Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/ZqzdAs8yZ3FLdUhbYW7TTyJuHq0.roa
File: ZqzdAs8yZ3FLdUhbYW7TTyJuHq0.roa (raw, json)
Hash identifier: bttROiRtaf17Ko3eqx0YmSrz2YkGK+csEYw+4Lostm0=
Subject key identifier: 66:AC:DD:02:CF:32:67:71:4B:75:48:5B:61:6E:D3:4F:22:6E:1E:AD
Certificate issuer: /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial: 01941F8C135FB8A44A93247CA3F2CD4708E4
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/ZqzdAs8yZ3FLdUhbYW7TTyJuHq0.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197033
IP address blocks: 185.19.224.0/22 maxlen: 24
185.243.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:13:5f:b8:a4:4a:93:24:7c:a3:f2:cd:47:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66acdd02cf3267714b75485b616ed34f226e1ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:b0:4b:de:6a:98:ea:25:ab:fd:dd:0a:25:
c1:a4:be:6c:35:95:b8:c6:b7:18:4c:06:5c:20:99:
94:aa:49:e5:f5:1a:0b:9a:57:fa:00:f7:2c:f5:ca:
87:54:8b:16:81:7c:9f:c2:26:56:71:18:e5:a2:2d:
53:58:1f:06:e7:f7:68:3b:5e:bb:06:a2:50:e3:89:
03:2e:5d:00:85:8e:83:61:ab:72:99:b6:a6:06:86:
ff:51:10:3f:92:13:6a:c3:ae:b7:2b:af:ec:05:35:
89:9b:a7:82:0a:ad:eb:af:b8:45:72:e7:38:a1:5d:
4e:2a:0c:80:77:71:c4:ac:20:23:44:30:1a:df:cb:
0a:f4:f5:9e:b1:df:f7:bf:61:72:ce:1e:76:cd:7b:
79:2f:38:9a:a1:11:0a:4c:d6:1f:37:76:09:ba:56:
1e:e6:f7:68:b1:cb:a9:9f:3d:02:1f:24:7e:b2:80:
37:0d:93:a1:d3:60:f9:4a:2b:6d:25:24:60:f3:f3:
23:48:58:dd:21:2c:ac:ac:de:07:4c:32:e5:f0:c9:
0c:9c:39:63:77:76:b5:74:67:73:11:f6:79:51:a0:
40:85:39:33:c9:33:2b:61:1f:d2:59:83:18:bf:a6:
25:d6:76:8f:91:66:89:eb:4a:d7:18:d7:39:10:5d:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:DD:02:CF:32:67:71:4B:75:48:5B:61:6E:D3:4F:22:6E:1E:AD
X509v3 Authority Key Identifier:
keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/ZqzdAs8yZ3FLdUhbYW7TTyJuHq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.224.0/22
185.243.16.0/22
Signature Algorithm: sha256WithRSAEncryption
13:8d:cb:88:5b:9a:94:d3:78:61:f0:e9:1e:47:f0:22:ca:1f:
67:34:10:16:c1:5f:c9:bd:6b:33:45:40:7b:04:b1:88:db:73:
4e:e6:3c:dd:00:48:22:9c:9b:79:10:ce:50:8e:61:cd:c1:ea:
26:e6:9e:3b:55:a1:84:40:86:b4:a0:a4:6e:92:f0:8f:81:6a:
22:0c:0d:35:0d:2c:88:83:6d:be:37:b3:21:f7:d7:84:df:b2:
ee:57:45:2c:8c:d4:65:68:47:23:4e:fe:91:53:f0:35:1c:84:
3e:2c:86:68:a7:6e:60:8f:b6:4f:9f:6c:28:03:c1:38:f7:80:
8a:db:0f:b0:25:b3:3e:45:5e:4a:b6:8b:ba:00:7c:81:0c:a5:
33:2d:e0:09:4c:e1:79:f6:5b:0b:76:0b:0b:cf:5c:8b:06:69:
2e:a1:1a:c5:d3:b7:a7:f6:51:4d:83:0f:da:a5:84:32:9d:54:
72:ac:f8:0c:09:7a:72:3a:66:e1:81:06:f0:c7:b6:8b:b7:69:
46:a4:c1:e3:29:cb:ac:ce:de:64:de:2f:25:94:ac:67:08:92:
e8:4d:57:90:9c:8c:04:3b:53:8c:bf:eb:f9:8a:79:1b:0c:a4:
2a:00:7e:3e:63:f1:0b:33:32:d7:29:49:18:e1:14:1a:4e:9b:
26:32:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:04 2025 by rpki-client