Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa
File: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (raw, json)
Hash identifier: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=
Subject key identifier: 01:A9:59:DD:16:46:3E:65:41:3C:BF:04:6E:40:7E:63:3C:15:D5:B0
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 0194221FF561123F9375217CFBCB9DF43E79
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8646
IP address blocks: 185.120.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f5:61:12:3f:93:75:21:7c:fb:cb:9d:f4:3e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01a959dd16463e65413cbf046e407e633c15d5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:ad:32:61:78:17:0e:a7:f0:f1:d8:bf:44:
7e:fc:39:5f:40:46:a5:04:0d:7b:ec:72:34:9d:7d:
41:72:ea:1d:37:9a:6e:07:71:bb:fe:7e:22:64:ed:
de:65:13:37:f4:23:17:91:c3:0e:41:b5:6d:8e:d6:
8c:c8:ae:ff:d1:03:40:d3:37:16:16:a1:e4:ff:c8:
20:8f:f0:70:90:40:4b:c7:b7:bc:9e:4f:c2:03:d1:
1e:d0:fc:32:67:34:66:f3:2b:19:8b:1f:09:bc:90:
21:41:b4:f0:7c:b9:f2:ce:a7:9b:c1:c3:5a:01:72:
e0:eb:c7:cd:ca:b6:eb:ab:4d:4f:e6:fa:35:ea:f9:
aa:01:36:0d:c0:45:5f:d0:a8:32:18:9e:30:75:62:
41:06:9d:34:d2:25:f0:aa:fd:69:0a:f7:07:94:24:
7a:1d:19:42:f3:70:bc:0d:ab:4c:45:f8:0c:64:de:
a2:da:4d:be:1c:8c:02:98:86:06:89:e8:8f:49:a1:
61:b1:7f:c8:66:6f:35:49:f6:16:ee:12:8c:65:21:
e7:53:0f:4e:d3:4f:c3:51:4f:c3:fc:76:89:8c:fd:
a6:2e:9e:19:2a:3e:c7:c3:85:11:25:8a:ab:c2:0e:
d9:3d:cc:02:87:03:a9:22:7e:75:f3:27:e7:5b:9a:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A9:59:DD:16:46:3E:65:41:3C:BF:04:6E:40:7E:63:3C:15:D5:B0
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d0:93:e2:e9:db:4b:5c:0f:21:3c:4a:81:7d:3d:27:d3:09:
bb:4c:8a:12:ab:83:42:70:48:d0:19:2e:9f:78:c5:a3:e9:99:
a4:e8:24:7f:58:e1:d6:9f:09:51:58:a6:1e:50:c5:63:93:f5:
1b:14:04:7a:d3:76:ae:22:0d:52:31:c5:2a:e8:56:5b:01:04:
c5:42:e7:3c:f1:6f:02:5d:04:1c:5f:0d:0d:f6:bd:69:e1:48:
b9:19:a2:f7:25:5a:05:d0:49:ad:50:b9:3f:a2:d0:fd:4e:62:
b5:00:84:79:33:36:c5:a7:be:01:c7:ab:a3:0e:00:48:e4:d4:
e3:61:76:29:a2:b3:b5:a5:d3:62:de:be:5d:ec:1b:10:44:91:
44:a1:62:9a:66:6d:74:a4:14:08:f1:00:8b:a2:d8:d6:58:62:
de:72:1e:2d:45:4b:3d:3b:86:f0:c8:16:7c:58:7d:9a:28:21:
2a:87:2a:d7:5a:bb:09:24:a7:8b:d7:43:69:42:d2:f8:e2:72:
91:6b:78:2d:3b:ba:aa:4b:ba:29:9d:23:0f:84:68:f8:0a:f0:
b0:f1:ad:1f:52:a6:2a:19:6a:41:ec:e9:60:f6:e6:88:95:1f:
b4:04:66:42:10:4f:1e:1d:22:49:4e:0e:02:d1:70:8a:7c:ef:
d1:5a:86:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:19 2025 by rpki-client