Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/Zi0r7nxkEIJEAa8gbmvvEGPUYyQ.roa
File: Zi0r7nxkEIJEAa8gbmvvEGPUYyQ.roa (raw, json)
Hash identifier: VyaLyM0DmPadq6oON235ghfJkFa7ZjwSaZEQVAEmM6o=
Subject key identifier: 66:2D:2B:EE:7C:64:10:82:44:01:AF:20:6E:6B:EF:10:63:D4:63:24
Certificate issuer: /CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Certificate serial: 019425FC1B70B6E9D32105D97F6470C77BEC
Authority key identifier: 90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/Zi0r7nxkEIJEAa8gbmvvEGPUYyQ.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207936
IP address blocks: 194.124.234.0/23 maxlen: 24
194.124.234.0/24 maxlen: 24
194.124.235.0/24 maxlen: 24
2a0f:3cc0::/29 maxlen: 32
2a0f:3cc0::/32 maxlen: 32
2a0f:3cc1::/32 maxlen: 32
2a0f:3cc2::/32 maxlen: 32
2a0f:3cc4::/32 maxlen: 32
2a0f:3cc5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1b:70:b6:e9:d3:21:05:d9:7f:64:70:c7:7b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=662d2bee7c6410824401af206e6bef1063d46324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:60:8c:ea:3c:b1:d8:56:43:c3:15:b6:be:
4f:38:55:31:f6:fa:f7:16:10:2d:33:7c:19:6f:35:
55:7e:f5:71:09:e3:2b:64:b1:73:6b:b4:ef:85:51:
74:b0:04:78:2e:0d:53:84:73:ee:34:29:de:d8:bd:
50:39:4f:d6:5b:99:7d:61:68:4c:f3:53:3c:89:b5:
0b:aa:1c:ee:a7:80:10:6f:d8:08:23:d5:a3:a4:3e:
df:57:ea:69:b4:7e:ec:83:e5:55:a2:f2:ad:35:2c:
85:d7:98:4f:b1:f7:10:b5:6e:76:09:5d:b4:10:6f:
31:2d:6c:da:94:11:64:5d:1b:62:23:92:4a:de:fd:
1b:15:54:ce:c9:9d:16:8f:28:d2:4e:3d:cd:25:cd:
cf:58:15:a2:16:76:4c:2c:7d:a1:76:29:5e:b8:61:
45:55:72:14:9b:cd:6e:a3:b8:31:fe:04:dc:e9:8f:
00:55:eb:95:c3:b4:41:60:04:e0:1a:9d:52:6c:99:
4c:29:dd:fd:cc:29:15:93:3e:ba:0c:29:eb:f6:7e:
fc:9b:f6:fc:45:4b:4f:5d:75:6d:5c:63:2a:ab:51:
d2:23:ad:9a:c1:10:da:3b:8a:ea:9d:8c:e0:bf:a8:
5d:b9:82:07:13:c3:21:9c:1d:4b:40:f9:52:f9:88:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:2B:EE:7C:64:10:82:44:01:AF:20:6E:6B:EF:10:63:D4:63:24
X509v3 Authority Key Identifier:
keyid:90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/Zi0r7nxkEIJEAa8gbmvvEGPUYyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.234.0/23
IPv6:
2a0f:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:6a:a5:0d:ed:61:4a:a5:29:15:c4:9f:f0:91:7a:d6:09:2e:
cc:3d:72:fb:d2:9c:aa:d0:7d:54:21:c6:3f:6b:c4:4f:fd:6d:
37:6f:03:dd:d5:2e:40:d5:34:43:dc:1a:b3:b6:01:3c:a5:2b:
7d:62:37:82:41:8c:1d:b0:ae:f6:49:31:34:81:47:c3:aa:e9:
e3:d8:03:53:d2:13:ca:cf:42:b3:51:c5:da:ff:b2:aa:9e:fc:
38:95:48:71:10:25:fc:29:47:28:90:ef:6d:80:46:57:bd:a2:
9c:0c:ce:8c:e6:f5:4e:20:e6:fd:2c:f3:46:34:71:8f:e0:2a:
37:60:4e:2d:2d:7c:80:f6:71:09:ae:ec:52:6a:04:8b:5c:fc:
3d:86:0d:fe:66:24:76:f2:bc:0a:0e:3c:0a:e8:d6:e8:83:c4:
3a:ef:a9:57:7a:03:9c:e5:14:a3:f0:d8:24:e7:bc:2d:6f:20:
bd:df:78:25:04:4a:08:e3:dc:aa:43:b6:f9:15:6e:a4:cf:94:
0c:99:86:e1:dc:db:7b:69:5b:fa:4a:79:55:c0:9a:09:15:4e:
9a:de:64:c0:6c:6e:ae:a4:70:f5:c9:e7:ac:67:16:67:85:29:
eb:2f:85:35:a2:8d:fc:8c:2e:e5:e5:55:65:28:ce:08:04:9f:
33:20:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:53:35 2025 by rpki-client