Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/ZHIJTLjmcUW3hsvKL30OKexctZ0.roa
File: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (raw, json)
Hash identifier: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=
Subject key identifier: 64:72:09:4C:B8:E6:71:45:B7:86:CB:CA:2F:7D:0E:29:EC:5C:B5:9D
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 01942068535DD446BDB7AAE066DDCACD6713
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/ZHIJTLjmcUW3hsvKL30OKexctZ0.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199289
IP address blocks: 185.21.232.0/24 maxlen: 24
185.21.233.0/24 maxlen: 24
185.21.234.0/24 maxlen: 24
185.21.235.0/24 maxlen: 24
2a00:5a20::/32 maxlen: 32
2a00:5a20:1::/48 maxlen: 48
2a00:5a20:2::/48 maxlen: 48
2a00:5a20:3::/48 maxlen: 48
2a00:5a20:4::/48 maxlen: 48
2a00:5a20:5::/48 maxlen: 48
2a00:5a20:6::/48 maxlen: 48
2a00:5a20:7::/48 maxlen: 48
2a00:5a20:8::/48 maxlen: 48
2a00:5a20:9::/48 maxlen: 48
2a00:5a20:3a10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:5d:d4:46:bd:b7:aa:e0:66:dd:ca:cd:67:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6472094cb8e67145b786cbca2f7d0e29ec5cb59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:19:4a:17:44:97:7a:38:6a:52:3c:0c:11:
f6:bf:2d:3f:fe:55:a4:b5:ce:80:8a:23:39:a8:ec:
e4:40:df:e4:40:38:4d:76:4e:de:97:b9:9e:01:43:
42:a1:17:aa:1d:6a:87:de:ac:92:87:39:ef:bf:0a:
4b:59:dc:14:da:73:97:05:66:9f:d0:9d:99:85:49:
2f:13:e6:11:6e:f2:01:ce:2f:4f:f2:cf:5b:15:ef:
b7:5e:6c:54:ff:ef:42:6a:0c:10:ee:3d:79:64:7c:
3a:61:c9:98:47:2f:a4:b6:b9:d9:49:fc:c4:e8:77:
d4:7f:e3:a4:42:be:6f:72:ff:b4:22:18:b8:da:45:
6c:a5:c7:35:0d:82:7e:15:b3:26:07:ba:26:e8:39:
b6:67:a7:c2:f3:f8:08:0f:1a:fe:03:0c:8b:ef:b5:
99:cd:61:81:af:b1:55:0e:ad:f3:f5:d9:2b:28:9a:
bc:87:96:81:8e:b1:4b:2b:7b:0e:06:b8:ce:91:ca:
7a:56:2b:49:cb:91:d8:36:38:62:a4:0f:89:28:80:
48:b0:98:56:d3:f7:c1:28:7d:55:ea:ef:e0:62:d0:
40:97:58:d3:18:a0:fe:aa:c0:f6:46:e6:ef:4c:b8:
de:e4:ac:00:4c:74:a6:36:f8:a4:41:8b:c5:c5:61:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:09:4C:B8:E6:71:45:B7:86:CB:CA:2F:7D:0E:29:EC:5C:B5:9D
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/ZHIJTLjmcUW3hsvKL30OKexctZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.232.0/22
IPv6:
2a00:5a20::/32
Signature Algorithm: sha256WithRSAEncryption
67:ed:ff:1c:39:16:f4:4a:50:36:0e:38:28:af:a3:ee:69:a5:
c0:2e:c5:73:09:9d:33:9f:bd:13:d6:1d:d0:04:84:91:47:0e:
bc:eb:a0:cc:a5:58:6a:50:ef:80:b3:34:62:17:93:ed:09:ff:
12:13:c8:ca:36:32:88:1b:a9:78:48:b1:26:04:4f:54:a5:18:
b3:e2:a7:14:34:88:3b:25:0e:95:ec:08:06:a8:5f:23:c7:ed:
a5:12:a4:fe:4c:72:05:46:7a:f8:e9:93:d5:17:e9:72:90:a9:
9d:5c:cb:bd:db:bc:fd:3f:cd:21:c5:73:d1:fa:e2:23:2b:ce:
ed:a4:60:1f:cf:61:9c:28:2d:3e:4f:b1:4d:26:8b:2a:9b:ca:
67:3d:98:a4:e2:a8:a6:13:63:76:d7:da:79:0a:0d:13:5c:3b:
26:0a:7e:b0:5d:3d:ba:36:25:3f:02:c1:28:57:15:03:88:e0:
62:12:e7:12:d3:d0:ba:d1:78:62:ae:dc:31:65:22:40:49:7a:
5a:6d:fe:e3:dc:b0:30:e5:e9:bb:a6:6c:6d:78:26:51:bb:a5:
d7:bb:1f:c6:a8:32:54:b6:d1:a4:c0:bf:cc:a9:a1:30:1f:7b:
d5:64:62:0c:2e:40:62:18:52:62:6d:6b:81:9a:77:26:d0:b1:
b3:67:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:51 2025 by rpki-client