Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa
File: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (raw, json)
Hash identifier: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=
Subject key identifier: 65:A4:90:55:36:66:D9:FE:1E:6D:CE:F5:1C:89:21:AE:9A:AA:B2:E9
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F3F0518AB452D135CB4985A8C9189
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa
Signing time: Wed 01 Jan 2025 13:47:40 +0000
ROA not before: Wed 01 Jan 2025 13:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208057
IP address blocks: 213.191.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3f:05:18:ab:45:2d:13:5c:b4:98:5a:8c:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65a490553666d9fe1e6dcef51c8921ae9aaab2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:51:83:6b:f8:3f:71:f2:a8:2c:ca:ea:ab:
21:11:e3:92:ff:76:e1:5b:71:1b:ba:e0:ad:77:78:
39:32:e2:e1:58:fb:9b:7d:77:e4:87:ea:b5:40:0e:
32:0c:57:14:e8:c8:71:9a:79:46:7c:53:9b:75:f9:
83:d6:b3:7f:7a:65:33:38:a5:c4:98:7a:02:d1:88:
09:cf:c1:2d:1f:fc:15:86:e4:6f:6d:02:9d:15:5e:
ba:8f:7e:e7:a1:a5:90:22:e0:f0:5a:84:d2:26:14:
fd:3f:a3:16:6a:07:83:6d:8e:69:e8:c4:2a:fa:27:
aa:f0:ff:16:99:86:b6:cf:d7:39:91:5d:cd:21:77:
0d:07:ab:12:4e:cb:be:5f:c9:28:a6:6e:1e:e9:6f:
2e:82:3a:61:55:9c:43:16:cd:12:86:0b:b3:d8:dd:
fa:90:52:a6:bf:fa:63:5e:74:3a:4b:d7:74:27:0d:
87:8f:be:5a:a1:fe:e9:6e:e9:85:2a:92:35:c8:5f:
50:f8:2c:b6:35:63:f7:27:61:6e:9e:62:b2:aa:9e:
e1:28:19:2f:8e:1d:00:1c:06:7a:3a:ee:8a:53:40:
de:be:7c:86:25:5f:73:d9:d2:b3:a6:e7:8b:56:6d:
f2:69:36:83:85:49:b2:63:27:0d:2c:3e:2d:7a:52:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A4:90:55:36:66:D9:FE:1E:6D:CE:F5:1C:89:21:AE:9A:AA:B2:E9
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.191.140.0/24
Signature Algorithm: sha256WithRSAEncryption
10:cd:1f:e4:b9:6a:a6:03:e1:02:a8:df:28:21:ee:bb:d3:5c:
f7:6a:c4:02:ed:e1:e2:27:d5:58:b9:10:67:b3:3e:84:f6:fa:
d5:c9:94:60:9b:6a:5d:15:c4:af:0f:1c:42:4d:67:45:2c:04:
72:3b:70:94:d1:51:e0:a5:6f:18:ad:e9:76:4d:82:09:a2:3a:
5e:22:f7:ce:e9:73:0e:23:c7:49:d2:88:5a:4c:9a:91:48:f7:
1a:a0:1b:d0:16:88:4f:80:7b:3d:da:b1:fd:5e:53:46:93:44:
79:36:16:20:a4:8d:6b:81:e8:eb:8d:d1:69:57:2b:23:02:c8:
5f:19:74:ce:27:be:55:a3:2d:54:fd:b0:73:ff:2e:8a:a9:95:
d0:eb:aa:84:ea:e9:d4:c8:73:91:13:9f:3a:50:b1:9d:42:76:
d0:48:7e:e0:e8:7c:4f:fa:30:fd:39:ef:36:92:e7:65:07:74:
18:0e:27:e7:a3:1d:fd:44:d6:d5:4f:1a:ea:be:42:91:94:de:
35:c1:a4:b3:1a:27:c6:59:00:e4:1e:08:4e:cc:92:c2:54:e5:
3e:98:31:94:aa:5f:6f:c1:f1:40:19:07:99:c6:8e:bb:d7:bc:
f2:25:8c:6e:9a:80:32:66:20:e3:32:01:94:47:d5:38:c0:be:
25:43:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:36:35 2025 by rpki-client