Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/zBqyJEl1ZTI7fL6gM2motFXrSRM.roa
File: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (raw, json)
Hash identifier: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=
Subject key identifier: CC:1A:B2:24:49:75:65:32:3B:7C:BE:A0:33:69:A8:B4:55:EB:49:13
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 01942521853BA6A8C85306DEBF38C7B13920
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/zBqyJEl1ZTI7fL6gM2motFXrSRM.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62371
IP address blocks: 194.0.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:85:3b:a6:a8:c8:53:06:de:bf:38:c7:b1:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc1ab224497565323b7cbea03369a8b455eb4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:af:07:95:d9:79:b1:82:04:30:5e:e9:23:
f5:7f:cb:0d:4d:23:66:44:d5:3b:7a:c9:45:a4:5f:
bb:f6:1d:07:d5:7c:e6:67:8f:34:47:62:2d:1c:9b:
77:6f:74:46:bd:07:2a:3f:3a:2f:b2:a8:3e:74:21:
92:c2:06:c6:c7:e8:3c:c3:89:cc:e6:7d:ea:50:39:
92:d3:89:f0:b1:5e:9e:f8:73:ae:36:81:4d:2f:f8:
8d:c1:d7:ba:73:43:80:10:7f:56:3a:41:9f:22:47:
78:75:e4:6f:16:0d:86:26:c5:1d:53:81:2e:07:bd:
e3:6a:87:2e:ac:e7:f0:6c:e8:c6:9b:cf:74:3f:6b:
8c:d2:37:eb:47:3f:47:73:a5:08:05:d7:84:91:c0:
e9:9d:34:ca:5d:f0:4f:0e:e2:0a:64:e8:c3:a2:90:
13:51:d8:dc:cd:14:66:82:a5:2a:21:2b:26:43:1f:
d7:dc:ac:0d:3c:a9:5f:cf:eb:0d:18:01:78:12:fb:
15:c2:2a:2c:da:2a:5c:3e:24:b9:25:7e:79:0a:9f:
51:cf:1e:5d:34:79:74:10:54:f2:42:62:ca:eb:86:
34:09:75:7e:91:72:fc:e2:40:73:29:ec:1f:64:af:
4b:39:8a:26:30:b9:da:5b:7b:3d:d1:13:71:d1:85:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:B2:24:49:75:65:32:3B:7C:BE:A0:33:69:A8:B4:55:EB:49:13
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/zBqyJEl1ZTI7fL6gM2motFXrSRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.147.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:2b:b8:0a:57:b2:1a:71:b6:c9:fc:39:4f:7a:7d:a5:10:9d:
7e:88:17:66:e1:ab:8c:12:50:32:49:2b:fe:b9:8a:cb:59:71:
3e:2f:ae:19:b9:aa:c2:2d:dc:a6:99:3e:8a:06:48:19:8a:dd:
7a:c8:e2:ea:67:9a:09:22:f9:b2:92:68:b2:f3:76:53:66:ab:
60:f7:55:cc:e4:5c:cd:82:40:e2:0a:65:89:1b:5f:f7:47:3c:
fb:fe:83:8a:02:73:c5:13:8f:3e:57:46:fd:e1:07:5a:43:a0:
9b:7c:43:aa:3e:09:81:db:b6:e0:40:f7:b9:2e:de:17:79:cd:
17:73:ac:c3:9c:a2:34:d5:18:de:06:3f:fd:d2:e8:79:b2:2e:
12:37:36:3d:f2:97:74:51:4c:4f:db:70:3f:d8:54:8e:31:d9:
0a:bf:fb:e4:17:50:c0:c0:8f:37:cf:2b:7d:4e:78:48:e3:68:
db:cd:09:11:25:99:83:9a:4d:11:24:8a:fc:7f:f0:ac:71:d1:
b9:db:c8:1c:b5:a0:81:47:d7:c8:cf:69:77:e7:53:23:b8:ba:
76:09:3b:16:19:ff:ba:04:ba:31:98:c1:d1:0c:b3:df:11:51:
a8:0b:a3:ad:1d:60:a3:64:23:0f:69:44:aa:26:d1:4e:e9:d6:
96:1f:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:08 2025 by rpki-client