Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa
File: zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa (raw, json)
Hash identifier: P5pYbU9sXA2DQAtR7bal+wc0XMJxzotl3qbzVMc73xU=
Subject key identifier: CF:0F:A4:50:37:1B:10:A2:80:A0:42:85:22:F7:EB:84:28:F2:23:C2
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B9AC09392C0EA87B7507D8BFF01D436D
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa
Signing time: Fri 31 Jan 2025 00:04:06 +0000
ROA not before: Fri 31 Jan 2025 00:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 83.147.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:ac:09:39:2c:0e:a8:7b:75:07:d8:bf:f0:1d:43:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 31 00:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf0fa450371b10a280a0428522f7eb8428f223c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:74:8f:d2:5e:b5:23:ff:87:33:89:39:da:
4f:19:02:e2:ce:b4:23:a2:9f:12:8f:0e:53:24:4e:
e2:6d:a6:c7:78:09:2c:5c:21:44:bb:54:fe:9b:1c:
5b:58:27:d0:57:7d:d5:0c:9a:a2:93:cb:98:11:05:
3a:d7:07:af:0c:af:ec:4a:84:57:a8:81:1c:d0:e7:
0a:ca:f3:16:0e:c2:3e:4f:98:82:cd:46:ab:90:df:
8c:c6:bc:57:f8:6f:8f:88:3f:cb:e6:02:cc:ef:7d:
bb:5f:91:9d:d2:b4:69:b1:42:ab:65:ac:04:06:9a:
1d:7b:68:12:c2:76:3d:98:27:52:27:eb:2d:00:ce:
6a:df:d0:d3:c3:7a:49:ec:c2:e9:bc:ad:6f:5f:fc:
da:2b:7f:7e:27:ec:a2:26:b2:0f:84:e9:fe:a3:1a:
c5:3c:bd:38:36:c2:cb:a5:9e:e1:25:c1:61:0b:51:
af:1c:4d:36:8b:ea:3c:74:b0:9d:11:d7:c8:ba:12:
c4:b6:e3:bd:d6:37:16:16:8a:ea:c8:2e:bb:7f:c1:
8b:a8:ae:4f:87:b1:60:8a:bc:0c:e8:ec:ab:03:b9:
14:bb:28:34:86:45:ef:c6:1a:d9:04:99:ea:e0:e1:
40:6b:36:8a:4b:89:88:e2:15:57:a2:ea:c9:86:1f:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0F:A4:50:37:1B:10:A2:80:A0:42:85:22:F7:EB:84:28:F2:23:C2
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.194.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cb:fc:dd:a1:76:e1:15:ae:9d:30:cf:d9:90:6d:af:ae:6e:
e2:d2:f9:06:90:90:36:9f:c3:32:19:1a:db:bd:4c:e2:50:a1:
0f:40:48:74:bb:00:41:ff:59:fa:dd:6c:f1:ed:91:b9:01:b8:
b6:1c:ae:04:2d:db:47:82:f4:30:a7:a8:cb:16:72:69:d8:4e:
26:56:cf:e1:93:81:65:b9:29:09:d8:bf:87:1a:4f:69:2a:f6:
f7:2a:d5:2f:8b:ad:16:27:a6:3f:a6:05:e8:31:58:82:30:6e:
f4:b9:df:b3:c1:38:76:22:46:a9:53:d3:53:c8:de:4f:fa:ca:
7d:e3:32:94:04:7c:b5:7c:a4:5c:78:35:a6:9d:89:78:c4:71:
3a:23:67:2b:7d:c0:e1:f1:42:43:f0:cc:55:ff:58:bf:84:86:
01:9e:94:06:06:0b:a8:ef:a4:82:e5:26:4b:10:9a:ac:39:64:
b8:14:8d:7c:ed:d6:fc:b2:64:41:61:94:b8:3c:88:19:ff:28:
2f:4b:fc:a1:f7:f1:c1:5c:6c:6a:ca:15:3c:42:17:1f:52:bf:
2e:e6:b4:8a:ed:24:fb:0b:41:8c:59:b7:76:a8:fc:c4:1e:69:
46:bb:a5:b5:e8:23:e9:fd:67:d7:34:4c:b2:15:77:c5:47:75:
24:dc:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:03:30 2025 by rpki-client