Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZKc8oCmzfY8rVows48ndD-mgspM.roa
File: ZKc8oCmzfY8rVows48ndD-mgspM.roa (raw, json)
Hash identifier: 4cCW+HoqWJJ6hcUEZZx9eJnxR+Vi7yLWlNaeliv8d5g=
Subject key identifier: 64:A7:3C:A0:29:B3:7D:8F:2B:56:8C:2C:E3:C9:DD:0F:E9:A0:B2:93
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194282764EBE41F0645471657E91B3CD446
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZKc8oCmzfY8rVows48ndD-mgspM.roa
Signing time: Thu 02 Jan 2025 17:54:17 +0000
ROA not before: Thu 02 Jan 2025 17:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201949
IP address blocks: 86.107.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:64:eb:e4:1f:06:45:47:16:57:e9:1b:3c:d4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64a73ca029b37d8f2b568c2ce3c9dd0fe9a0b293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:8f:e3:88:95:9d:a0:42:1a:de:2a:6c:ec:
b0:ca:08:22:b2:b6:f0:03:b8:ae:e8:2b:1b:11:04:
b4:55:1c:64:25:f5:ec:0a:12:f4:9d:28:10:73:fd:
66:c0:3d:33:4b:04:35:69:d1:79:9d:6e:14:0e:4c:
57:3c:ac:85:7e:7f:e7:8c:a8:69:df:36:eb:36:5c:
a2:e7:a6:bc:21:bd:0b:f6:7f:37:44:4e:f5:96:0b:
7d:9d:26:1b:84:56:b0:f8:5a:26:22:d8:0b:02:09:
b4:41:c2:f4:e3:5d:e4:fa:34:19:6c:a8:ac:ad:72:
a7:36:90:10:92:a3:4e:ac:34:dd:7d:30:5b:db:72:
59:41:4d:5c:34:b8:88:25:62:61:16:08:cc:48:0b:
4f:ca:46:09:41:6f:a0:bc:5d:81:26:d2:91:5a:2b:
06:4a:84:6b:4c:16:b2:d2:b1:4d:54:85:93:aa:77:
2a:c9:8e:db:63:92:87:c4:ad:4e:0d:50:de:7e:dd:
d6:ed:d6:83:a6:57:f4:51:ca:ce:b1:0d:29:40:bf:
3f:30:b4:94:b7:6c:20:0f:73:2a:e6:d1:42:d5:db:
b1:c2:71:2c:2b:d4:fe:d4:05:32:c5:46:34:4e:16:
81:d7:da:d7:6d:de:f6:bd:a0:ef:a8:b0:cf:04:51:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A7:3C:A0:29:B3:7D:8F:2B:56:8C:2C:E3:C9:DD:0F:E9:A0:B2:93
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZKc8oCmzfY8rVows48ndD-mgspM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.50.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f4:13:f6:e0:db:b5:3f:95:19:e5:42:fe:eb:b9:9e:6e:52:
b1:75:a4:fd:e5:e4:49:c9:d4:df:91:68:de:bd:1d:86:32:f7:
46:eb:3d:ef:9c:a8:9a:b1:30:7a:fd:d3:c8:fa:f8:c2:69:da:
26:81:ce:f7:a2:92:32:af:b2:d9:68:26:fe:e9:65:4c:13:66:
ab:3d:5a:c7:91:8c:be:42:87:4e:51:0f:92:0d:99:c7:0f:dc:
e6:e4:e7:52:17:37:c6:8c:4e:23:08:09:cc:d5:49:6e:ea:8a:
05:c3:07:e8:80:bd:a5:ba:24:aa:0c:c1:aa:2d:52:d3:1c:88:
3d:b3:40:94:cb:ff:7d:04:3c:21:f7:af:02:64:d2:6b:85:df:
3d:d7:37:30:e7:b7:2f:2d:16:53:6d:ff:6c:08:4b:81:e6:62:
5e:7b:b3:e4:61:dd:39:9e:81:99:03:49:e2:d0:12:a4:df:86:
76:eb:3d:3a:08:6c:b9:1d:41:24:20:88:ad:db:17:35:96:d2:
81:15:8a:23:3c:7d:fa:6b:57:30:e1:52:48:56:a0:1f:96:cb:
e2:8d:6c:c6:0d:a5:92:a7:46:69:5d:ae:fa:a4:78:b2:01:5f:
1a:f4:1b:03:9d:89:f7:55:91:53:2f:07:e9:8d:dc:2c:c0:bc:
26:12:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:40:28 2025 by rpki-client