Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/ZObyvsAzhsjT703W96HfcivH5Zg.roa
File: ZObyvsAzhsjT703W96HfcivH5Zg.roa (raw, json)
Hash identifier: WXGaHy6oTKKfybN+lNKV7S10VAPqe8014otEct9fqTo=
Subject key identifier: 64:E6:F2:BE:C0:33:86:C8:D3:EF:4D:D6:F7:A1:DF:72:2B:C7:E5:98
Certificate issuer: /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial: 019425FD41AF42FACEC0281A07074FB18C52
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/ZObyvsAzhsjT703W96HfcivH5Zg.roa
Signing time: Thu 02 Jan 2025 07:49:01 +0000
ROA not before: Thu 02 Jan 2025 07:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210753
IP address blocks: 193.3.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:41:af:42:fa:ce:c0:28:1a:07:07:4f:b1:8c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Validity
Not Before: Jan 2 07:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64e6f2bec03386c8d3ef4dd6f7a1df722bc7e598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:3b:99:0b:e5:e6:f1:fa:cf:e9:bc:3d:27:
4d:4f:85:44:ea:15:0b:02:55:f3:31:f3:4d:27:e1:
22:64:35:de:3b:cc:44:e1:c5:f7:43:fa:75:1d:41:
d4:ed:5f:e7:ed:b1:4a:af:33:58:84:c1:91:6f:fa:
57:20:e1:9a:7e:3c:68:45:d9:6e:1e:d6:c6:ce:cb:
f5:57:f2:9e:13:8d:71:ed:74:0d:d8:63:8b:01:a2:
8d:67:00:65:c9:ab:d4:57:d3:e3:76:ae:88:ea:42:
34:48:2b:a4:61:5d:00:d4:2d:3c:a1:d8:e8:77:68:
b6:51:aa:eb:b9:19:0e:ad:7e:4a:66:e5:22:bc:f1:
2b:2c:14:18:b3:be:c6:4b:6b:14:09:e0:7e:ea:a4:
9f:ff:04:bb:cf:11:8a:01:de:7a:e0:33:8c:09:63:
22:d1:3b:bf:b6:ac:0d:8a:ed:09:7f:60:29:43:e8:
00:89:05:bc:1d:6d:a1:ea:e0:c8:f4:4e:7d:91:af:
7e:8f:5c:92:ca:5e:1e:ff:cb:08:bd:c5:22:36:cc:
77:e4:0e:c3:10:69:05:97:ab:5c:71:f8:59:05:8c:
bd:e8:c1:da:47:ba:19:bb:3b:28:01:6a:98:eb:73:
2b:ad:8c:38:88:c0:6d:91:06:fe:ab:b4:be:ca:d7:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:F2:BE:C0:33:86:C8:D3:EF:4D:D6:F7:A1:DF:72:2B:C7:E5:98
X509v3 Authority Key Identifier:
keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/ZObyvsAzhsjT703W96HfcivH5Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:82:ae:b4:ac:f7:f4:2d:a6:ae:38:18:5e:72:da:b9:63:55:
8d:f7:e9:ff:5f:77:0d:01:82:d0:ce:9e:b9:74:2d:e8:90:d7:
d9:4c:20:46:9b:56:ea:a5:92:a8:3f:0f:55:0a:2f:13:04:ca:
ad:0b:a0:e4:c3:6c:4b:b0:3d:05:3f:be:00:14:79:a2:39:4f:
95:7e:cd:27:0b:b0:6e:98:65:66:1d:6b:c4:0d:c6:d5:82:8f:
26:85:94:a5:d4:1b:cc:f5:c2:90:de:e8:e1:0f:58:2c:99:c5:
4a:8e:44:96:dd:e1:55:1e:ad:ff:6b:85:44:08:a4:88:5a:04:
a0:b2:56:be:a8:13:71:e9:87:3c:89:2f:a8:91:0d:10:e1:7a:
df:ea:47:3c:0e:33:dc:35:09:a8:ed:bb:45:7f:c0:31:c3:60:
41:7e:ba:f3:fb:b6:4b:91:91:12:07:22:61:2f:8e:b1:cb:f1:
c3:60:bc:66:92:de:bd:95:c6:6d:9f:5e:75:96:6a:12:f8:a9:
72:25:ad:9d:e0:3c:ee:85:b2:68:7e:36:c8:ec:fd:7a:07:52:
3f:95:a7:e1:aa:19:62:34:0f:88:43:8a:12:a7:16:26:91:3b:
cd:cb:88:b9:34:38:92:12:75:af:a5:fa:fe:f3:07:4d:de:dd:
df:4b:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:42 2025 by rpki-client