Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zGLYCa22p4LTCp6FQIBL3EL0Bno.roa
File: zGLYCa22p4LTCp6FQIBL3EL0Bno.roa (raw, json)
Hash identifier: bd+5SCnA5QmstIfHe8hDF6G+2vajgiVl/1Vi/lb/hvc=
Subject key identifier: CC:62:D8:09:AD:B6:A7:82:D3:0A:9E:85:40:80:4B:DC:42:F4:06:7A
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747CDD4C64BCA8DCB18FABB72C72AE3
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zGLYCa22p4LTCp6FQIBL3EL0Bno.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198150
IP address blocks: 46.8.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cd:d4:c6:4b:ca:8d:cb:18:fa:bb:72:c7:2a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc62d809adb6a782d30a9e8540804bdc42f4067a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:b0:8b:4c:1e:d8:64:01:fc:13:67:03:e2:
93:55:26:cb:5a:f7:6d:83:8b:62:53:37:a6:b2:12:
cb:66:b1:7f:9e:94:06:eb:2e:4e:1c:7a:4d:83:5f:
0f:98:9b:b6:3e:d0:5d:71:e4:7e:43:64:c0:07:ef:
40:4b:15:c5:69:54:24:60:8e:fe:ee:b5:b9:11:34:
50:35:f7:7d:de:2b:30:3a:dc:2c:cc:8c:f6:c5:34:
81:7b:95:1e:af:58:fc:3f:c0:32:2a:1d:9a:f5:13:
d2:c1:4d:d8:44:e5:ec:b1:ce:79:dc:5c:69:92:0a:
2a:f1:c2:8a:6d:19:42:57:cd:2b:65:f3:a8:b0:dd:
8e:3e:2a:4d:e1:9d:ab:40:19:8a:89:0c:4f:74:f2:
ec:2f:c5:11:22:34:ed:bb:f1:e1:9d:d5:50:a0:e9:
41:2d:46:e6:5c:7d:f8:c6:53:86:5b:1d:39:a4:76:
7c:69:94:40:6f:93:66:df:96:13:c9:01:9e:9a:74:
62:82:12:1c:d1:a2:fd:94:46:41:03:73:a8:8d:cd:
96:d9:92:6e:34:55:8b:c2:a9:5c:76:06:b3:af:f2:
31:0a:d3:78:86:8a:78:44:80:ff:69:fa:78:36:1b:
42:6c:4d:45:70:b4:ae:bc:05:8d:53:28:55:3e:e9:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:62:D8:09:AD:B6:A7:82:D3:0A:9E:85:40:80:4B:DC:42:F4:06:7A
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zGLYCa22p4LTCp6FQIBL3EL0Bno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.37.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7f:74:66:32:06:93:5c:fe:b5:d5:82:3e:f6:9f:87:54:b3:
77:9e:39:e3:f9:3c:e1:03:5e:59:6d:a3:ef:ea:16:8c:43:27:
6d:97:56:85:7a:11:5d:d8:d7:8d:95:8c:02:4a:ad:3c:6e:ef:
d6:a5:8e:7f:f6:fd:cf:fc:eb:51:ba:24:5f:6b:b6:41:20:aa:
d1:e8:26:35:9c:6d:e7:b9:d0:68:f9:cc:b6:1b:82:12:2d:e1:
43:39:b6:da:10:71:88:ef:14:d9:03:4c:2a:e6:99:c6:2d:27:
27:3e:28:aa:fe:ad:76:29:b2:ad:2a:62:f3:a6:b3:29:92:92:
f6:e7:9f:71:b1:7e:22:5e:1e:f2:aa:86:32:7f:79:fb:89:35:
ce:f7:38:1b:70:cf:c6:3d:23:33:d6:8c:9b:48:78:f7:cb:80:
78:03:d9:4c:1d:0a:9f:12:57:5c:d7:e2:a1:13:67:8b:44:62:
db:3e:36:0b:f6:06:e8:da:df:ec:0c:83:d7:0d:97:b5:ae:2f:
21:76:53:f7:65:87:44:d6:57:93:3d:ea:de:30:60:e0:c4:ce:
a9:7d:2c:74:9b:0a:90:85:1f:58:2f:e3:26:77:86:06:69:9d:
59:8f:50:f6:cb:08:c6:b7:0f:56:b3:36:c9:97:8b:31:7c:24:
f3:92:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:02 2025 by rpki-client