Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/z9TK7gFvliHLFVLeOL9NIuYVno0.roa
File: z9TK7gFvliHLFVLeOL9NIuYVno0.roa (raw, json)
Hash identifier: F07UsHdLE5VLNA0Dfx2KB3Rv9KdwwXE6IkvxVa4XsOY=
Subject key identifier: CF:D4:CA:EE:01:6F:96:21:CB:15:52:DE:38:BF:4D:22:E6:15:9E:8D
Certificate issuer: /CN=e889cbbf69e3a67caa83b54debec2722e5536883
Certificate serial: 0194206850CABF4B9A6057B0669CA603C735
Authority key identifier: E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/z9TK7gFvliHLFVLeOL9NIuYVno0.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202468
IP address blocks: 185.74.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:50:ca:bf:4b:9a:60:57:b0:66:9c:a6:03:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e889cbbf69e3a67caa83b54debec2722e5536883
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfd4caee016f9621cb1552de38bf4d22e6159e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:4b:39:b7:c0:12:35:65:ae:57:82:eb:11:
a3:c6:6b:4c:cb:c4:7b:42:1e:6d:76:92:f0:e1:b9:
1c:8e:13:a8:4e:36:ba:ae:c7:26:33:48:43:c5:2b:
00:f5:ce:33:87:67:46:d7:b8:9e:a3:6e:b3:6a:c7:
e2:c0:0d:ed:44:ed:ac:38:c9:b8:de:c9:bb:b6:27:
9f:75:07:6f:f4:3a:f4:67:08:e1:57:75:b3:c3:bb:
1b:28:fb:88:45:e9:c3:e7:7a:0b:85:8e:77:96:29:
2a:b4:36:ac:5d:6e:22:65:de:5a:17:96:d6:66:a1:
38:bd:92:8d:62:df:f2:18:70:56:ac:5e:2b:c3:eb:
f0:90:44:da:82:5a:57:df:f2:58:e7:ce:2d:2c:28:
94:f8:03:b9:0b:56:35:14:fe:74:bc:b1:6e:dd:5f:
31:4e:a4:96:3c:9a:06:97:fd:34:08:50:7b:e8:13:
4a:c6:9d:25:93:36:3f:a3:eb:b7:c6:53:16:d3:3c:
88:1a:77:bd:9b:f7:1f:ef:3c:ec:bf:3e:f7:08:31:
d3:61:cb:0c:f7:c4:e3:25:97:d7:de:bd:f1:5d:08:
8c:f4:55:ff:58:b3:18:5b:9b:a4:83:d5:07:0f:08:
46:b6:79:e6:0e:a9:7f:ec:f4:d0:4e:f2:78:8b:5d:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D4:CA:EE:01:6F:96:21:CB:15:52:DE:38:BF:4D:22:E6:15:9E:8D
X509v3 Authority Key Identifier:
keyid:E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/z9TK7gFvliHLFVLeOL9NIuYVno0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:50:0f:d2:b4:91:0b:1d:77:b1:86:2c:3e:56:6f:10:99:4b:
7d:7d:79:c3:a6:32:de:6e:11:de:51:2c:fc:6f:de:43:4a:fa:
b8:9b:4e:e5:c6:5e:b2:a6:33:5d:70:07:1f:7b:0a:9e:63:04:
8c:3d:1b:fb:41:c7:05:8c:ea:7a:4e:bb:9b:a6:3a:e4:71:9e:
9d:0e:75:11:3e:b1:e6:74:94:98:2d:6d:f1:cb:f1:84:f7:f2:
9e:6a:5c:45:e3:6e:65:49:59:31:78:ad:f5:80:ef:b9:17:10:
e1:b6:35:4a:3f:97:66:b3:62:3c:e3:7c:f1:8b:ed:d0:5c:0a:
8a:61:b3:a2:a3:cc:a2:57:37:99:2b:15:7d:82:f4:88:b2:82:
70:90:a8:a9:58:f3:5b:2c:22:81:37:ec:d8:89:19:66:cb:57:
6a:8a:2d:bc:e2:12:08:b3:f3:d3:d1:1c:ce:e2:0b:40:8f:6c:
74:d6:49:65:21:e8:82:77:d4:da:13:74:20:3d:a2:fb:b0:95:
9a:f7:74:fd:90:b8:32:e9:3e:03:c4:7a:59:8a:7f:9a:f8:17:
06:7e:a8:c4:11:05:d4:22:bc:8a:33:1c:d6:90:6e:e5:ff:6c:
c8:a1:71:c6:04:2a:f5:b6:54:83:b1:8c:e7:6a:af:0c:ef:98:
b8:e6:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:51:54 2025 by rpki-client