Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZhWODResPt0ndCCasUi1435mIfI.roa
File: ZhWODResPt0ndCCasUi1435mIfI.roa (raw, json)
Hash identifier: 3Ja7/hhMNgRxpOkNQp5/IJkbNv32I71yQAX2taBAwpk=
Subject key identifier: 66:15:8E:0D:17:AC:3E:DD:27:74:20:9A:B1:48:B5:E3:7E:66:21:F2
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B227544028F52B0C809B6A62AB2B56
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZhWODResPt0ndCCasUi1435mIfI.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197704
IP address blocks: 82.177.112.0/23 maxlen: 23
194.183.54.0/23 maxlen: 24
195.136.18.0/23 maxlen: 23
195.136.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:27:54:40:28:f5:2b:0c:80:9b:6a:62:ab:2b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66158e0d17ac3edd2774209ab148b5e37e6621f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6f:08:71:42:10:0c:e2:f7:75:23:a0:94:a8:
c1:51:cf:12:b8:03:11:ef:8a:1b:4c:50:b9:bd:83:
41:5c:8a:ed:11:2f:2a:4c:f5:ce:8c:35:2e:5c:a5:
1e:c1:77:2f:86:08:ce:16:82:60:e5:e9:d0:64:4b:
99:b4:bc:66:f6:78:a8:c1:51:b8:e5:84:87:3f:46:
5a:05:08:16:2e:15:be:e9:27:c5:b0:7a:77:7b:54:
f8:92:a9:cb:09:cf:e2:be:01:f4:87:a1:54:7b:ab:
ea:96:cd:9c:1f:83:58:de:75:5f:3a:5e:51:ed:25:
92:1c:ed:30:fa:cc:a6:56:7e:6b:4f:5b:bb:79:dc:
54:5c:1a:95:e3:a8:3e:1a:5d:a1:79:11:c3:ff:1e:
36:33:89:11:96:bf:78:f7:d0:58:d3:f4:06:38:c1:
2c:7e:47:d4:5a:55:29:ab:34:2e:d0:a0:cc:35:ca:
1f:da:d8:76:9a:09:44:48:0c:fd:54:71:cf:2d:c4:
ef:74:57:75:d3:b7:4f:3b:ca:03:8f:14:53:71:86:
c3:81:60:2e:b4:ab:cb:81:91:c1:85:07:75:8c:ab:
75:99:a1:65:92:5c:cf:8f:b2:95:eb:33:84:f1:45:
36:73:bf:d2:c1:12:0f:03:e2:4d:a6:a3:70:bf:75:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:8E:0D:17:AC:3E:DD:27:74:20:9A:B1:48:B5:E3:7E:66:21:F2
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZhWODResPt0ndCCasUi1435mIfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.112.0/23
194.183.54.0/23
195.136.18.0/23
195.136.194.0/23
Signature Algorithm: sha256WithRSAEncryption
31:a6:0d:d0:a5:a8:c9:07:d4:ac:ce:5b:0c:a6:df:ad:fb:d5:
ad:dc:df:00:59:92:77:9e:49:c7:00:56:0f:35:ca:81:b5:40:
ea:60:f1:38:aa:b2:de:90:bc:5a:aa:e4:fb:d3:41:41:8f:f7:
a9:51:ed:14:25:2f:b0:17:3c:fd:0e:55:40:75:3a:ff:ff:34:
67:3d:d0:df:8f:f9:68:b0:27:12:24:b9:d8:fa:ea:79:3f:29:
ad:c8:48:5d:e8:73:f2:ed:ce:7e:0b:d7:65:16:8b:6e:9c:31:
44:c5:b8:dc:d8:25:8d:a5:84:32:f6:a2:37:4f:95:56:24:ab:
6f:0c:3e:71:1e:2c:22:61:34:dd:4c:0f:67:08:05:27:e0:9a:
5c:79:71:8a:73:65:58:8c:d3:76:ae:10:46:f4:f7:31:d0:2c:
0d:f9:10:ad:14:be:c2:45:f7:59:19:a3:30:29:dd:a1:51:7c:
77:44:c6:fc:59:ab:81:57:86:a3:f2:67:0c:f6:c7:56:e3:94:
b8:7a:1e:aa:f6:d2:5d:77:86:21:9d:29:86:a7:bd:42:79:3f:
33:bc:1b:86:2b:a9:4f:94:cb:a3:64:ba:fb:f0:37:d0:5e:83:
02:61:11:f2:c1:d0:3e:8c:28:8e:8e:15:53:ad:98:23:f3:d6:
25:f1:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:32 2025 by rpki-client