Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZAA-gYU-QdqWgJzwS5qMEn6up_o.roa
File: ZAA-gYU-QdqWgJzwS5qMEn6up_o.roa (raw, json)
Hash identifier: rzuciglTNCivQQe0kM3t/XpavxJWUaL4lZdeZG2nF1k=
Subject key identifier: 64:00:3E:81:85:3E:41:DA:96:80:9C:F0:4B:9A:8C:12:7E:AE:A7:FA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214432C80D4F8E5CFE8E5553C7AC2DB4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZAA-gYU-QdqWgJzwS5qMEn6up_o.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215728
IP address blocks: 81.168.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:32:c8:0d:4f:8e:5c:fe:8e:55:53:c7:ac:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64003e81853e41da96809cf04b9a8c127eaea7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:ed:fe:ad:7b:99:34:50:fe:68:06:c3:cd:
2f:ef:7a:fd:a1:bd:80:5f:a6:f9:1a:0e:cb:8c:d5:
50:a7:3c:78:6e:da:92:57:90:35:37:6c:4c:18:bc:
89:da:42:f6:f4:4f:d5:35:71:e6:d0:bc:61:f7:a7:
0f:6d:10:3b:0c:c5:84:18:ae:69:20:89:65:f8:39:
82:e3:2b:6c:9b:56:2d:9f:55:63:dd:d4:c2:25:0a:
18:6d:20:f5:59:cd:36:8e:b1:22:09:57:b3:dd:27:
8c:24:46:31:69:e4:d5:67:fc:34:8a:4d:da:c8:cb:
41:45:1c:8a:b0:79:6e:89:8b:a0:8e:f0:d5:19:66:
d6:1b:97:f0:e8:4a:3e:25:89:b5:60:7c:2d:9f:38:
d8:95:bd:d3:de:78:c2:73:af:90:42:c4:50:0b:8f:
15:49:a3:b5:e1:74:cd:ac:34:d2:b6:9a:96:8c:31:
b4:a4:94:81:bf:16:96:a3:15:c0:96:b6:3b:24:3e:
30:92:46:7a:ef:ee:4b:73:4d:ad:50:79:fd:a1:84:
50:c7:70:65:9d:50:d3:84:a6:4e:cf:5a:f8:b5:68:
70:ad:49:cf:4a:a9:8b:df:96:b4:0d:a4:39:90:51:
0d:15:27:06:78:7a:c6:13:f7:11:4e:c5:06:92:7a:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:3E:81:85:3E:41:DA:96:80:9C:F0:4B:9A:8C:12:7E:AE:A7:FA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZAA-gYU-QdqWgJzwS5qMEn6up_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
Signature Algorithm: sha256WithRSAEncryption
72:49:4f:01:fc:1c:49:fd:10:f6:c5:93:9f:95:cf:12:e1:7c:
f9:5d:fb:28:26:3c:b3:d5:7e:50:99:e8:83:01:f0:32:28:32:
c5:b5:70:c6:b2:3a:e4:f9:c4:6c:0e:3d:6c:69:51:63:14:32:
03:ea:24:b2:54:49:15:65:62:75:48:00:88:fc:51:57:c9:cd:
23:49:96:8d:83:24:38:e6:88:ce:4a:f8:3f:a8:57:b6:82:72:
e1:08:50:ef:19:4c:22:6b:6b:bd:7c:af:1d:07:69:8f:92:a9:
fb:1c:7b:35:b5:5a:d6:cd:80:05:44:6d:d9:e4:60:19:72:0c:
e3:56:f0:67:37:a3:9d:b3:2c:16:39:3f:19:29:4e:99:30:a7:
61:77:bb:02:54:a0:d2:51:71:75:8e:df:88:9f:d7:7a:ed:ba:
6f:2f:fb:ed:2f:38:91:53:ea:bc:f6:26:a5:7a:57:39:0e:03:
cc:1b:b9:6c:41:ea:c6:01:9a:ba:cd:6b:31:c6:df:e1:98:fc:
9e:bf:87:28:0f:c3:9f:c6:fc:70:3f:60:34:26:59:5e:f0:78:
c5:63:62:b9:22:16:cb:a6:41:a0:25:94:85:c7:b0:bc:f2:0f:
60:aa:4a:7d:c6:51:63:4c:9b:2e:91:cd:c4:81:53:a9:3f:95:
87:ac:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:51 2025 by rpki-client