Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rZD434UNBLpnQHaHunyoGX0qEpM.roa
File: rZD434UNBLpnQHaHunyoGX0qEpM.roa (raw, json)
Hash identifier: IqRRSr4eATOl1afc8HodM9qnQmF+9FD2P8j3FzYRjlI=
Subject key identifier: AD:90:F8:DF:85:0D:04:BA:67:40:76:87:BA:7C:A8:19:7D:2A:12:93
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FBAC9EA2D14ACD1DD6D8BA9DAF515
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rZD434UNBLpnQHaHunyoGX0qEpM.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51121
IP address blocks: 93.170.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ba:c9:ea:2d:14:ac:d1:dd:6d:8b:a9:da:f5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad90f8df850d04ba67407687ba7ca8197d2a1293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:1f:03:09:48:4b:0f:7e:b5:61:6e:40:7e:
5a:b7:7c:fd:02:f5:7b:40:55:6c:ae:b2:98:d0:df:
88:d9:64:cd:d9:ae:0d:83:94:58:6e:b2:a7:03:79:
f5:f5:89:31:df:b7:0e:49:41:f4:d8:b9:de:89:be:
78:76:6e:c2:c4:65:98:93:0b:85:b6:a8:07:eb:cb:
9a:6b:e1:bc:3d:69:23:a4:6d:67:25:7b:ca:04:50:
22:c5:7c:13:d1:a6:72:54:ae:35:6e:95:74:02:60:
0f:22:e6:ca:59:64:47:b0:ad:80:57:7e:11:ed:bc:
c9:cf:0b:01:cf:e8:cb:ba:0c:f3:77:37:fa:59:ad:
ce:ac:03:91:3f:39:42:2a:da:a6:f5:aa:c3:4f:d7:
88:7b:b7:af:9b:35:40:e1:fa:c3:29:17:0c:8b:46:
2c:59:33:b5:90:d8:8e:3b:22:5c:19:2d:f0:c2:70:
40:2c:4c:0f:ab:07:a9:be:70:ca:80:75:7d:c8:7f:
e2:46:a1:65:cc:fe:68:40:ea:33:ca:4e:dd:8a:26:
0e:72:0f:48:3b:05:ac:73:0e:c5:1a:54:fc:47:3d:
2d:5e:19:61:45:1c:96:d6:b3:7c:4a:d5:08:f4:8c:
4b:6b:82:52:4d:ef:fb:3b:e8:7d:33:39:68:59:08:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:F8:DF:85:0D:04:BA:67:40:76:87:BA:7C:A8:19:7D:2A:12:93
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rZD434UNBLpnQHaHunyoGX0qEpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.144.0/20
Signature Algorithm: sha256WithRSAEncryption
82:c3:b8:fa:65:5c:3c:dc:36:3e:c9:21:dc:3d:d1:e9:b9:0a:
ac:ce:6b:fa:52:b3:a7:10:31:8b:10:75:a0:dc:b6:a6:58:9f:
a6:77:65:9c:34:12:60:1f:c3:57:bc:13:ef:ea:61:90:7c:8d:
8d:d5:3e:85:9f:6b:b7:87:13:ce:c0:9e:2c:94:9c:e1:9a:41:
eb:14:96:1c:ae:87:b8:36:79:97:16:dc:ab:41:85:19:6c:96:
aa:77:48:f6:ae:7f:48:37:06:d4:14:45:2a:b8:58:46:35:e0:
c3:be:eb:26:8d:ff:43:a2:5f:5f:2e:38:5d:27:75:be:c0:a0:
27:5c:bf:8c:86:c9:06:d7:7e:37:3e:3f:71:c3:04:47:97:b2:
d8:19:d3:14:b4:48:fb:e1:f9:d6:df:2e:44:20:1b:b1:45:b5:
52:03:32:c6:70:76:f0:bc:3d:79:ae:e8:5c:41:0c:f7:51:f0:
4e:57:04:75:bb:21:1c:16:5a:83:a9:9f:2a:c0:a1:9f:1f:6f:
e0:56:f5:ff:5d:9f:b7:1b:59:81:10:eb:f5:3b:b2:bc:3a:e9:
62:55:65:c4:58:a8:38:fa:f1:9f:ec:fe:34:4a:41:86:b0:c7:
4a:ff:b8:4d:e3:55:48:b1:73:a7:0c:a6:2a:d5:c3:47:e3:ce:
9b:3f:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:42 2025 by rpki-client