Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/zB69TVx0sEbC1RySFuzqMAIu3a0.roa
File: zB69TVx0sEbC1RySFuzqMAIu3a0.roa (raw, json)
Hash identifier: usN4D5QBcD6XXA42H1Ot8IvkjdBuShhuURXZHjJ1m3k=
Subject key identifier: CC:1E:BD:4D:5C:74:B0:46:C2:D5:1C:92:16:EC:EA:30:02:2E:DD:AD
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019427477427C64C5D4803D35E4B14D3DFCF
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/zB69TVx0sEbC1RySFuzqMAIu3a0.roa
Signing time: Thu 02 Jan 2025 13:49:41 +0000
ROA not before: Thu 02 Jan 2025 13:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20853
IP address blocks: 178.236.246.0/24 maxlen: 24
178.236.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:74:27:c6:4c:5d:48:03:d3:5e:4b:14:d3:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jan 2 13:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc1ebd4d5c74b046c2d51c9216ecea30022eddad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:10:80:ff:0e:9a:91:35:cd:a7:44:4e:ad:
04:94:b4:bb:e3:f5:e6:e3:4d:97:f3:5b:86:a3:40:
03:ec:fb:92:91:2c:38:76:9c:a8:92:d4:87:d0:b6:
23:34:9f:7f:3d:82:2c:9b:9b:45:e4:53:08:94:40:
fc:de:cf:25:3b:18:1c:69:59:37:a4:f7:03:25:b6:
63:14:11:a8:2f:4b:ee:42:3d:02:d1:f8:5b:82:0a:
0f:47:f5:6c:e0:85:c0:e2:de:0a:d9:5a:7b:2b:49:
6f:16:34:c5:5e:be:1b:d9:f0:df:a1:61:3d:bf:6e:
4d:45:a1:ff:6c:0c:00:02:73:51:9a:98:89:68:f2:
96:b2:4b:56:65:9b:28:02:23:9e:3d:96:ed:f3:67:
ea:7e:04:a0:db:c7:c8:25:cd:57:f8:89:4c:71:67:
fc:9f:79:be:91:d7:e9:1f:36:ac:5a:ba:51:9b:3a:
9b:4a:aa:73:51:e6:03:f0:6f:9f:7f:65:2e:e9:eb:
72:7c:4f:0c:24:30:9b:65:37:21:3f:73:e3:d7:6c:
c9:63:eb:13:33:66:70:29:76:5f:52:79:9e:c8:79:
ec:3d:1a:55:c5:e6:43:31:c6:99:5a:49:f0:14:bf:
8d:af:fa:3b:b0:bf:e2:c0:cf:9e:88:89:f3:4e:96:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:BD:4D:5C:74:B0:46:C2:D5:1C:92:16:EC:EA:30:02:2E:DD:AD
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/zB69TVx0sEbC1RySFuzqMAIu3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
59:78:af:f3:69:4d:b5:08:23:4f:43:4c:be:5c:b7:80:f3:78:
17:29:96:12:fe:d4:ac:38:b0:44:7f:fb:35:99:67:25:38:94:
1e:9b:92:eb:7f:60:76:0a:d9:e9:97:8d:d9:62:c5:aa:91:b4:
f5:0c:e9:d4:57:7f:52:fe:0e:48:03:03:68:d8:a1:96:81:9a:
d0:aa:a7:af:ed:72:21:17:ca:8a:77:53:ac:ad:b2:c4:7e:51:
21:bf:13:b2:e2:a2:98:3d:bc:e7:55:c8:e9:00:0c:3b:a1:97:
1e:1f:14:5d:be:08:18:d9:b4:ba:82:88:51:5a:8b:d6:44:9e:
d9:96:e3:3f:cd:db:cd:61:d5:ca:60:39:26:c0:f1:12:25:2f:
3f:31:5d:70:fd:06:2e:68:f0:e2:09:56:88:cd:ea:24:c8:3e:
ad:f2:70:b7:8b:65:40:b1:24:1a:c1:32:8b:cd:69:aa:cd:62:
97:d1:b9:85:15:04:73:4e:4e:60:02:60:7a:ec:60:d4:e8:7d:
10:c2:28:56:8a:20:02:8f:ea:50:77:28:87:7a:98:de:db:aa:
8b:b9:df:6e:95:bd:33:26:66:63:50:5a:af:ab:6b:96:d5:e3:
8b:3c:cb:f7:d2:ac:f7:85:50:61:b3:c0:ad:65:b4:4f:fc:57:
56:8d:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:15:12 2025 by rpki-client