Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa
File: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (raw, json)
Hash identifier: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=
Subject key identifier: 66:30:75:1B:5F:43:0F:1F:FA:43:9A:12:70:B1:B9:8C:C6:82:F1:70
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 0194228D097A7300C163F4F9FA4205CD6FA2
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa
Signing time: Wed 01 Jan 2025 15:47:35 +0000
ROA not before: Wed 01 Jan 2025 15:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48722
IP address blocks: 185.140.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:09:7a:73:00:c1:63:f4:f9:fa:42:05:cd:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jan 1 15:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6630751b5f430f1ffa439a1270b1b98cc682f170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:38:7f:4b:71:4f:46:19:d2:84:87:3f:4b:
98:67:af:d6:98:f2:e8:fc:cd:d3:c1:ec:7c:97:87:
fb:61:32:35:76:9a:ba:00:92:51:ba:d5:6a:ce:18:
fc:ca:d7:51:72:34:32:c8:9c:f1:20:3f:ef:49:9a:
c0:d8:92:8f:d5:55:d5:e9:3d:aa:bd:a2:1b:dc:dd:
49:06:f0:2f:8e:2a:de:da:fb:0e:2c:03:bd:35:4c:
29:25:42:eb:a1:26:3d:0d:06:69:d9:8c:c7:63:a2:
02:f2:09:2a:ab:61:cc:d5:fb:d4:88:99:f4:6f:c8:
32:89:90:ae:49:56:d2:e5:40:68:f3:a0:72:60:ee:
86:dd:2f:08:90:0e:6f:37:42:97:65:38:15:82:77:
5e:f0:0b:4f:fd:6d:8b:6d:d2:98:14:ff:81:5c:5f:
0f:55:ae:d5:fc:bc:d0:e0:23:4d:cc:cc:a8:5e:b7:
0a:95:1a:8a:27:ef:de:71:0e:99:d3:b0:ba:bd:b2:
e7:2a:79:c1:01:0f:f9:d7:12:3c:3a:d8:f2:a9:bf:
f2:18:78:78:d7:79:45:1e:b9:90:f8:85:77:86:24:
8c:e0:54:8c:0d:14:a7:4e:04:90:af:ad:d3:ed:7d:
74:0b:89:01:ac:92:4a:7a:05:62:7f:60:1f:37:4e:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:75:1B:5F:43:0F:1F:FA:43:9A:12:70:B1:B9:8C:C6:82:F1:70
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.132.0/23
Signature Algorithm: sha256WithRSAEncryption
15:38:0e:0e:60:29:a6:1a:46:d1:c6:71:4f:d2:66:1f:d1:41:
54:6a:9c:fe:18:fb:e3:c0:97:fc:1c:7e:40:32:83:59:7f:09:
fd:14:a8:36:a2:5b:e0:e0:5f:52:23:94:a8:37:8f:ae:a0:38:
ec:bb:de:2a:c4:fb:70:d9:2b:99:15:e5:11:11:eb:d7:41:44:
0c:f0:c3:fd:c5:6e:5a:19:f6:f4:e7:28:f7:ae:ad:1a:59:84:
10:55:28:46:95:47:8b:c1:e1:89:c4:d8:78:e1:b0:bd:5c:43:
ce:cc:26:db:36:0d:f0:a6:c7:c9:69:63:93:3f:75:5b:c6:33:
76:e4:84:14:d4:91:a1:20:52:63:ce:3b:ef:28:cd:6b:13:50:
ca:9e:0b:9b:24:c0:80:c8:ba:5d:a5:b2:14:c8:8c:56:ca:f7:
ed:af:f7:7d:2e:70:af:10:4f:b3:54:12:eb:64:98:b8:0e:95:
a5:15:fa:72:50:33:02:a6:21:bb:81:1d:4e:55:05:8e:98:64:
ee:3f:b1:ec:f3:c5:45:c8:1a:fe:21:cc:55:dc:ee:07:9c:dc:
0c:c1:7b:8d:fb:0c:a4:f8:15:05:f7:92:54:a5:9f:69:60:f1:
19:64:35:e5:a4:30:b5:d5:61:2e:e0:8f:47:c1:25:b0:05:21:
19:a3:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:39 2025 by rpki-client