Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/37BH2BbkewJajf7AdygbF5Ybmow.roa
File: 37BH2BbkewJajf7AdygbF5Ybmow.roa (raw, json)
Hash identifier: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=
Subject key identifier: DF:B0:47:D8:16:E4:7B:02:5A:8D:FE:C0:77:28:1B:17:96:1B:9A:8C
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 01942144251EC055D421623C3E3224D2E233
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/37BH2BbkewJajf7AdygbF5Ybmow.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47477
IP address blocks: 192.164.161.0/24 maxlen: 24
192.164.164.0/24 maxlen: 24
192.164.167.0/24 maxlen: 24
192.164.172.0/24 maxlen: 24
192.164.173.0/24 maxlen: 24
192.164.174.0/24 maxlen: 24
2a04:62c0::/32 maxlen: 32
2a04:62c1::/32 maxlen: 32
2a04:62c2:1::/48 maxlen: 48
2a04:62c2:2::/48 maxlen: 48
2a04:62c2:3::/48 maxlen: 48
2a04:62c2:4::/48 maxlen: 48
2a04:62c2:5::/48 maxlen: 48
2a04:62c2:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:25:1e:c0:55:d4:21:62:3c:3e:32:24:d2:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfb047d816e47b025a8dfec077281b17961b9a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:31:c9:27:9b:79:74:c7:72:d6:13:e5:67:
09:b1:4d:37:94:9b:66:82:0c:f9:85:81:0a:2d:fd:
ef:e7:a3:f1:f7:00:59:7b:a1:0c:56:af:86:3d:33:
cb:9e:ef:ce:da:67:10:32:34:68:9d:da:ba:c1:de:
1b:3b:33:db:0e:98:8a:c7:72:d7:a5:b4:f3:b3:9b:
01:3e:e8:76:7f:9a:0b:74:14:3e:81:6b:f7:e8:57:
58:a9:91:56:b9:d5:5f:7b:d0:3e:3f:de:d6:51:fe:
c9:7d:4c:47:25:c6:12:9b:14:cd:fa:59:c4:0e:9a:
06:cb:8a:d1:c2:01:2e:81:2f:ff:43:8a:e4:0c:27:
e1:d7:d8:96:2e:69:f9:1a:ce:42:74:2a:3e:74:49:
ba:dc:1e:f7:ad:76:7a:46:b2:23:59:b0:13:36:b0:
88:fe:36:70:fc:ec:c9:bc:24:d7:d1:0b:29:cf:f9:
9e:87:3b:b6:f8:10:7f:21:15:44:fa:bd:7f:9f:b8:
07:7d:ed:64:7a:a0:8e:92:09:c9:16:20:63:bc:14:
e2:4f:64:51:3e:a5:36:99:67:75:e5:39:8e:e5:75:
4a:4d:b0:3f:62:48:1c:1f:c9:b1:cf:ff:d5:1b:8f:
b4:21:6e:38:7d:d1:cf:47:08:a1:f0:36:e1:35:74:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:47:D8:16:E4:7B:02:5A:8D:FE:C0:77:28:1B:17:96:1B:9A:8C
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/37BH2BbkewJajf7AdygbF5Ybmow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.164.161.0/24
192.164.164.0/24
192.164.167.0/24
192.164.172.0-192.164.174.255
IPv6:
2a04:62c0::/31
2a04:62c2:1::-2a04:62c2:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:2f:30:1e:0e:af:cf:1c:ef:03:1b:82:97:7d:64:e4:7b:dd:
c9:eb:82:45:4f:5a:43:8a:71:7f:19:e2:9e:62:4d:30:fe:db:
57:3f:e5:dc:6a:4a:6d:40:5a:58:d9:49:1b:83:af:12:04:f5:
d2:0c:b3:5a:03:4d:96:fc:e0:5a:ce:47:8c:4a:0c:e5:51:e8:
4b:49:d5:e7:90:64:0a:41:f2:7d:b0:b7:6f:16:bb:7c:48:a5:
a3:85:bb:d7:a3:db:dc:27:97:31:c1:86:26:29:fc:35:e7:80:
98:fa:8d:75:07:46:43:20:37:5b:2f:ac:df:df:4d:a8:2a:02:
30:d9:0a:4d:1c:46:9c:25:c4:c8:62:50:f6:7e:f1:22:ec:47:
41:93:9a:10:19:06:ac:a5:04:78:4c:73:19:6e:51:7f:fe:7a:
f7:df:a7:a2:4e:0e:2d:ad:16:0c:71:0a:fa:67:54:d6:e1:de:
1c:08:39:f8:81:46:7a:8c:9c:08:14:fc:78:d3:1e:65:00:cc:
50:3e:4b:a4:ab:d0:d8:4d:d2:ab:8d:83:01:35:77:9e:8a:d6:
56:26:e5:cb:b0:0a:e3:bc:da:00:9c:0a:71:da:9f:6c:20:59:
1b:b6:25:08:70:bb:f9:90:61:9d:30:94:38:ac:dd:0e:28:cb:
05:4a:d1:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:47 2025 by rpki-client