Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/zgsEDv3otZRAtHyWvGAv7rzQjXg.roa
File: zgsEDv3otZRAtHyWvGAv7rzQjXg.roa (raw, json)
Hash identifier: ZyzEtsDUzNfUy6YLDq0VYYYmMcE0twVe+0tLjGTigwU=
Subject key identifier: CE:0B:04:0E:FD:E8:B5:94:40:B4:7C:96:BC:60:2F:EE:BC:D0:8D:78
Certificate issuer: /CN=6e15a4336d2f5e1bd60737de957968992a7470e9
Certificate serial: 019420D63A3DE176968C4D4D125131B839BB
Authority key identifier: 6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/zgsEDv3otZRAtHyWvGAv7rzQjXg.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34944
IP address blocks: 91.201.84.0/23 maxlen: 23
2001:678:9d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3a:3d:e1:76:96:8c:4d:4d:12:51:31:b8:39:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e15a4336d2f5e1bd60737de957968992a7470e9
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce0b040efde8b59440b47c96bc602feebcd08d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:e0:f9:1f:42:26:67:53:8b:5d:b5:a3:f6:
de:31:a1:64:56:a5:58:eb:39:19:ef:93:e7:d0:64:
c4:bb:3f:f4:9e:2d:21:d5:7a:38:66:5e:0b:5f:39:
96:87:7a:bd:35:f0:47:75:3b:21:25:ae:ca:28:ee:
52:08:1a:6a:66:6f:ff:d6:4f:3d:a4:77:49:89:38:
9e:f2:ee:94:5c:ae:cd:ca:06:4c:32:f0:65:45:eb:
de:22:d4:45:fe:f4:b8:1c:aa:0e:3c:8a:66:a7:5c:
62:f4:3b:11:7c:14:d6:30:2f:73:4a:b3:3b:75:8d:
d5:db:0b:f7:5f:4d:dc:1d:bd:de:61:67:be:42:cb:
27:61:78:f2:18:96:ee:ef:77:11:3c:1f:12:0c:5e:
ba:e8:13:de:1c:c3:c2:d0:36:05:70:58:8e:1c:84:
03:cf:dd:03:f6:a6:7b:88:e9:30:2f:87:43:47:b1:
65:dc:ad:2b:ae:8d:1d:58:71:a6:ca:dc:2b:04:01:
f4:c8:c0:8e:c8:0d:70:6e:37:a9:74:ad:74:0e:84:
eb:d6:d6:53:8b:bf:6b:d4:83:5b:09:8a:18:83:4e:
25:b4:14:40:1a:fa:61:40:1a:57:5d:58:d2:e3:ae:
0c:13:22:48:fc:82:39:64:d1:25:9d:11:55:ff:9a:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:04:0E:FD:E8:B5:94:40:B4:7C:96:BC:60:2F:EE:BC:D0:8D:78
X509v3 Authority Key Identifier:
keyid:6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/zgsEDv3otZRAtHyWvGAv7rzQjXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.84.0/23
IPv6:
2001:678:9d0::/48
Signature Algorithm: sha256WithRSAEncryption
21:7e:7e:5f:64:e4:46:98:fb:bf:21:b0:d3:21:ec:a6:ca:a3:
94:bf:70:71:d5:7a:5f:7c:75:a8:a5:82:7f:60:fc:c1:df:06:
fe:7e:2f:d5:35:84:11:0e:94:e0:2a:dd:b2:14:22:4f:c9:c9:
05:44:19:12:b4:9b:3d:51:c5:1e:5c:79:92:13:43:2f:68:29:
5d:62:af:3c:ab:ff:dc:9e:3a:08:42:4f:dc:a4:b8:99:38:65:
29:a6:07:b8:f0:4a:d4:2d:12:08:bd:0f:ec:f8:70:d4:a7:c2:
b8:c3:61:22:c1:5c:4c:20:82:cf:28:e0:e8:aa:42:8d:7a:c4:
11:69:13:12:99:0b:3e:97:5f:89:0b:c1:e5:a0:7b:61:7f:f9:
93:d6:e8:f9:c5:d5:fb:34:50:d4:7e:cb:a4:9d:82:e0:ed:f2:
b5:2e:85:19:fe:6b:a3:33:3c:ca:19:18:0e:47:a6:45:8a:e0:
6d:56:1d:cb:94:2a:a8:82:e2:fb:5b:70:d8:be:8b:26:f8:27:
84:84:8d:f5:1c:c0:9b:a0:5e:14:7a:b2:61:ce:2d:87:0e:8c:
53:b0:c4:d7:6e:d7:ec:a8:37:54:10:b5:36:cc:1d:f5:6c:d8:
0e:51:30:a8:55:71:d0:5e:76:ee:0d:35:cc:03:5b:a3:77:a1:
d4:cb:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:40:06 2025 by rpki-client