Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Zla6xxqlwjD5HGAN16Pzo29Tijg.roa
File: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (raw, json)
Hash identifier: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=
Subject key identifier: 66:56:BA:C7:1A:A5:C2:30:F9:1C:60:0D:D7:A3:F3:A3:6F:53:8A:38
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019422FB5B5DFD8AA6614B6A4993E188DB69
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Zla6xxqlwjD5HGAN16Pzo29Tijg.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204804
IP address blocks: 91.231.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5b:5d:fd:8a:a6:61:4b:6a:49:93:e1:88:db:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6656bac71aa5c230f91c600dd7a3f3a36f538a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:6e:65:5c:04:68:ec:a2:f1:46:ac:c9:9b:
b0:a3:52:1b:97:6b:28:b2:3c:2d:fc:b8:88:08:c3:
0f:88:78:98:55:ba:7a:49:86:43:39:b2:3f:42:a2:
37:4d:b8:6d:ef:03:61:9f:9a:dd:ee:a6:7c:38:b6:
5a:35:45:33:92:5c:52:01:c1:42:e8:0e:50:5e:d9:
97:d7:e5:c1:f6:8a:33:1c:b5:49:da:14:0b:aa:83:
7e:57:7b:3d:b3:5d:22:b4:79:de:4c:94:2a:fa:38:
fb:28:7e:88:d1:8a:71:63:14:ff:8e:5c:6f:cf:3b:
28:54:f8:fe:61:40:f8:66:94:f1:77:d1:8f:45:da:
4e:b1:f4:c3:5a:48:ad:54:15:09:a8:4e:45:ad:84:
67:71:ea:11:db:27:fd:65:93:33:86:c1:58:1d:a5:
6e:52:2e:e7:4c:62:87:3c:3a:40:d6:9d:d8:9a:30:
91:10:62:0c:17:d9:14:d1:ed:9e:a8:5b:00:72:62:
c3:5c:3b:82:93:dd:f8:9a:54:cb:e4:26:c0:1f:24:
56:a1:1c:6d:13:34:3d:7b:09:9d:ab:15:9e:b5:3a:
7a:1e:92:81:a5:7d:70:d9:af:78:c1:06:e4:61:92:
68:a2:37:d9:41:81:4a:e7:c1:9c:43:24:27:ff:a3:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:BA:C7:1A:A5:C2:30:F9:1C:60:0D:D7:A3:F3:A3:6F:53:8A:38
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/Zla6xxqlwjD5HGAN16Pzo29Tijg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b8:12:21:06:4e:8e:b9:5d:f4:24:3d:48:d2:f4:67:a0:b4:
aa:03:63:91:76:79:bc:79:51:0f:8d:3f:c6:ee:dc:e7:d5:c8:
50:de:af:38:3e:44:ff:24:4c:50:a4:96:a9:f0:dd:17:d7:69:
80:f9:e9:fa:67:16:56:d1:21:05:de:45:11:1b:37:28:46:bd:
a9:49:90:eb:5f:ae:bf:40:cc:97:d7:e2:11:0f:4c:7f:e2:cc:
08:d0:77:b9:71:bd:a1:35:a1:59:be:ac:95:ba:cf:af:56:2f:
8a:51:f6:a5:b2:3a:6c:f1:b2:4f:15:f3:45:3b:ef:99:1a:db:
c6:0a:e6:d3:67:2c:a8:70:42:33:39:a0:94:dd:f2:4e:95:63:
9d:08:e2:80:84:47:3d:b2:16:1d:58:e9:6a:47:7c:d2:34:27:
fb:36:51:24:22:d2:73:bd:0e:a6:fc:3b:8e:ac:29:69:98:50:
f8:c4:eb:b4:1f:57:da:ac:c6:8b:0d:13:55:b7:17:fa:66:15:
b9:d0:ef:66:a6:24:ce:22:0e:6b:7f:45:ab:3d:89:ff:95:86:
5d:07:59:70:a2:d8:c8:3c:d0:61:ac:c4:a5:67:59:0e:b2:e8:
6f:a9:1d:3a:59:db:45:18:4e:c3:a6:bb:f7:19:ab:cf:48:07:
d0:46:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:22 2025 by rpki-client