Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zLYVs8iZbj0Kczaa27La2Tss3U8.roa
File: zLYVs8iZbj0Kczaa27La2Tss3U8.roa (raw, json)
Hash identifier: VzL43iTZQM/0VF7jZ4CKgjSmNe102gnXGrK1wGWkWLY=
Subject key identifier: CC:B6:15:B3:C8:99:6E:3D:0A:73:36:9A:DB:B2:DA:D9:3B:2C:DD:4F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23C2F3E3D4BF128E02653DDB2AFF8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zLYVs8iZbj0Kczaa27La2Tss3U8.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57025
IP address blocks: 45.8.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3c:2f:3e:3d:4b:f1:28:e0:26:53:dd:b2:af:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccb615b3c8996e3d0a73369adbb2dad93b2cdd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:f3:0c:4d:30:73:a9:0d:07:a0:c4:e0:cf:
82:f3:63:6a:e7:9a:e9:ad:63:9c:cb:9d:49:84:4f:
14:e2:a9:6b:c1:fe:fa:e6:98:8f:08:e5:ad:c9:49:
3e:1f:50:75:ac:f4:67:b7:5b:36:88:de:4d:8e:59:
cf:02:5b:93:d4:17:72:28:1b:b4:2d:b6:cb:1e:8f:
44:65:53:b5:0b:ae:f5:cc:27:36:ff:2b:02:21:96:
c8:59:e8:87:69:67:f7:4c:27:e8:24:2b:b8:74:94:
cd:64:26:46:57:a2:bb:87:ee:fc:8a:6a:3f:6b:51:
e9:5d:b4:b7:49:08:3c:44:ef:db:5b:43:cc:24:01:
99:1a:85:f5:ae:6c:c2:8a:e2:5b:6a:d7:1a:17:34:
e7:56:72:15:ee:aa:87:06:ea:e3:a0:e0:7c:5f:17:
55:4a:56:a7:7a:a0:f5:2b:be:4f:41:2a:41:c6:bc:
4d:18:3b:12:8c:df:4a:ce:c3:50:7e:f4:4e:50:5e:
c9:d3:81:fd:69:27:0f:fd:75:4b:89:93:42:d2:e9:
94:98:8f:66:a4:44:d5:db:be:89:af:27:f9:fd:22:
de:c6:29:c2:fa:fb:f1:ac:69:e6:4f:e8:2a:33:7f:
4e:be:d3:11:ff:bf:4a:df:7f:fb:e1:cf:11:68:51:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:15:B3:C8:99:6E:3D:0A:73:36:9A:DB:B2:DA:D9:3B:2C:DD:4F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zLYVs8iZbj0Kczaa27La2Tss3U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.204.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c7:c6:17:05:75:18:67:d3:24:99:a8:cb:56:1a:b9:3c:20:
98:31:6d:34:e5:d5:91:aa:5b:7b:e1:ab:cd:89:4c:31:04:d3:
25:12:38:a8:d2:d4:ae:7c:6e:c0:b6:40:40:28:da:81:54:13:
89:f7:b9:24:eb:1b:8a:5c:a6:16:51:09:18:aa:46:dc:bb:93:
5a:87:4c:43:b4:f3:d6:27:5f:3a:e3:54:d6:97:be:a2:ef:75:
ea:cf:87:06:79:4a:ea:fc:40:92:04:fb:d9:f3:e5:9f:09:b7:
7b:b2:5a:88:dd:b7:ea:cf:90:9c:65:4a:bc:2f:f1:5c:d9:2f:
d2:b4:ec:06:11:e9:1f:a5:90:99:6f:04:ee:7b:44:c6:0f:c3:
27:11:23:5f:fb:ff:d9:1d:5f:fe:1e:3b:b5:79:1f:d3:fb:f2:
ec:84:6f:eb:d0:e9:e6:84:f9:ac:1e:94:85:79:0b:b4:b1:fc:
53:91:5b:d2:d9:61:fc:08:1b:f2:44:58:4b:20:d5:b3:dc:6f:
85:34:56:e9:a4:34:50:b5:b7:c9:4e:14:bb:19:d5:e9:78:f5:
19:5e:4f:2c:9f:4f:6d:e1:f7:84:94:10:83:aa:ef:05:eb:1b:
24:6a:1c:34:b3:90:5f:19:e8:86:aa:4a:ed:1a:a0:90:ee:be:
26:04:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:13:22 2025 by rpki-client