Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ZYGYeQceaN7I_pfDtcAk40ZEq0M.roa
File: ZYGYeQceaN7I_pfDtcAk40ZEq0M.roa (raw, json)
Hash identifier: OHgyaUYp8BdjJtUniornpY5cjOGkXbitG3jQOG7El8U=
Subject key identifier: 65:81:98:79:07:1E:68:DE:C8:FE:97:C3:B5:C0:24:E3:46:44:AB:43
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB75559CBD92BF4E23E72FFDFE1779
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ZYGYeQceaN7I_pfDtcAk40ZEq0M.roa
Signing time: Wed 01 Jan 2025 17:48:12 +0000
ROA not before: Wed 01 Jan 2025 17:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 45.129.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:75:55:9c:bd:92:bf:4e:23:e7:2f:fd:fe:17:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65819879071e68dec8fe97c3b5c024e34644ab43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:73:6f:11:42:cc:d3:44:95:7f:5a:2f:ab:50:
96:25:16:5b:e2:d3:59:05:8a:ba:e9:ef:25:b5:6d:
17:f5:f7:fb:d6:84:92:46:c1:58:b7:57:f0:08:60:
b2:fd:91:58:5a:86:75:e6:89:79:d2:d4:1d:f9:b2:
e5:12:7b:b6:20:ad:f9:d0:15:64:9c:8b:9f:4d:2f:
9f:10:23:a7:0e:a7:bd:5e:9b:ae:6c:c7:1f:df:7d:
17:6f:93:13:85:7a:1a:c6:83:4c:51:a1:58:ee:38:
b0:e9:60:62:ae:31:1a:93:25:a3:93:35:e6:77:9a:
bb:83:95:07:0a:26:17:d4:29:a2:fa:4b:24:ea:ec:
81:b6:8e:c2:7d:c7:2c:07:be:4a:d1:2c:b9:10:4a:
a3:23:7e:48:18:6b:3f:5c:13:51:82:01:4f:94:6d:
df:8e:de:3d:c3:01:61:63:21:d0:31:77:5a:11:94:
2d:a0:64:12:df:ec:62:b9:d8:e5:18:64:e1:75:a6:
77:a8:08:de:e7:4b:73:be:6e:a8:16:14:b2:92:f4:
d3:18:27:79:e4:92:2a:ab:32:a2:eb:ae:3e:47:b1:
28:cf:b4:b5:40:9c:e5:9e:03:20:c4:07:0e:f9:04:
c6:9d:c2:4e:9a:72:89:fb:5d:f9:c9:a9:98:10:47:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:98:79:07:1E:68:DE:C8:FE:97:C3:B5:C0:24:E3:46:44:AB:43
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ZYGYeQceaN7I_pfDtcAk40ZEq0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:71:38:2b:e1:a6:d3:3f:2b:72:c3:31:0e:3d:43:55:75:37:
14:45:87:df:b7:ba:e1:f8:11:93:e1:f8:7c:53:b8:0a:85:57:
28:4f:a0:22:50:ed:3e:a1:6a:0b:49:3f:e9:a2:0d:0f:51:fa:
6e:55:b5:c6:c3:5f:63:a7:8f:57:e6:9c:f6:22:27:6c:9c:d2:
ab:6f:ae:e3:0f:91:1e:b0:ca:31:f9:a8:a0:6a:77:b0:a2:4f:
6c:e2:1a:d8:3b:ae:e9:d0:c7:6b:c4:6f:ac:86:02:f0:42:bd:
f8:de:2c:da:c5:f1:23:c1:6f:f1:8a:ae:9d:ba:b7:b2:97:15:
da:71:b3:d4:8f:ed:cf:41:11:ba:cc:3f:3b:2f:ca:68:8f:1f:
61:06:94:c2:23:92:a6:b4:88:0b:cf:e4:84:33:8a:30:35:d3:
e5:bd:5e:6e:b9:e7:69:b3:b9:44:6b:46:0b:4b:a9:97:89:3d:
c3:7a:11:50:49:0b:bb:f5:71:a4:cf:33:f8:9a:ca:8f:63:81:
3f:15:3f:ef:7a:ab:7e:98:a9:31:de:1d:23:6d:21:47:77:39:
61:6c:0e:99:1d:09:f0:3a:5e:a0:b3:93:a5:ab:18:f7:9c:a7:
1f:df:2e:43:17:96:79:a7:09:0e:dc:1e:1f:5c:de:16:b5:df:
aa:2b:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:43:28 2025 by rpki-client