Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa
File: Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa (raw, json)
Hash identifier: feCFBc/epRQ4sJNHhJEBA2Ljs4/rpvwE/wZpPd9yp04=
Subject key identifier: 67:F8:53:AE:DB:1B:41:2A:4A:AC:C1:8C:39:6E:BF:D0:9F:19:A5:D0
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0194282368E767C1096DEC6943F3B389A4DA
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44989
IP address blocks: 212.163.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:68:e7:67:c1:09:6d:ec:69:43:f3:b3:89:a4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f853aedb1b412a4aacc18c396ebfd09f19a5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:0a:c1:5e:ad:71:e8:ae:e3:83:db:b1:2d:
9a:b4:c2:3c:89:36:d7:7d:cc:b4:48:bf:88:9c:18:
8a:87:38:55:6b:ca:be:65:61:03:ce:47:98:ac:43:
42:88:f2:f0:27:17:ae:73:3a:c2:0b:3b:21:c0:00:
af:ff:1e:a6:f0:a0:15:08:d4:54:ef:88:8f:39:12:
41:6f:f1:c2:66:a9:f0:a7:05:af:db:91:12:c4:1d:
3d:6a:3e:02:83:c9:9c:92:53:17:1e:7e:77:d1:b1:
b8:72:ef:43:16:29:64:ef:c5:2d:5e:52:cf:2e:98:
65:78:7c:33:8d:91:5a:82:4f:22:76:6b:b1:b4:b2:
81:58:f9:4f:6d:8d:97:77:5e:57:c2:d5:19:61:92:
a1:6a:a2:8c:ad:87:be:60:c2:2b:d0:9e:4b:1d:46:
87:b0:8b:7a:16:6b:e8:8b:b5:72:9a:fc:52:41:a6:
be:44:df:4a:9a:c5:63:33:02:05:fd:b5:bf:c5:45:
2b:43:35:79:05:1b:18:51:2b:95:ac:0d:95:dd:78:
a2:75:21:28:d7:12:0b:18:6a:75:a7:c1:10:68:da:
ac:64:10:49:f7:24:ed:5b:37:d7:82:f5:cf:8c:b3:
3b:5d:b1:4f:60:53:c2:0e:7b:82:e1:e6:d6:2a:96:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:53:AE:DB:1B:41:2A:4A:AC:C1:8C:39:6E:BF:D0:9F:19:A5:D0
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.163.144.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:26:be:b7:da:dc:ed:fd:b6:aa:c3:43:35:06:42:d8:79:14:
90:06:c2:03:e9:db:bb:60:86:c0:92:17:a1:f2:1c:d3:ac:34:
37:b4:8c:e3:67:3f:87:d5:8e:5b:a7:4b:e4:12:9f:87:96:10:
ee:ec:3e:35:e4:2b:13:a6:36:d4:f0:50:07:e6:f0:ac:89:b9:
94:d9:b9:c9:50:2a:cb:05:46:04:07:b6:78:b8:62:7b:23:50:
06:80:a2:ff:2d:07:be:31:9f:02:99:2e:51:9c:b3:c7:ae:3d:
07:00:39:7f:72:ae:87:d8:10:b4:a0:01:a3:94:48:d1:74:92:
13:b9:43:42:c9:49:2e:c6:12:31:d9:b8:37:9b:d9:58:fe:be:
6c:05:65:68:db:de:c8:95:f0:aa:8a:93:fc:4f:b4:e9:07:3c:
1e:98:7b:fb:16:ab:22:cb:33:d0:ac:57:1b:73:3b:6d:aa:38:
43:f8:cf:8a:a9:fa:91:9a:bc:0e:fd:e3:ab:8a:a1:67:ac:79:
a9:50:79:e8:17:3c:ed:50:07:76:f6:1a:19:88:44:50:0c:4d:
8d:51:be:73:2b:31:92:2a:35:5d:27:46:b0:ab:65:ab:9a:21:
17:64:61:dd:51:70:8b:e8:3a:de:d8:aa:58:da:7f:76:fe:af:
13:25:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:54 2025 by rpki-client