Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RzXNOtmaUP9nPuKXSy-NDZwCUis.roa
File: RzXNOtmaUP9nPuKXSy-NDZwCUis.roa (raw, json)
Hash identifier: lsRLZLjePaa5aCRWbKk0v/Dyt/h5ZUduE7MrGHkvD94=
Subject key identifier: 47:35:CD:3A:D9:9A:50:FF:67:3E:E2:97:4B:2F:8D:0D:9C:02:52:2B
Certificate issuer: /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial: 0194258F6E0E4FB9F80330C8E9B611D547AD
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RzXNOtmaUP9nPuKXSy-NDZwCUis.roa
Signing time: Thu 02 Jan 2025 05:49:04 +0000
ROA not before: Thu 02 Jan 2025 05:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62098
IP address blocks: 193.30.167.0/24 maxlen: 24
2a0a:31c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6e:0e:4f:b9:f8:03:30:c8:e9:b6:11:d5:47:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4735cd3ad99a50ff673ee2974b2f8d0d9c02522b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:29:8f:74:37:f4:c1:d4:b2:42:60:f8:3d:
17:35:dc:92:0f:b0:a9:28:4b:b6:42:de:68:2d:0d:
ee:8a:26:0c:f3:d4:0a:fd:8e:98:17:d4:75:f2:66:
e8:0f:45:90:5b:02:49:55:33:b9:94:40:cd:91:36:
d9:a3:f1:f4:bd:de:07:29:0f:b0:27:e8:52:90:0a:
f8:0e:92:b6:59:da:1d:c1:7c:43:9b:af:1a:f4:35:
a3:7b:77:39:f4:be:cb:84:f5:62:cf:2c:63:33:1e:
dd:32:2a:d0:be:a8:3d:0f:dc:0a:69:cb:24:ff:20:
4e:74:9c:f8:c7:3b:6c:52:54:70:80:08:01:0e:27:
0c:cf:8d:26:59:58:bf:6b:f7:a6:5a:82:db:98:99:
d0:07:29:e0:cc:84:d5:94:76:1e:c7:5b:da:ca:7b:
ff:68:6a:5c:fd:0a:26:86:9e:9f:5d:c6:06:26:91:
5c:fa:b6:09:86:91:b7:2e:41:a7:49:64:f9:d4:57:
a5:b5:21:f2:33:c9:99:7f:89:a3:4f:ff:fd:5d:8a:
49:d3:71:93:86:9a:c3:02:38:c0:83:73:8c:e5:31:
95:84:ee:d6:fe:9b:a4:26:9b:23:a3:3a:26:00:76:
de:2c:34:9b:4a:82:69:22:db:7d:72:9b:cf:08:b4:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:CD:3A:D9:9A:50:FF:67:3E:E2:97:4B:2F:8D:0D:9C:02:52:2B
X509v3 Authority Key Identifier:
keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RzXNOtmaUP9nPuKXSy-NDZwCUis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.167.0/24
IPv6:
2a0a:31c0::/29
Signature Algorithm: sha256WithRSAEncryption
59:29:10:63:62:26:ee:9f:43:31:c5:39:5e:f3:23:65:84:c6:
d2:b0:88:fa:2b:ed:5a:33:9c:f0:06:4f:da:38:07:1c:a2:2b:
08:f4:ad:9e:eb:21:6a:b4:d0:fd:b7:d6:ae:1c:22:ba:1a:32:
47:fb:fa:3b:3a:20:a8:2b:ee:57:a1:e7:9b:0c:be:a1:21:c1:
eb:8d:7d:1d:da:17:92:a4:dd:71:39:d2:1d:d3:2f:fb:39:f3:
1d:a1:ce:e0:df:1d:ab:03:12:13:d1:91:de:17:46:bd:99:db:
62:9a:d6:b1:d9:3f:43:3a:f0:e7:cb:fd:b0:31:8e:ce:7c:83:
cc:1b:3b:8b:52:e5:c4:2d:85:dc:4c:90:a3:5b:4e:93:8b:8e:
3a:1c:71:b7:a2:35:aa:83:38:e4:41:ff:47:27:b2:85:c1:2a:
df:43:09:69:d0:41:c5:8a:69:49:75:4e:72:06:c6:0b:8b:20:
1e:f4:d3:fe:e1:9a:57:a5:0d:cc:5a:aa:56:25:12:7f:4a:95:
54:85:26:29:15:41:02:61:9d:66:b3:d3:6b:4d:74:6e:04:eb:
3d:df:e2:10:a5:52:97:cc:43:29:f0:9a:97:6f:c6:69:00:f2:
67:52:c4:c3:e5:15:e0:1a:a9:fc:70:82:19:4c:08:28:c0:b1:
46:e9:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:36:43 2025 by rpki-client