Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/ZIeftz8g6-61T0mBa0ClKG58PyI.roa
File: ZIeftz8g6-61T0mBa0ClKG58PyI.roa (raw, json)
Hash identifier: bAh6A9SIv0Nw80HjsuLV5ZZhtF7rRyou/1nJ2bbqVfk=
Subject key identifier: 64:87:9F:B7:3F:20:EB:EE:B5:4F:49:81:6B:40:A5:28:6E:7C:3F:22
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 0194258EFB504AF76B0564DE633D804F33E0
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/ZIeftz8g6-61T0mBa0ClKG58PyI.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59887
IP address blocks: 185.48.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fb:50:4a:f7:6b:05:64:de:63:3d:80:4f:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64879fb73f20ebeeb54f49816b40a5286e7c3f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:2c:6f:89:13:d1:35:a0:72:04:40:ce:35:
a2:40:df:55:23:97:1c:b9:56:cf:5d:f3:47:01:5b:
3f:6e:8b:87:af:1b:94:6f:04:1f:01:30:89:78:28:
1e:3a:fd:1a:2c:db:4a:4c:a4:c4:30:b6:25:f8:8d:
a4:dc:10:96:d9:12:68:2c:a5:0f:80:32:01:28:8a:
ad:52:a6:35:b2:f9:6e:69:e2:ec:df:fc:f4:98:ea:
a1:2f:fd:8c:9a:ea:4b:62:d0:5f:ec:76:83:89:62:
70:d5:13:51:c8:4e:27:1b:c8:8f:86:b0:5d:49:6e:
9d:fc:91:e2:bf:42:ec:75:7c:73:1f:23:56:34:05:
f9:01:7e:26:72:14:73:16:0c:b0:c8:fe:f0:3b:0b:
fb:ea:89:06:c6:15:32:39:9e:d6:74:be:45:d3:4b:
3a:aa:34:a2:a3:20:26:ed:bb:d3:4d:7f:f9:68:9c:
9d:a8:8a:7f:83:55:b7:05:a6:ab:11:b4:6c:bd:fc:
d6:94:eb:96:2d:10:4c:7a:25:4c:81:e1:d3:28:2e:
7f:5d:b2:af:93:40:99:d4:ea:7c:ef:76:2e:82:72:
17:dc:4a:3d:d4:7f:5e:72:93:39:6e:2b:b0:3c:80:
4d:81:b4:f9:93:7c:a0:9f:78:ad:ae:87:65:0d:1e:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:9F:B7:3F:20:EB:EE:B5:4F:49:81:6B:40:A5:28:6E:7C:3F:22
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/ZIeftz8g6-61T0mBa0ClKG58PyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0e:9d:c7:d3:62:e0:1c:15:41:40:18:0b:b2:61:f4:c4:f3:
78:a4:93:af:28:64:94:b8:a0:0d:9c:9d:17:c7:2c:29:9a:e9:
f8:05:11:19:7c:f5:85:6b:06:47:c1:e3:95:d9:6b:46:6f:37:
1f:69:3d:e0:bb:1c:1f:07:7b:f1:83:c1:7c:f5:21:1c:ab:34:
04:65:3e:27:93:e2:4a:54:4e:09:9d:e6:ee:45:9b:ce:d3:67:
fb:9c:96:ba:7f:35:9e:f5:f2:c9:b5:22:c1:59:74:72:07:1b:
96:15:a0:b7:b4:2e:4e:06:05:4f:99:dd:e1:7d:26:29:28:8d:
0a:41:78:06:b0:7c:e7:b7:42:4d:90:67:1b:3b:6b:be:2f:d6:
c1:2b:bb:8a:c1:e5:f3:63:70:82:bf:c1:d9:fa:5e:4e:62:6c:
fc:3b:47:14:9b:aa:07:46:d6:9d:75:37:e7:22:aa:54:91:0b:
0e:ec:18:76:36:45:58:50:91:9b:6a:4c:41:45:cb:02:79:54:
45:30:ed:37:e0:01:bd:e7:53:b0:5b:8e:34:cf:75:da:4d:e7:
40:ff:3e:ba:bb:47:af:55:7b:ff:ce:e8:21:bc:74:9a:64:ea:
04:61:3d:a4:99:e8:59:a6:d1:c9:cf:2e:7a:93:98:60:c1:0e:
16:1f:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:16 2025 by rpki-client