Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa
File: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (raw, json)
Hash identifier: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=
Subject key identifier: CC:FC:B4:C5:8A:6A:FD:16:18:57:BD:9D:BC:FF:FC:88:4B:43:FC:BC
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D7292DC1F13EE0A14B6CB57747B23B
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205909
IP address blocks: 45.92.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:29:2d:c1:f1:3e:e0:a1:4b:6c:b5:77:47:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccfcb4c58a6afd161857bd9dbcfffc884b43fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:3e:65:51:9e:d4:26:a8:85:e7:7e:48:19:
ac:1f:2d:3d:94:8e:7b:5f:a1:c2:d3:ad:f5:22:a4:
a7:f0:9e:f2:c4:8b:d0:ad:2e:ba:40:c8:f2:19:32:
1f:7b:cf:70:ba:c3:58:46:73:5f:25:96:37:ea:e7:
72:96:86:41:67:cf:aa:00:95:52:04:6c:d0:9e:e1:
9d:48:63:2c:d8:22:f8:7f:e8:e5:fc:08:49:9c:56:
37:29:ba:00:d0:3b:00:ee:d9:05:e8:91:61:75:68:
7b:e6:56:61:a0:d5:db:76:43:5b:1a:d4:3b:21:b1:
56:48:32:89:c7:36:66:8e:fc:8e:0a:7e:92:eb:96:
44:96:06:1d:18:ae:07:64:21:1b:2c:34:3c:eb:f0:
cd:6e:05:e4:3d:a8:13:58:2b:8b:6a:96:7e:08:23:
b3:42:cc:e0:ae:14:ff:49:25:23:37:85:b3:0a:ca:
2a:29:ef:d0:61:42:db:f4:f6:fe:db:6b:bd:45:be:
df:ed:9e:2e:62:61:33:11:88:44:29:6e:45:63:a8:
ea:56:d0:18:cf:01:ce:4b:1f:df:e0:90:a7:80:72:
cd:e1:07:0b:10:f8:73:b6:fb:e8:6a:56:01:ce:94:
d2:05:3f:77:95:b6:a9:00:3d:63:0e:9b:8b:a2:20:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FC:B4:C5:8A:6A:FD:16:18:57:BD:9D:BC:FF:FC:88:4B:43:FC:BC
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:00:95:a4:27:eb:13:e0:e5:5a:d3:a3:dd:8b:d5:8e:f7:84:
68:8f:44:cf:13:a8:a5:ad:4b:ad:20:ec:e5:68:3d:ab:10:29:
5f:55:2c:16:b4:c5:71:38:93:92:e8:77:ea:e8:a8:66:7e:b8:
ae:43:36:1f:f9:43:32:d4:47:68:aa:b2:2d:b6:04:56:1d:0b:
2c:82:d5:f1:72:b6:ce:e9:18:ca:52:bb:2d:75:27:15:78:35:
d7:19:0c:37:26:91:a6:4b:3f:60:65:a7:dd:f3:5f:90:36:de:
9e:cc:17:70:ac:3d:68:38:b8:94:a6:45:c5:f5:5f:2f:bc:4d:
7e:80:2f:8f:b8:a5:a2:c4:5a:15:10:bd:24:26:17:04:92:d5:
a0:e2:de:d4:23:a4:ae:ff:f3:fb:c8:f5:0f:e3:a0:af:25:24:
77:f0:d4:ce:3b:a2:a6:c7:58:e8:af:52:8b:ec:4b:c0:b5:a8:
0f:30:07:ea:d2:5c:00:a3:aa:41:a0:7d:10:0d:b7:b8:c2:74:
ee:fa:f8:aa:61:0e:30:b0:20:17:9e:be:0e:77:20:c7:07:23:
8b:c9:66:56:d5:d0:5a:d8:af:b9:bf:6b:ec:9a:43:04:65:77:
3c:b2:0a:e0:89:1f:59:b0:da:e5:ca:8e:5a:e1:7b:1b:5d:de:
c5:21:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:48 2025 by rpki-client