Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ZvCU0K83780pIZIKt_iuhN7EffU.roa
File: ZvCU0K83780pIZIKt_iuhN7EffU.roa (raw, json)
Hash identifier: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=
Subject key identifier: 66:F0:94:D0:AF:37:EF:CD:29:21:92:0A:B7:F8:AE:84:DE:C4:7D:F5
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D62C6DD392ACCA6732C5FEEE75831F
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ZvCU0K83780pIZIKt_iuhN7EffU.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205847
IP address blocks: 193.41.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2c:6d:d3:92:ac:ca:67:32:c5:fe:ee:75:83:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66f094d0af37efcd2921920ab7f8ae84dec47df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:80:b1:33:97:14:df:2b:aa:23:ec:12:a8:
d8:60:3d:d0:a3:13:4d:58:6b:5f:1f:93:33:ab:b9:
31:c3:4a:de:f1:bf:a4:52:31:3b:8e:6b:73:ec:dd:
a0:c7:05:fa:08:fc:9c:8b:f9:12:2d:3a:ca:81:3e:
e9:4e:aa:50:45:f9:ac:ba:ca:79:ca:32:2b:d8:b2:
53:d4:a9:5f:b1:66:80:33:7b:cb:b5:6c:5d:48:b8:
c3:c8:08:b2:15:41:5f:4f:d3:de:87:60:9a:6e:85:
98:f0:ed:37:e0:1e:3c:97:1e:a0:5b:ef:4b:86:36:
7d:ed:07:a0:09:46:cb:c1:d2:98:1c:90:f3:13:55:
fc:be:b1:2d:ea:c5:06:38:33:39:c8:30:7d:68:78:
a7:35:2c:de:11:8a:66:5e:bf:69:2d:07:cc:f2:d8:
46:48:85:d8:81:4c:0a:98:c3:57:1e:e2:e2:02:fa:
ec:69:a5:df:4e:f4:f3:9e:28:7c:7a:b6:c8:c0:ad:
dc:3d:00:1f:ce:cd:c9:25:a5:c6:54:4d:c0:6a:3a:
21:57:59:7d:2c:bb:e4:4a:f8:a6:54:3c:c4:91:62:
dd:36:bf:6e:a4:4f:3d:6a:77:20:1c:b0:cb:03:67:
03:8b:a0:a6:b5:67:33:ca:b4:da:ef:d7:f0:ff:71:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:94:D0:AF:37:EF:CD:29:21:92:0A:B7:F8:AE:84:DE:C4:7D:F5
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ZvCU0K83780pIZIKt_iuhN7EffU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.216.0/24
Signature Algorithm: sha256WithRSAEncryption
67:77:4e:73:20:9e:ff:bf:41:8f:90:20:62:7f:15:46:c2:13:
29:8a:7a:6e:25:cf:c4:7f:a0:01:cf:28:a3:24:7e:ee:f5:59:
f4:39:43:89:48:5f:da:33:07:8c:3f:b6:27:cb:31:8e:e5:08:
01:00:75:19:30:3f:4d:a5:1a:f2:0e:bb:8b:ae:06:6a:da:48:
51:57:e3:b0:13:bd:53:7b:f1:da:44:64:e3:a1:8d:c3:da:6a:
e6:37:ac:cb:68:90:b5:20:bb:d8:4b:27:bc:8b:1a:07:40:7b:
89:1f:5c:3c:fa:f8:07:ec:cc:00:d8:f6:9d:e2:ca:2f:95:05:
56:66:07:eb:32:6f:18:54:a3:19:ac:82:c7:a2:0a:fc:cb:10:
ee:44:f0:e6:65:2e:f1:60:29:d5:0f:5d:79:40:17:03:b2:4c:
6b:52:61:11:a6:e9:f2:b5:7f:f0:8a:06:95:77:00:6b:64:94:
4d:97:60:65:eb:92:79:0e:d7:9e:45:b0:d3:fd:35:46:25:61:
20:23:fb:0f:1e:b0:84:17:c2:41:93:70:06:a3:80:57:61:5f:
f8:a6:ba:ed:8d:08:62:f1:9d:cb:d6:a5:d2:cc:83:1f:c0:2a:
f2:a1:da:97:f8:0b:b2:0e:6d:c5:71:95:78:5e:5f:59:bc:c1:
45:a0:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:25 2025 by rpki-client