Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/z14kTSlHc0FGtPp_p4eZCWL53uI.roa
File: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (raw, json)
Hash identifier: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=
Subject key identifier: CF:5E:24:4D:29:47:73:41:46:B4:FA:7F:A7:87:99:09:62:F9:DE:E2
Certificate issuer: /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial: 019424B3C41381362F22FDDEBCA77522EB30
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/z14kTSlHc0FGtPp_p4eZCWL53uI.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212098
IP address blocks: 185.223.163.0/24 maxlen: 24
2a10:8c80::/32 maxlen: 32
2a10:8c81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c4:13:81:36:2f:22:fd:de:bc:a7:75:22:eb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf5e244d2947734146b4fa7fa787990962f9dee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:cb:c6:ad:ae:8c:4a:40:0f:56:2e:fe:17:
8f:73:7b:8d:35:07:8a:e4:b2:e4:ed:31:90:28:ac:
c5:6d:d0:b4:1c:8a:05:e2:b1:9b:d0:ed:36:27:16:
9c:68:bf:6e:0a:6c:99:39:5c:e7:b5:ee:13:ee:fb:
66:b1:ac:85:f4:6a:e8:59:be:b9:13:d2:67:6c:ec:
26:2d:14:54:9c:cb:75:04:13:45:bf:f3:de:60:28:
cc:2e:43:77:1a:6b:a1:e5:0e:a5:b3:58:a8:0b:93:
6c:ee:07:d9:71:4d:e9:e1:9b:50:1d:45:e9:4d:14:
0e:54:67:13:37:54:c9:1e:a5:28:3c:15:8c:77:5f:
64:aa:12:3b:38:ee:11:bd:95:5c:53:66:8c:a9:21:
9c:1e:89:9f:90:47:b0:d1:4b:dd:11:5a:78:89:b3:
71:b6:d9:4b:27:13:a0:95:f9:bc:ba:cb:70:fa:cd:
eb:7d:8a:26:aa:20:08:d5:a0:a8:da:10:c2:c8:c7:
09:8b:c9:bf:f1:75:cd:02:48:e6:37:32:a2:43:35:
c8:76:35:5a:e0:9b:aa:70:20:1a:91:3b:aa:d2:5b:
3e:89:7a:13:ab:0c:a9:81:8a:84:c4:10:48:68:e9:
28:d0:8f:3f:0c:32:b8:0a:25:f0:0b:65:ca:8f:cd:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5E:24:4D:29:47:73:41:46:B4:FA:7F:A7:87:99:09:62:F9:DE:E2
X509v3 Authority Key Identifier:
keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/z14kTSlHc0FGtPp_p4eZCWL53uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.163.0/24
IPv6:
2a10:8c80::/31
Signature Algorithm: sha256WithRSAEncryption
92:c4:9c:fb:09:9c:8c:48:ae:03:08:29:90:9a:d4:4a:fb:58:
58:d3:96:71:7c:43:77:81:5b:68:a6:99:31:a4:87:80:26:f4:
c3:d4:44:e0:6f:7f:72:c1:36:cf:a0:6d:5c:db:3c:b8:41:9a:
c8:b6:95:80:05:95:9a:93:18:52:c0:b5:da:09:4d:d9:76:5a:
ee:b3:4a:ba:40:cd:57:77:f7:61:a8:2f:76:2d:97:60:c2:13:
80:2c:a5:22:2a:26:77:7f:51:53:6f:a3:65:57:42:78:48:af:
23:c0:94:86:e1:24:a4:c6:80:b1:f2:32:16:b9:b5:e8:20:f1:
a9:53:aa:17:a7:31:75:bb:d2:f3:61:df:f7:a1:5a:33:ca:ab:
00:ad:9e:b0:ee:e7:b0:30:61:4c:2b:1b:c8:7d:2f:8c:53:f4:
7f:dc:56:13:bd:7e:d5:4d:48:b3:0a:b8:96:b6:3c:98:98:c2:
b4:f0:a0:88:d0:40:9e:f6:e1:df:6d:8d:1c:99:ce:c6:2a:61:
aa:51:72:8a:73:7f:e9:6d:1a:82:c5:8c:23:c4:cb:c2:71:7d:
cf:08:99:45:7e:8b:b0:e1:5d:11:ff:98:be:28:4f:e8:f2:31:
42:d2:b7:ef:fe:91:e8:2c:ef:dd:81:69:ae:aa:62:b8:e3:fe:
84:40:53:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:01 2025 by rpki-client