Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa
File: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (raw, json)
Hash identifier: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=
Subject key identifier: 64:3C:0F:A3:87:84:AE:81:EF:5B:44:3E:70:DB:CE:FA:91:A0:77:CD
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019421B1B1C9EAE65627A157A1E5320D9C36
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 185.221.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b1:c9:ea:e6:56:27:a1:57:a1:e5:32:0d:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=643c0fa38784ae81ef5b443e70dbcefa91a077cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:14:c5:46:06:db:d9:b2:ac:de:cb:76:cf:
ba:97:af:38:db:69:07:86:82:4a:8a:c2:c0:cf:07:
4b:53:79:8e:66:2d:c4:43:07:11:53:d7:d2:10:ed:
5b:f0:ea:69:e9:ed:d3:0b:e5:b8:da:c8:46:15:fb:
b0:37:f1:bb:b2:b2:ce:c1:16:67:8e:41:55:9f:fb:
51:6e:38:31:a0:ba:19:74:e5:13:6a:6c:32:e1:a1:
20:3d:4f:a0:69:75:cb:df:cc:52:e8:8e:34:37:51:
f5:b0:53:ca:2a:a6:7a:4c:73:2a:22:e4:a0:a0:17:
c3:ef:60:23:30:b3:9e:37:99:ec:15:51:d7:7e:a0:
bc:10:58:12:f9:74:8d:36:aa:29:ea:4f:2c:25:9b:
bd:5c:a7:92:fd:43:34:af:dc:f1:ec:9e:07:e2:4f:
6a:2c:35:e3:e3:e2:18:4c:cf:08:34:53:bc:31:ab:
65:be:fb:03:6b:a2:bb:e5:58:a3:57:81:41:af:ef:
bd:0e:a4:86:2c:31:77:7b:56:d2:2c:9c:fa:2e:9a:
90:52:38:e6:a4:2c:77:1c:b8:62:fa:b1:60:da:98:
e1:1f:5f:1d:5e:41:cb:0b:5e:9f:f5:2a:ae:dc:15:
36:59:a2:0b:d9:d7:0a:a0:39:1d:9a:1f:26:4b:47:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:0F:A3:87:84:AE:81:EF:5B:44:3E:70:DB:CE:FA:91:A0:77:CD
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.197.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f7:ae:89:c1:ac:1b:42:c7:20:4d:9a:a9:af:ca:d3:16:61:
8a:9e:76:c1:6b:44:d7:98:13:86:d4:80:e3:f3:54:cb:5e:38:
ab:e2:0b:c3:61:1a:f9:ad:66:6d:95:65:06:bc:49:c3:3c:fa:
7c:68:13:6a:a8:fa:8d:03:0f:3d:68:2c:6e:c2:7d:7f:9b:44:
84:2c:84:2a:c1:5c:4c:53:8a:4e:61:a7:b5:3f:7e:57:1c:5f:
05:d3:ce:31:95:13:37:d0:96:de:01:57:ab:7f:fc:61:df:e4:
7c:93:53:8c:dc:6c:17:20:2c:f8:97:a6:c9:db:d2:4a:d4:a3:
c3:76:9d:66:e2:3d:dd:10:22:64:ac:dd:a7:d7:0e:60:09:93:
be:d4:07:4f:4c:93:ae:31:a5:2f:b8:32:23:2b:ed:32:fd:e5:
29:59:7f:bc:7b:69:2f:68:56:f9:7f:ec:7f:55:b6:ee:fe:30:
35:ac:05:10:e4:e2:de:03:0a:42:51:55:61:8c:4a:e4:b2:c0:
80:1f:b0:a9:34:d7:23:a1:ea:81:84:33:11:68:e8:ba:ea:1c:
aa:48:b5:d4:7f:67:32:97:4b:56:85:0b:15:34:46:18:13:37:
f8:99:5a:95:c3:8c:d4:30:0c:fc:1f:96:49:cf:69:bf:44:58:
0c:11:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:31 2025 by rpki-client