7oenk15QdK9KA.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50919
IP address blocks: 178.23.72.0/21 maxlen: 21
188.164.200.0/21 maxlen: 21
194.62.224.0/22 maxlen: 22
2a00:1f68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:04:8e:55:f7:49:4c:4b:5b:33:2e:b7:d6:b1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc9eba0dc0a08dad8f394ee87a7935e5074af4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:a1:28:3a:0c:d9:fc:c0:8b:31:2c:d0:77:
1f:77:f4:7e:b3:aa:e4:97:77:d1:17:91:7c:3d:60:
40:fb:d2:e1:6f:f9:43:71:39:8d:1b:ea:1b:0f:50:
f0:eb:54:32:f1:85:d2:b4:be:6a:71:75:92:64:e2:
de:ec:4e:06:ab:ec:9e:58:a2:7c:61:d6:b4:18:ea:
f2:b8:d1:ae:72:02:0d:d7:03:97:2e:22:57:7e:ef:
d2:69:51:c3:45:67:7b:44:8d:c3:91:65:be:bb:27:
0d:c4:b4:d6:a4:97:90:45:66:9a:f7:9e:bd:17:c4:
84:38:8c:5f:f4:0c:5f:c6:1a:99:f8:0f:0d:06:72:
8d:23:07:a1:fe:c2:7c:ce:32:9c:ce:38:30:4e:21:
7c:d9:0a:5f:43:91:5c:24:f3:a6:80:0a:a5:c0:b7:
d6:e3:7c:f7:39:62:30:fd:00:1a:0b:88:39:e7:a9:
66:cb:5b:91:a8:5d:02:9f:ea:83:02:6e:58:4c:6a:
9f:e1:a0:08:ec:8c:5b:41:f3:90:e1:78:b1:5c:40:
d8:51:d9:b2:b3:2e:7f:29:87:79:e1:71:2a:5f:b5:
09:2a:46:9d:f8:df:9e:11:98:f1:08:bf:f4:ef:72:
7b:c3:80:42:d5:8f:cf:d5:d6:11:7f:6e:b6:d7:e1:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9E:BA:0D:C0:A0:8D:AD:8F:39:4E:E8:7A:79:35:E5:07:4A:F4:A0
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/zJ66DcCgja2POU7oenk15QdK9KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.72.0/21
188.164.200.0/21
194.62.224.0/22
IPv6:
2a00:1f68::/32
Signature Algorithm: sha256WithRSAEncryption
68:88:f0:7f:fc:c6:3f:45:44:e8:5a:1f:47:c1:cd:c5:67:25:
73:0d:70:1e:bc:c5:18:6b:35:57:08:80:32:dd:d8:9f:ff:dd:
fd:ea:f8:d7:58:5f:e4:0a:66:5f:ea:eb:ef:dd:1f:6d:40:b4:
a3:2c:69:ab:00:fc:2c:86:d4:7c:93:44:0a:0a:ea:1a:ee:c0:
42:13:b4:6d:1a:48:6b:3d:12:19:d6:8f:a3:b4:64:9a:65:b0:
88:e0:98:9c:e5:d0:c8:53:6a:e0:03:a3:a0:ee:56:4c:94:bd:
ab:40:ca:0a:49:07:4f:4b:6c:1e:2e:90:b2:58:fc:0c:98:52:
07:14:bf:ee:4f:ab:e1:12:b3:e7:50:f9:49:9e:c4:8c:3f:e7:
37:e5:ad:1e:62:e6:51:f5:b7:3a:b7:46:ba:e8:87:be:70:e9:
a4:73:fa:d5:d8:2f:0c:4e:0f:24:18:78:cf:41:27:98:64:93:
30:0b:09:9b:b3:cc:e7:4d:59:de:91:90:a1:72:f4:be:d0:cf:
3d:cf:e4:cd:a0:1d:8b:87:e3:a4:59:ce:77:c7:8c:fb:fa:78:
39:c5:69:dc:b0:8b:9e:df:32:58:86:d0:7d:a1:ee:a0:3d:4f:
31:c7:48:5e:29:3b:ba:21:56:cd:08:4e:3a:85:06:a6:82:79:
fe:2b:76:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:47 2025 by rpki-client