Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZyFKJmVVPE1mRe3vCapSmGG9Bxc.roa
File: ZyFKJmVVPE1mRe3vCapSmGG9Bxc.roa (raw, json)
Hash identifier: AUnA8QZHJjP6g2aepyYGjr477cwOhj2D7+afnp3KXSM=
Subject key identifier: 67:21:4A:26:65:55:3C:4D:66:45:ED:EF:09:AA:52:98:61:BD:07:17
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B247870732618F48A7829E24970901
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZyFKJmVVPE1mRe3vCapSmGG9Bxc.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205361
IP address blocks: 45.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:47:87:07:32:61:8f:48:a7:82:9e:24:97:09:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67214a2665553c4d6645edef09aa529861bd0717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:62:c7:b6:ae:15:7c:ec:5e:c7:f9:43:16:
ce:c8:25:bc:2b:b9:62:0d:21:02:ce:82:8f:bc:3c:
7d:6a:98:75:d5:ba:90:f6:cd:8a:4e:0b:21:1d:52:
42:c5:d6:6e:5f:0a:d2:97:6e:bb:60:85:64:56:75:
f3:ea:a8:9e:7c:5e:a8:c2:36:de:b7:9c:9f:4f:59:
f1:a2:3c:45:73:66:4f:12:27:31:5e:c4:c8:00:d6:
41:90:e8:38:a7:26:2d:67:1e:12:fb:30:7f:60:09:
e3:db:00:d1:d5:58:d3:23:2e:2b:67:11:e1:23:cb:
c1:12:2d:9e:4e:85:68:4e:e9:d8:09:f6:0f:40:0c:
9e:35:f0:88:e5:58:7c:86:04:d7:b2:c4:54:bc:61:
4f:56:b7:06:f6:fd:14:a2:77:d0:8b:cd:e9:18:a2:
d0:43:ad:95:aa:33:74:08:28:60:9a:4a:f7:72:1a:
d6:b3:cc:a4:cc:c0:44:f8:4d:a8:c5:68:6a:aa:d4:
4f:fd:4e:6e:0a:c5:3c:f0:da:cc:cd:8f:57:f5:7a:
71:0a:02:5d:2d:53:cd:36:b2:9f:80:58:87:ba:f6:
a8:9f:ee:16:06:20:1c:bb:ca:03:aa:4e:48:b2:c2:
c8:1b:30:39:d2:ff:b5:bf:77:bf:8f:d7:6d:2f:3f:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:4A:26:65:55:3C:4D:66:45:ED:EF:09:AA:52:98:61:BD:07:17
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZyFKJmVVPE1mRe3vCapSmGG9Bxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:9b:b3:27:aa:84:cb:d5:60:da:fc:a8:65:13:fe:e9:aa:7d:
16:1e:a5:90:a4:83:2a:ec:30:d5:1e:6f:f7:0c:11:3d:8d:5e:
da:c5:56:a8:9a:d3:38:80:6d:51:c4:6c:5d:8e:60:bb:e1:cc:
a3:7c:10:66:72:82:d5:d2:36:26:9e:88:85:d2:8c:6e:69:f4:
cc:56:31:40:cf:34:13:f4:aa:e2:85:48:92:e6:ed:c2:81:b7:
78:f3:57:34:2c:0b:6d:b7:d1:99:ba:9f:17:77:7c:60:1f:87:
6b:6e:19:90:ca:57:15:6f:5f:fc:ce:5d:86:33:0f:49:00:1c:
f2:1a:ea:c2:3a:32:c7:5a:c8:da:ee:91:96:63:9a:2a:c5:e8:
08:18:92:9e:b4:51:05:8f:18:70:24:78:f5:12:6f:c9:72:34:
42:87:d5:2c:b7:5c:ee:97:c8:4e:4b:71:86:65:03:21:49:07:
47:2c:44:1f:9d:bf:d7:2a:bf:2d:d1:f2:d5:bd:ed:fc:07:c8:
7a:2f:2f:d6:af:d4:6d:1a:ef:5d:17:83:85:ae:b6:10:bf:55:
25:44:00:4c:0e:4a:fd:d9:e6:f2:7c:02:4e:89:98:31:53:d4:
8e:15:b1:80:87:3d:ce:32:e9:ac:94:39:34:e6:97:0c:83:73:
b6:d9:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:09:04 2025 by rpki-client