Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/zBCnMJFWnMXKgz_j_g57vjHzFUk.roa
File: zBCnMJFWnMXKgz_j_g57vjHzFUk.roa (raw, json)
Hash identifier: 4csBVOwSYwoxyrDsoROei21hUJZS/HdqdCvpTaBSh6Q=
Subject key identifier: CC:10:A7:30:91:56:9C:C5:CA:83:3F:E3:FE:0E:7B:BE:31:F3:15:49
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E11D83C3DA5F42637D58D97CC88CA
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/zBCnMJFWnMXKgz_j_g57vjHzFUk.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56940
IP address blocks: 31.131.40.0/22 maxlen: 22
31.131.46.0/24 maxlen: 24
31.131.47.0/24 maxlen: 24
91.229.12.0/23 maxlen: 23
91.229.14.0/23 maxlen: 23
91.239.164.0/23 maxlen: 23
91.239.166.0/23 maxlen: 23
109.166.32.0/22 maxlen: 22
151.248.64.0/22 maxlen: 22
176.113.100.0/22 maxlen: 22
176.114.56.0/21 maxlen: 21
193.242.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:11:d8:3c:3d:a5:f4:26:37:d5:8d:97:cc:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc10a73091569cc5ca833fe3fe0e7bbe31f31549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:97:af:b8:dc:fa:eb:90:81:d6:ac:6a:0e:
0c:9c:5d:97:d3:fb:16:1e:b3:b1:bf:fd:61:d0:ae:
17:af:72:33:cd:6d:e7:1b:f8:ae:cf:cf:a5:9d:ae:
58:00:c8:ba:36:e4:a4:64:5f:16:2a:f9:fa:9d:4d:
62:c5:12:45:82:d5:3b:c8:86:06:b3:e3:91:44:80:
14:6b:c0:a9:33:ee:27:e1:74:db:d3:5f:6a:61:ef:
8e:27:af:62:c0:b3:f8:e4:45:28:f1:88:b5:43:02:
4f:ae:c0:c9:6b:e1:86:85:30:82:cc:ff:f6:8b:b1:
01:ed:95:93:19:92:98:b8:22:2f:52:da:97:7a:27:
40:36:94:ac:d3:4d:97:d3:ca:11:07:99:eb:0d:bc:
fc:e6:be:9f:66:b2:6b:b3:53:56:17:83:e6:91:58:
9f:52:d8:f8:6d:a8:28:e2:37:87:57:a7:84:65:ca:
7f:3c:e0:18:92:a9:75:7c:f3:4a:01:eb:be:27:46:
91:40:f3:2a:94:a3:4c:f9:af:56:56:5a:76:88:d3:
4d:a2:9e:e3:0d:2a:2f:73:f4:28:81:f9:6a:a6:38:
58:99:84:a3:4e:ac:c1:6e:a5:b9:7c:92:3c:58:03:
1b:2c:83:a2:97:c4:84:13:4e:26:31:30:3b:b1:a1:
3b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:A7:30:91:56:9C:C5:CA:83:3F:E3:FE:0E:7B:BE:31:F3:15:49
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/zBCnMJFWnMXKgz_j_g57vjHzFUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.40.0/22
31.131.46.0/23
91.229.12.0/22
91.239.164.0/22
109.166.32.0/22
151.248.64.0/22
176.113.100.0/22
176.114.56.0/21
193.242.196.0/22
Signature Algorithm: sha256WithRSAEncryption
57:9c:70:eb:d9:e7:0f:48:a2:6e:78:45:3a:07:d3:0c:03:d6:
18:06:92:41:51:db:16:cf:2b:0e:23:72:a7:73:14:1f:57:bc:
12:90:4a:4d:b6:b6:43:16:02:2e:4f:22:d2:96:f1:f7:83:5b:
a9:3c:cd:65:dd:68:6a:71:8c:8d:32:6a:86:2a:ac:6d:48:bf:
e9:5b:8d:3b:52:eb:37:63:bd:c1:02:b2:5d:92:42:59:05:ab:
ef:ba:20:7b:e1:3f:39:2a:3f:5b:af:07:c7:4f:c0:01:eb:e1:
9a:fa:28:26:62:3d:1d:1d:79:fa:28:53:d1:45:c5:bc:4c:2c:
77:d0:cd:c5:58:14:50:48:5a:a3:8e:60:60:4c:92:a4:6a:90:
b9:af:9f:95:48:2e:c9:fc:6f:e6:2d:16:a7:74:2e:a0:48:4e:
fb:70:7e:25:0c:6f:04:c2:ae:7d:ad:bb:e9:e1:48:cb:bf:5f:
92:91:45:8a:3c:5b:02:ae:22:ec:15:c3:21:e9:ff:72:c4:d4:
ef:f9:6a:b0:9f:14:e4:7e:2f:60:a0:73:93:24:a0:d9:7b:82:
13:2c:c7:fc:b6:0f:18:bc:60:6f:76:31:ae:7e:45:a5:0a:4d:
cc:e1:44:36:20:d5:c4:ec:7b:33:eb:f2:cc:22:fc:96:d0:d7:
dc:c3:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:39 2025 by rpki-client