Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa
File: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (raw, json)
Hash identifier: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=
Subject key identifier: CF:73:AD:E7:26:6D:75:0D:88:ED:CD:F2:05:31:96:E0:EC:48:6D:96
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 0194236A1EA131A3B3A217FE2335508CA196
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 185.44.152.0/22 maxlen: 24
2a04:9cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1e:a1:31:a3:b3:a2:17:fe:23:35:50:8c:a1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf73ade7266d750d88edcdf2053196e0ec486d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:1c:4f:46:0f:94:51:57:fd:89:1d:3a:eb:
35:e6:62:d4:a2:dd:18:7b:1c:50:ab:d1:43:e4:c9:
55:72:31:82:1e:91:97:b0:1f:bf:de:b4:1b:aa:d5:
25:e5:9d:19:c5:b9:5d:62:ee:b1:2e:0c:f0:db:68:
85:23:83:49:6a:58:71:33:9f:e5:db:26:dc:f2:7e:
99:05:3f:7d:f4:12:12:da:1d:9c:ee:68:96:f5:36:
aa:70:d3:ae:09:8f:39:68:7d:d1:60:2b:06:46:9a:
ce:21:59:f1:57:3f:a9:05:bc:41:40:14:b7:1b:d7:
8c:fe:17:e7:42:83:81:fe:9a:5a:20:5e:39:8d:6f:
1d:48:98:de:2f:96:9f:10:4e:62:28:2f:3b:21:ae:
ba:0e:ad:0d:55:59:2d:16:a3:a5:d2:a9:ee:87:53:
fa:89:26:68:d0:3c:dd:7a:d1:a8:78:20:b8:9c:d0:
b6:e2:e6:21:37:1b:34:fd:a5:d0:94:dd:7a:b8:4d:
7e:0c:56:af:2b:2f:75:53:bd:b2:a2:fb:0c:a8:b0:
1a:8e:57:52:ff:0f:2a:77:19:5e:ea:2c:e7:e1:f1:
81:e6:d0:cc:7f:2b:80:97:06:31:0e:78:26:c1:17:
93:e1:b3:01:79:f1:d6:0b:e5:ca:95:fa:cc:4c:be:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:AD:E7:26:6D:75:0D:88:ED:CD:F2:05:31:96:E0:EC:48:6D:96
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.152.0/22
IPv6:
2a04:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:34:1f:ea:75:5a:e9:dd:20:fd:9e:b9:06:47:4a:f2:d0:63:
fa:8e:3e:41:b2:e9:93:29:05:f3:51:8e:37:83:c6:f3:7a:26:
5c:1f:06:d3:be:df:43:04:eb:ef:6a:68:9d:70:bb:b0:a3:6d:
d9:c6:3e:cf:06:19:25:32:fa:0d:b9:c7:cb:56:ba:5e:e8:7a:
b3:37:24:d2:57:34:39:60:19:b0:a4:8c:fd:d5:bc:f6:0f:7f:
01:df:66:d8:14:ae:d6:14:2d:16:0b:63:9e:0c:b2:5c:96:39:
04:4d:60:bf:82:36:e7:1a:89:a2:b0:b4:d1:5f:69:41:ae:b2:
d5:9c:44:20:50:fa:ac:ae:27:11:7c:3d:d0:ac:b0:b9:1a:7e:
3a:83:58:43:4a:08:90:44:bf:4a:9f:04:35:0e:97:6a:10:a6:
fe:4a:96:6e:ab:6a:9c:f1:1b:ea:29:f3:36:ae:a2:f0:61:45:
9b:9d:9c:59:b2:10:7e:7b:b1:09:f0:ea:07:06:df:07:65:d7:
0f:9f:0d:1e:40:ce:3b:ec:a2:f0:d0:71:39:32:60:d7:be:da:
18:ad:f0:52:64:55:02:2c:30:24:f2:33:60:fc:f8:aa:30:6c:
36:50:f4:e1:4f:54:50:b8:28:9b:1c:18:77:42:ac:2e:b7:b5:
7a:5c:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:52 2025 by rpki-client