Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa
File: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (raw, json)
Hash identifier: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=
Subject key identifier: CC:DC:41:48:CF:4B:84:E4:F0:62:D0:0F:E7:63:11:1F:68:73:67:FA
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 0195C8D7A23BFBB5FA3E5BE2A0DBE409A253
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa
Signing time: Mon 24 Mar 2025 15:48:49 +0000
ROA not before: Mon 24 Mar 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 193.163.93.0/24 maxlen: 24
2a11:1f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:d7:a2:3b:fb:b5:fa:3e:5b:e2:a0:db:e4:09:a2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Mar 24 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccdc4148cf4b84e4f062d00fe763111f687367fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:7a:f3:d0:d8:f8:d8:8b:d5:df:1a:01:a1:
54:db:95:c0:e6:ca:29:a0:01:2b:41:ff:7f:1d:ce:
41:8c:60:61:c9:22:7e:d9:21:a7:a6:93:a9:4c:88:
3f:9b:f1:c0:d2:2e:03:56:db:4e:65:3c:ab:be:15:
a5:4f:54:17:fc:d1:87:ef:35:8a:c5:58:94:2d:65:
ad:9e:41:5a:bf:76:fc:7d:6b:c0:37:39:69:e5:78:
d2:05:52:73:ba:7e:ee:b4:3f:c0:4c:c7:17:73:87:
f7:0c:66:ce:e9:32:d8:a1:2b:12:b0:f0:89:9b:15:
ba:69:a2:59:db:23:40:a9:6d:88:21:ca:77:1f:a5:
ff:7f:e4:93:ca:03:e3:1a:d9:18:9c:13:81:7f:0d:
4d:dc:9e:69:6a:3b:ae:eb:61:2c:4f:22:78:69:fc:
d1:08:47:01:e6:b0:00:c7:5d:c0:04:03:cd:80:89:
92:f2:75:d7:18:01:95:4b:ce:9e:16:26:9b:06:1b:
05:2f:d4:4d:79:3e:54:fd:3a:5c:4e:94:49:5b:f8:
b0:5d:fc:b5:ab:c0:fc:58:d8:1b:22:15:d2:57:b4:
ca:64:58:66:7b:09:69:9d:4e:8b:cf:90:ff:16:73:
6c:f8:79:08:87:dd:31:28:af:ce:03:f3:28:15:b4:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DC:41:48:CF:4B:84:E4:F0:62:D0:0F:E7:63:11:1F:68:73:67:FA
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.93.0/24
IPv6:
2a11:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
4e:49:03:74:29:43:c4:b2:b5:90:ce:a9:0e:e3:ec:de:06:1e:
e2:cf:f8:44:c8:f2:c7:66:d5:0e:9f:54:dd:ae:51:16:6f:0b:
e5:4e:4c:05:32:1c:b5:83:57:50:70:75:9a:5b:78:e6:89:a6:
3d:c9:b4:fc:ef:62:92:68:3b:03:ec:1c:8a:64:02:70:8e:d0:
a3:b1:d7:9d:e0:2c:10:ba:8a:01:9f:01:a9:7d:e1:54:9e:fd:
39:67:21:65:97:e8:67:7c:bb:7b:46:c2:fe:a7:0d:41:d9:ca:
8a:31:c6:a3:e7:7a:68:3d:2c:9f:58:87:54:23:46:17:0d:a1:
5b:05:4e:18:68:4c:0b:71:98:67:b9:28:9a:9c:0c:f7:f9:70:
e0:f4:b6:2a:b4:92:31:b4:1d:8e:cb:19:98:0c:55:00:5f:eb:
2e:10:e2:0d:06:80:50:ef:c0:b0:2b:27:f2:4b:15:e9:b9:c9:
a5:38:75:56:e0:91:0c:11:12:7b:c1:8f:28:39:64:db:97:1b:
af:f3:11:e3:bf:b7:10:a4:5e:dc:ba:97:fd:95:9e:9e:fc:83:
f8:81:7d:27:15:e3:68:6d:b8:c5:39:2b:a5:42:33:4e:b0:06:
01:8a:35:29:b6:f6:95:50:9e:c7:c4:31:4e:6b:e1:34:30:25:
2f:40:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:04:03 2025 by rpki-client