Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/zsnDAUQ9OWrVKsrixNM64UubPEE.roa
File: zsnDAUQ9OWrVKsrixNM64UubPEE.roa (raw, json)
Hash identifier: 8s4+Ar8E4qPe68moGEzfuFe9b4Z1MTv6KsbZ2gEaOyo=
Subject key identifier: CE:C9:C3:01:44:3D:39:6A:D5:2A:CA:E2:C4:D3:3A:E1:4B:9B:3C:41
Certificate issuer: /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial: 019427479EB7EF702E21239E28D86D726CE3
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/zsnDAUQ9OWrVKsrixNM64UubPEE.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2107
IP address blocks: 88.200.0.0/17 maxlen: 17
92.244.64.0/19 maxlen: 19
95.87.128.0/18 maxlen: 18
109.127.192.0/18 maxlen: 18
141.255.192.0/18 maxlen: 18
149.62.64.0/18 maxlen: 18
153.5.0.0/16 maxlen: 16
163.159.128.0/17 maxlen: 17
178.172.0.0/17 maxlen: 17
185.13.52.0/22 maxlen: 22
193.2.0.0/16 maxlen: 16
194.249.0.0/16 maxlen: 16
212.235.128.0/17 maxlen: 17
2001:1470::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9e:b7:ef:70:2e:21:23:9e:28:d8:6d:72:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cec9c301443d396ad52acae2c4d33ae14b9b3c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:40:6e:6b:4f:ec:f4:ac:58:c8:3a:7f:07:
d0:cc:cf:b2:ec:aa:6a:cd:14:1b:54:a3:f9:24:1a:
3a:b7:80:4e:be:2e:5a:8b:ce:33:19:33:54:54:02:
02:dd:60:94:52:dd:2c:5a:92:4f:db:6f:9e:45:27:
39:a8:44:ce:78:2a:91:54:8c:0a:40:8a:37:b6:e6:
86:32:83:36:57:8f:10:c5:b8:fc:49:b6:d9:0d:af:
39:8a:a3:1f:66:d7:1b:cb:f6:79:fe:6f:62:a7:11:
7c:df:aa:a2:fb:b9:fa:4f:0d:73:47:52:b8:97:9c:
ef:a9:92:c5:a2:15:63:6b:38:85:42:ee:d5:bc:bf:
3b:22:0b:69:2c:da:a2:54:0b:39:1c:4e:6b:d7:70:
08:67:7d:2c:f6:5f:12:4f:51:a1:53:23:e8:80:eb:
2e:59:d4:1d:75:54:5e:c4:f9:1e:59:26:b0:7d:ad:
d9:a2:6b:06:13:7c:a0:58:3f:4e:ba:c7:d0:a9:23:
9d:9e:22:2c:c3:01:43:f7:34:97:93:5f:22:53:16:
74:2b:de:fe:57:eb:b1:49:65:32:06:97:d6:9c:23:
9d:85:61:be:64:26:08:e2:9d:a2:e8:18:89:40:d8:
51:f7:11:73:de:36:3f:b3:01:f3:4a:4f:57:f5:95:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:C3:01:44:3D:39:6A:D5:2A:CA:E2:C4:D3:3A:E1:4B:9B:3C:41
X509v3 Authority Key Identifier:
keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/zsnDAUQ9OWrVKsrixNM64UubPEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.200.0.0/17
92.244.64.0/19
95.87.128.0/18
109.127.192.0/18
141.255.192.0/18
149.62.64.0/18
153.5.0.0/16
163.159.128.0/17
178.172.0.0/17
185.13.52.0/22
193.2.0.0/16
194.249.0.0/16
212.235.128.0/17
IPv6:
2001:1470::/29
Signature Algorithm: sha256WithRSAEncryption
2b:a5:9d:48:48:0b:f7:05:ac:c6:4b:c0:60:84:2d:74:93:c0:
a5:79:4b:bc:ff:ee:ce:fd:63:c8:e5:9c:3b:a5:69:22:72:3d:
22:fc:bd:1c:da:74:9f:24:54:c7:9e:4e:b1:f8:5a:f5:b9:1a:
bc:7b:04:62:a6:cc:c2:5e:ce:90:92:4e:91:fc:87:ca:21:4d:
09:b0:2d:e5:c9:9a:a1:8d:10:08:67:47:bd:ff:6e:7e:3d:a9:
75:af:a7:7f:6d:c1:ac:23:1e:a5:de:29:07:0d:ff:28:df:23:
c5:54:ac:01:9a:b8:69:65:54:1b:55:88:13:f5:78:f1:94:c7:
90:8f:9f:c4:08:8d:5f:09:59:9e:85:4f:86:d6:34:3a:e4:f4:
6b:ca:ab:a2:f0:63:9e:6f:46:f0:46:8b:c0:35:b7:6d:a0:0d:
e3:d2:82:1b:31:99:4b:2a:c6:00:fa:4c:7c:20:2d:5d:16:97:
68:a1:99:d3:d4:61:83:a2:07:63:12:cd:07:cf:33:c0:02:15:
b7:47:e8:a0:81:58:6b:fc:7c:1c:8d:3a:db:49:70:2d:a8:69:
52:29:80:e8:ec:62:1f:4f:4f:a1:25:11:00:18:9b:79:d5:2d:
0e:f6:ef:6b:9d:d6:fa:01:44:9e:a2:23:ff:24:0d:f6:97:fa:
21:cd:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:46:31 2025 by rpki-client