Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/C3eiydvfu8zDQyZJ5caLapaTTPQ.roa
File: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (raw, json)
Hash identifier: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=
Subject key identifier: 0B:77:A2:C9:DB:DF:BB:CC:C3:43:26:49:E5:C6:8B:6A:96:93:4C:F4
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 0194258F6FC9FA038A2BA228984A3762FAAB
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/C3eiydvfu8zDQyZJ5caLapaTTPQ.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35246
IP address blocks: 2.57.37.0/24 maxlen: 24
2.57.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6f:c9:fa:03:8a:2b:a2:28:98:4a:37:62:fa:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b77a2c9dbdfbbccc3432649e5c68b6a96934cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:76:ab:f3:1a:4b:67:04:ad:9a:32:dc:b5:
b1:34:46:a3:29:17:ca:cb:1f:8a:20:1e:49:4c:dc:
be:21:5c:da:6b:6a:f9:b1:ec:4f:67:89:a5:c0:55:
8f:ba:3b:bd:31:ee:a9:5b:c2:69:aa:d2:dd:5a:6c:
d5:22:26:98:c1:79:71:29:3d:3d:72:af:cb:a3:ba:
0e:01:ab:d8:fd:7d:f7:0d:5c:7f:64:74:c9:56:92:
99:c9:e1:25:9d:96:0c:78:25:81:84:5a:30:bc:d1:
ae:87:01:2a:17:96:e1:e2:eb:35:f2:ce:41:0f:84:
03:06:a7:08:25:60:ff:74:55:8c:04:55:b8:93:cd:
f9:13:25:58:17:db:8e:3e:43:b6:a8:da:a0:2a:77:
8d:16:c5:51:2a:1d:8e:7c:8f:24:de:d8:a7:a2:ca:
bd:21:34:f3:0a:da:94:d9:aa:e6:b4:35:94:46:e5:
f7:c0:1e:c3:4e:71:bb:66:13:ce:12:0d:4c:d7:b9:
d7:01:fb:f8:03:84:7f:b6:61:4b:d2:b2:25:93:61:
c9:fb:17:6b:7f:55:01:53:da:b6:12:1c:9b:74:b5:
8c:ed:f7:a3:82:e6:11:b7:c7:0a:80:c6:15:9d:63:
da:47:c7:e7:f8:f4:3d:dc:fc:fb:50:c5:f8:7f:7e:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:A2:C9:DB:DF:BB:CC:C3:43:26:49:E5:C6:8B:6A:96:93:4C:F4
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/C3eiydvfu8zDQyZJ5caLapaTTPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.37.0-2.57.38.255
Signature Algorithm: sha256WithRSAEncryption
ae:4e:17:80:32:bb:67:fd:44:e1:15:69:ab:c7:ee:ca:5d:ec:
0e:9c:1b:3a:b6:29:4a:b1:b8:de:85:85:d0:a8:bc:58:47:ae:
a9:e9:22:bf:f0:b2:25:b9:94:fb:23:05:ab:21:5b:b5:ab:64:
fb:78:88:9f:77:86:1a:d3:0e:f3:7d:64:2c:a3:8b:d7:00:fc:
50:f9:4a:73:2f:a7:23:c9:1b:30:7a:81:56:8f:7a:4f:16:08:
12:51:d7:fc:52:35:84:7d:40:13:ab:90:5a:11:fa:fc:7c:df:
c9:8c:19:c4:f2:01:56:1b:a3:6b:08:6c:4f:e3:d2:6e:5a:48:
0c:5f:f3:6d:f6:a1:ac:73:4b:d9:e9:6f:8c:7f:80:0d:d4:be:
6b:3b:21:9b:e9:20:4f:4a:a0:9a:4f:83:24:46:3b:47:de:16:
40:ee:a1:77:3d:81:f7:e2:b3:1a:35:fb:1d:9c:e3:d0:d6:ca:
80:80:63:d0:15:07:aa:c9:d1:36:42:f6:7b:85:22:f0:7c:ab:
80:4d:e1:dd:22:52:75:c4:77:73:9f:cd:4d:b8:3b:58:76:ff:
01:02:a2:c6:28:e1:60:7c:46:34:b2:f3:fe:fd:68:e4:97:63:
a7:b5:22:8b:63:26:2a:6b:34:35:78:6b:27:a5:2e:aa:c0:cf:
49:4c:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:03 2025 by rpki-client