Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/IpzjC4IjNKQlHY9yw24HUI5AwOY.roa
File: IpzjC4IjNKQlHY9yw24HUI5AwOY.roa (raw, json)
Hash identifier: crc2yZ6SMrwciJiwNJfPgyelZyMM2pzm9n4dGXes79A=
Subject key identifier: 22:9C:E3:0B:82:23:34:A4:25:1D:8F:72:C3:6E:07:50:8E:40:C0:E6
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 0194266BD624B85B0626581C8A1FC7AE9C6D
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/IpzjC4IjNKQlHY9yw24HUI5AwOY.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205512
IP address blocks: 185.233.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d6:24:b8:5b:06:26:58:1c:8a:1f:c7:ae:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=229ce30b822334a4251d8f72c36e07508e40c0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:48:78:84:fc:f0:88:59:c6:4a:dd:42:f2:
fc:ad:b9:8f:fa:e6:74:69:61:85:79:b8:55:f1:1e:
02:53:ab:eb:69:07:6c:a0:3f:fa:68:41:7e:8a:28:
17:03:d5:29:32:a6:22:80:a8:28:67:de:a5:73:9b:
6b:be:d1:b1:0b:85:ef:08:9b:5f:9b:32:35:19:16:
39:39:11:da:07:c3:71:0c:03:2f:e5:5a:44:10:5b:
e3:88:2a:c0:59:9d:ea:cb:68:3a:1f:8c:70:06:04:
86:82:ba:a4:6c:82:bb:19:27:66:02:42:de:13:61:
fc:c0:9a:7a:aa:0c:2a:f6:18:51:27:7f:04:1c:48:
c8:a3:fc:a1:e4:0e:2f:73:91:96:ef:e7:4a:e7:3b:
2e:80:59:85:8b:a7:77:55:7c:72:04:ea:b0:71:ae:
98:3d:bb:e1:32:03:68:a6:68:72:4a:6d:4d:5d:1b:
c7:c4:e8:86:d8:65:fd:68:c1:db:c6:1a:6e:45:8c:
7f:3d:66:02:2e:5a:8b:04:6e:b6:f5:63:af:80:c1:
24:e1:01:b4:45:70:8e:94:16:82:39:6d:81:37:79:
4a:5e:46:82:68:72:0b:80:75:96:4b:6f:6c:0d:b9:
03:13:fe:03:e9:ed:ef:81:ef:ce:cd:47:8b:ac:28:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:E3:0B:82:23:34:A4:25:1D:8F:72:C3:6E:07:50:8E:40:C0:E6
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/IpzjC4IjNKQlHY9yw24HUI5AwOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:da:d2:4a:9e:da:c3:46:f0:b3:eb:d4:a5:0c:11:56:63:7f:
b3:52:52:d9:71:20:22:41:cb:45:f6:fe:b8:d7:ac:29:80:da:
06:85:30:ac:65:34:b1:5a:a7:a0:e3:eb:97:ee:5a:09:7b:60:
88:61:27:b7:29:70:ba:96:15:31:94:64:91:c9:99:a8:c2:2a:
64:26:6d:e8:f4:77:6e:79:15:94:90:27:14:2d:01:ec:89:b5:
2f:f0:8f:4d:0f:75:e3:42:8c:85:12:f2:6d:60:39:79:5f:8c:
96:c9:fb:5a:fc:b9:76:6b:64:5f:6e:23:92:a4:18:da:54:19:
56:07:18:40:fe:7b:50:40:10:20:71:40:13:47:27:b2:5e:fc:
40:25:45:03:4a:c5:c1:2c:ba:a8:53:2d:b2:c8:4b:45:0b:d3:
6d:f1:11:21:28:72:2a:eb:64:f0:89:75:c0:10:3d:ab:09:40:
16:51:38:53:84:03:cc:04:16:6c:63:4c:f7:52:7d:12:b4:2a:
03:89:3e:02:81:b7:c9:7c:aa:37:cd:fb:86:9d:ed:98:d7:d3:
7c:c3:38:59:26:90:61:69:b5:52:f2:ab:81:3f:fb:dc:01:60:
84:1a:9d:a7:b9:2a:1b:3a:00:66:c5:a4:de:9c:0f:82:e3:8c:
47:4e:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:05 2025 by rpki-client