Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa
File: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (raw, json)
Hash identifier: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=
Subject key identifier: 67:F7:99:AE:AD:29:30:61:2E:0A:86:F3:7F:61:C6:2E:0C:61:BC:73
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 01949DF1073EC5DFF5A2E901B2930832AD35
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa
Signing time: Sat 25 Jan 2025 14:50:06 +0000
ROA not before: Sat 25 Jan 2025 14:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 109.70.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:f1:07:3e:c5:df:f5:a2:e9:01:b2:93:08:32:ad:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jan 25 14:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f799aead2930612e0a86f37f61c62e0c61bc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:79:4c:5d:7d:6d:5e:6c:04:39:16:93:84:
04:d6:2c:ec:4e:78:a7:a9:6a:d7:a4:75:fa:b8:3c:
9a:6c:87:4a:84:d3:28:7d:82:f3:40:69:46:90:4a:
c2:f6:bb:8a:87:b4:fa:d7:3e:a7:b1:74:5d:df:76:
4a:96:90:4e:41:04:bb:57:28:7a:8d:e3:aa:9d:e6:
76:fe:aa:72:98:35:57:a1:84:d0:ed:a5:8c:8f:a7:
dc:c9:bd:c1:e4:2c:77:03:9a:a2:e7:97:e9:27:a4:
2b:ff:89:f9:bb:85:7a:3e:b0:91:37:a0:2b:76:d8:
e1:4f:d9:c9:9a:34:3c:65:53:7c:cf:8f:ea:bf:1a:
12:b8:85:56:ff:71:72:b6:e3:b4:20:b4:2f:ad:66:
6c:eb:9c:d9:2d:24:fa:75:80:5f:0e:4d:81:57:4f:
80:24:22:c4:ca:96:56:99:54:b3:fc:b1:22:21:8d:
7f:00:4c:1b:c3:36:56:a0:85:5c:d4:a0:28:7c:d9:
2f:45:c0:01:36:27:11:07:97:4e:62:24:78:1b:cc:
1f:47:c2:f7:a1:e4:bf:57:c8:2a:29:f3:24:08:de:
a3:b8:fa:e7:9b:b3:a1:71:36:91:35:0c:a4:46:ba:
40:e9:46:b9:14:8c:c1:21:88:33:6d:ff:01:c1:c1:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F7:99:AE:AD:29:30:61:2E:0A:86:F3:7F:61:C6:2E:0C:61:BC:73
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.73.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:04:7f:0f:ba:56:dc:18:b1:85:4c:56:cd:ea:ce:13:1b:2d:
09:ae:02:d1:41:84:03:23:7f:cf:a3:b3:5a:71:07:f4:1b:b9:
b3:e9:b3:7e:c5:af:eb:d8:1f:b2:72:84:56:c5:b8:f6:5f:df:
89:c8:5b:43:64:64:80:9d:53:8e:f0:cb:98:3f:86:a3:ae:c8:
55:28:53:9f:96:4c:62:f1:97:d5:af:d2:a1:71:54:67:92:9a:
65:38:21:8b:5b:b6:26:e2:d1:a0:e2:45:28:70:4a:d2:94:f6:
2e:61:cc:48:0e:22:77:d1:37:9a:71:c5:8e:05:53:29:ee:18:
f3:1b:a4:ec:37:c1:ea:4a:20:c1:b4:9e:29:79:10:11:50:1c:
30:99:9a:47:80:93:d8:91:c5:7a:3c:3c:fd:01:a6:2a:ba:58:
b7:4e:92:36:cc:9b:64:ba:73:99:21:36:dc:c3:a4:3d:2a:31:
18:9d:7e:cc:00:14:0a:20:7b:f0:f6:50:84:be:11:aa:38:ce:
3b:c2:1e:63:65:ce:99:f8:e3:81:91:31:c3:9f:5c:ad:7f:48:
dc:29:7b:df:83:40:52:df:5c:56:cc:56:29:db:95:7b:44:5d:
a9:f6:22:6b:60:8f:42:b8:93:84:6e:3a:95:ee:c9:32:28:69:
b6:21:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:42:24 2025 by rpki-client