Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa
File: zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa (raw, json)
Hash identifier: 1zSkkqDH7rhfTGP6CblxxApp8yosaiHxrLIiFpb9d40=
Subject key identifier: CC:C2:C7:D1:9D:27:FD:97:D3:89:6A:71:8D:60:CD:08:19:BC:14:FD
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019424B27169FF71CB2656BB3C17BCFDF5A3
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa
Signing time: Thu 02 Jan 2025 01:47:41 +0000
ROA not before: Thu 02 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 193.56.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:71:69:ff:71:cb:26:56:bb:3c:17:bc:fd:f5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccc2c7d19d27fd97d3896a718d60cd0819bc14fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:40:f9:6e:67:aa:d5:d3:71:a1:67:e1:d0:
80:45:01:d4:3c:36:5a:91:5a:e1:94:a8:fd:cc:88:
3b:34:e8:91:2d:a0:38:ca:9b:1a:f3:80:ab:db:54:
e0:57:92:6f:d1:13:0d:ec:df:b8:49:ab:e1:4e:65:
32:e1:33:d2:76:81:0b:10:c1:46:1c:a4:9b:8e:38:
38:16:e0:f5:a6:7e:a6:51:bd:ee:f7:f9:bc:7d:6a:
ed:9e:11:c8:dc:35:05:71:3a:9b:be:bd:c6:27:86:
86:a6:a8:b8:a1:31:c4:83:23:05:76:a9:77:ef:35:
e1:ce:b7:a2:31:36:a6:7d:2c:e8:50:82:dd:2f:ef:
d7:cc:5e:2f:1e:ce:42:39:7a:bb:ea:ee:36:50:1d:
43:f7:81:f5:58:48:d0:16:94:e2:bf:02:b6:70:7d:
67:55:de:c1:c4:9b:4a:c4:4b:c3:5f:6e:23:38:c5:
41:00:9c:2f:a3:79:ea:16:7b:a0:5b:12:17:28:2d:
5b:7c:a9:00:96:29:e4:9a:72:ff:36:9e:ec:f9:65:
ed:6e:03:8d:08:de:7d:8d:ce:6b:99:04:db:b4:42:
77:07:f6:77:47:21:3a:8e:ec:2b:26:27:eb:79:3d:
3d:2e:23:4b:df:21:65:04:6d:1e:e3:e1:93:c6:64:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C2:C7:D1:9D:27:FD:97:D3:89:6A:71:8D:60:CD:08:19:BC:14:FD
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d5:13:f1:8d:f7:93:0c:76:ac:fb:fc:f4:18:f0:08:65:05:
98:d7:f7:40:c6:f1:67:b7:c9:00:2d:78:6d:3f:af:f6:7a:03:
59:60:0c:b2:91:20:8a:69:2d:74:f8:65:b8:39:77:83:67:fa:
73:3f:b8:5b:87:1a:c1:3c:c3:44:c7:da:64:7e:1c:53:02:98:
fb:48:96:5f:96:38:c4:41:f1:67:5a:9f:cf:b9:19:a8:ae:f7:
65:c4:ce:c1:dc:96:0b:2b:0b:9e:91:2b:19:ba:5b:2c:f7:46:
0b:02:cb:e7:fa:e2:fa:7e:54:e5:75:e7:bd:fd:ee:8a:c8:90:
bf:c3:e3:a6:55:bb:33:df:62:8c:60:6f:dd:dd:dd:95:25:b6:
ea:0e:34:fb:7d:4f:a6:e6:96:24:a8:1d:bf:17:cb:33:70:bc:
ba:75:bd:73:c1:d2:b8:15:a6:ee:bc:9c:e9:0e:95:5c:4f:96:
69:e7:f6:2f:69:f6:6d:63:97:86:f6:9b:98:a2:55:08:7f:17:
e3:44:89:39:a2:ce:6b:00:9c:86:b6:2b:3b:9e:9e:0e:b3:67:
24:9b:01:89:bd:7f:93:97:f3:49:54:35:ae:bd:01:6d:63:a7:
70:af:fd:48:1d:05:3f:b7:a0:1f:7d:82:02:a9:2a:8c:ea:40:
9b:ea:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:33 2025 by rpki-client