Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Znkiq1qRUp9YY0El0KLVojkyyhg.roa
File: Znkiq1qRUp9YY0El0KLVojkyyhg.roa (raw, json)
Hash identifier: iJALFPbhWi2n1eYx9cEPIde/UGtDl+kFvN9omMm/98Q=
Subject key identifier: 66:79:22:AB:5A:91:52:9F:58:63:41:25:D0:A2:D5:A2:39:32:CA:18
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F5B97261733FC8597C84AF7D557F
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Znkiq1qRUp9YY0El0KLVojkyyhg.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196738
IP address blocks: 84.40.81.0/24 maxlen: 24
95.87.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f5:b9:72:61:73:3f:c8:59:7c:84:af:7d:55:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=667922ab5a91529f58634125d0a2d5a23932ca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:dd:4f:f2:36:42:16:52:76:ff:cb:6d:a9:
19:98:a8:c8:b8:f9:23:2f:0f:48:f2:fe:bc:3e:08:
f0:60:75:51:13:cc:be:13:56:98:7a:2a:e3:ec:11:
05:4c:86:65:65:14:b4:12:9b:f7:7e:1d:01:82:a2:
fa:31:62:c7:35:40:8c:d3:2d:d5:92:f6:95:16:e8:
1f:bc:49:d8:a9:15:d9:73:0c:c1:41:51:9f:53:3b:
31:a9:d9:bd:9e:72:cb:d7:4b:65:00:6d:25:23:c7:
fd:82:35:23:82:c2:88:9d:f3:39:9a:a2:8f:ff:1d:
4c:c2:12:b9:f4:72:90:7a:cd:62:4b:26:2f:cb:25:
a9:fd:de:10:30:b3:7c:60:db:dd:a2:d2:fd:43:a8:
65:9c:08:23:1d:34:61:4f:be:95:51:ae:4e:92:96:
56:b9:bb:bc:35:d3:d3:3b:fc:0c:08:57:52:9a:48:
6f:4b:86:d8:0c:6f:64:ba:f1:74:83:60:ab:55:2f:
f2:6c:c1:a6:51:8e:39:d5:8e:e3:1a:88:93:86:a2:
3d:b7:dc:6d:45:cc:b8:7e:3e:38:c0:4e:9d:d5:1a:
54:8b:a2:2f:03:38:28:01:0f:5f:a4:c5:d1:f4:cc:
45:5c:5a:79:00:4f:d1:00:7f:20:94:41:e7:91:1a:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:79:22:AB:5A:91:52:9F:58:63:41:25:D0:A2:D5:A2:39:32:CA:18
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Znkiq1qRUp9YY0El0KLVojkyyhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.81.0/24
95.87.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:da:a1:35:57:cf:86:19:ab:fc:95:d5:31:86:5a:ef:12:bb:
4d:fd:32:58:97:c3:a8:07:3c:80:fc:b6:ea:0c:61:a8:af:82:
dd:77:bc:d1:f7:73:60:6d:74:2d:2b:62:80:4c:84:be:50:9a:
c8:c9:2d:80:ce:be:d1:6e:a1:5b:3f:45:f8:03:5c:e7:d7:ec:
01:7a:af:19:98:33:5c:cd:57:ed:5e:a4:e0:98:d7:02:1d:dd:
c4:39:e1:16:e3:76:2c:e0:7b:6e:e8:50:b3:36:c9:f9:80:59:
e7:6f:98:7d:37:4c:d5:71:db:c1:2f:a4:37:58:f0:2d:73:8e:
ca:76:b6:40:a5:a3:77:a2:6c:1b:b5:37:8f:b4:b7:07:7b:a2:
63:4d:6f:9d:1c:ad:38:57:15:12:bd:76:61:48:bd:b4:df:ce:
86:b2:4b:01:37:fd:dc:81:21:9a:60:a9:88:cb:8c:24:96:cf:
e9:4c:dd:ff:27:c2:92:23:b8:8e:cf:08:98:29:35:85:f5:8d:
34:52:fa:d5:68:f2:40:ab:fa:d6:50:b7:d3:36:d7:b6:68:00:
d3:7f:18:9b:5d:42:2d:08:74:38:00:02:1c:8b:6c:3c:91:f8:
01:cd:3c:21:38:98:61:4a:f2:52:fa:43:1f:8c:6e:62:5a:2a:
d6:69:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:43:32 2025 by rpki-client