Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/zn28wDGOw3qBz9OqZJzgWf1QCv0.roa
File: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (raw, json)
Hash identifier: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=
Subject key identifier: CE:7D:BC:C0:31:8E:C3:7A:81:CF:D3:AA:64:9C:E0:59:FD:50:0A:FD
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0194228D138FD1E49D786585EA736148F8C2
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/zn28wDGOw3qBz9OqZJzgWf1QCv0.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207574
IP address blocks: 31.24.249.0/24 maxlen: 32
2a12:4946:46::/48 maxlen: 48
2a12:4946:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:13:8f:d1:e4:9d:78:65:85:ea:73:61:48:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce7dbcc0318ec37a81cfd3aa649ce059fd500afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:30:22:bc:b3:b7:25:5a:64:f6:28:90:36:
5d:78:44:e8:39:e6:a5:61:c4:7a:c8:50:29:63:e9:
f4:e9:28:2a:88:7c:2d:92:49:37:c0:12:3e:77:d7:
d4:15:86:1e:56:c7:7f:38:50:a6:4b:d2:44:0a:1a:
16:22:70:80:5c:44:a8:36:82:f9:b3:f3:21:62:38:
9d:f1:d5:be:3a:d1:0e:6a:3d:1c:c2:34:d5:79:92:
bd:d2:70:8e:0c:e9:26:53:11:1b:79:0e:33:7b:82:
cb:47:8d:13:ec:51:a9:87:43:4e:5e:01:f7:65:53:
4c:17:11:5c:21:51:f6:3f:06:fe:07:65:0f:64:a7:
69:17:83:e2:f5:df:cc:7b:c9:c2:05:0b:24:dc:1a:
32:88:cb:5d:98:87:e6:81:e8:31:dc:d1:04:9b:f0:
80:4d:7b:d9:97:d9:c3:d0:0a:02:b0:d2:50:8e:e8:
9d:82:4c:f8:1d:85:f8:42:f2:af:90:48:0d:a3:e9:
29:db:da:11:2a:e0:ac:7c:a5:b4:0c:70:66:9a:df:
84:af:b8:b3:c3:31:71:d4:31:f9:d9:b6:15:28:92:
c1:cb:9f:9a:b5:91:bc:c9:1d:1e:e2:ae:10:0a:bc:
64:62:7b:88:01:25:30:5f:19:df:95:56:9e:2c:05:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7D:BC:C0:31:8E:C3:7A:81:CF:D3:AA:64:9C:E0:59:FD:50:0A:FD
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/zn28wDGOw3qBz9OqZJzgWf1QCv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.249.0/24
IPv6:
2a12:4946:46::/48
2a12:4946:3000::/48
Signature Algorithm: sha256WithRSAEncryption
66:f9:68:56:d0:8d:99:8f:f6:96:c9:e6:db:5b:87:31:67:8b:
0a:33:99:fd:75:6a:3c:09:40:d2:55:3d:45:f2:37:f4:48:f7:
03:d1:37:f0:82:2e:be:6e:53:75:94:55:b8:74:9f:b3:72:f0:
9c:36:6a:47:40:43:a8:0c:59:98:eb:09:f4:31:35:4a:97:a6:
87:44:d2:21:a2:e4:40:86:42:e7:a8:d2:b9:16:52:f0:b6:18:
c0:8b:22:da:13:0e:ed:56:40:c3:f4:8f:25:6c:20:24:44:53:
07:b1:23:5d:b4:8d:43:8e:e5:68:ab:2d:34:82:6e:fd:c0:0c:
3a:9b:1c:4d:e7:24:78:75:7a:af:f1:2f:89:60:14:ea:5b:e8:
00:30:72:cb:8e:a3:7a:7a:99:4d:e5:78:15:8c:02:76:64:3b:
5f:78:93:8e:95:a6:91:a6:02:84:bf:ec:be:6d:37:ac:98:85:
60:e0:f1:2e:39:c9:42:ab:9a:fb:4e:b8:af:4c:9b:e9:43:1a:
26:f3:18:0b:69:d9:16:8d:fd:d7:4c:7e:da:97:9b:42:b2:7b:
97:ae:d6:c9:24:61:fd:71:2c:aa:a1:eb:0b:57:fd:3e:ed:85:
df:1b:52:ab:79:33:4c:65:ee:62:50:67:84:28:f6:bc:2a:04:
b8:51:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:42 2025 by rpki-client