Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/Z1JG5B9Mt6eluTWCjMRqbrT9b5Y.roa
File: Z1JG5B9Mt6eluTWCjMRqbrT9b5Y.roa (raw, json)
Hash identifier: TLo7HXxLeEPCaG6doyM8ItbshKpgy+E58r0ur/ZFDhw=
Subject key identifier: 67:52:46:E4:1F:4C:B7:A7:A5:B9:35:82:8C:C4:6A:6E:B4:FD:6F:96
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 019422204049321FA365F0DEFCAE13B13C2F
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/Z1JG5B9Mt6eluTWCjMRqbrT9b5Y.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28715
IP address blocks: 185.104.120.0/24 maxlen: 24
185.104.121.0/24 maxlen: 24
185.104.122.0/24 maxlen: 24
2a06:3000::/29 maxlen: 29
2a06:3000::/36 maxlen: 36
2a06:3000::/48 maxlen: 48
2a06:3000:1::/48 maxlen: 48
2a06:3000:2::/48 maxlen: 48
2a06:3000:3::/48 maxlen: 48
2a06:3000:4::/48 maxlen: 48
2a06:3000:5::/48 maxlen: 48
2a06:3000:6::/48 maxlen: 48
2a06:3000:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:40:49:32:1f:a3:65:f0:de:fc:ae:13:b1:3c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=675246e41f4cb7a7a5b935828cc46a6eb4fd6f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d9:9f:11:21:a5:1c:02:d3:9b:4c:4b:ca:21:
44:a9:b0:65:69:48:bf:f6:67:fb:e0:67:3e:f7:55:
7e:8f:ee:31:05:f0:34:7d:38:9c:b4:5c:6d:2d:5d:
0b:21:31:ee:39:f8:f9:7c:3f:6c:e9:98:3f:7e:4e:
8d:24:e1:5a:93:ec:45:3b:7d:50:eb:2e:e2:2b:2f:
87:4e:14:7e:21:a8:68:2c:2a:08:03:2a:73:01:33:
cc:6e:13:fe:14:fa:6d:2d:b6:a3:9a:43:fe:a8:b2:
ab:1b:e0:4a:11:9e:3a:08:40:48:ad:4e:6b:3f:17:
4b:42:0e:a4:85:ed:69:f5:b8:19:9a:b1:47:aa:2d:
10:65:2d:42:04:f8:13:86:9b:82:ec:3e:99:19:23:
db:32:85:ec:35:f4:e7:e1:f4:d2:4e:69:53:de:ff:
f9:4a:e4:67:48:25:52:47:aa:31:2f:c2:e7:09:c6:
05:54:07:94:a3:da:e6:5c:c0:9a:38:51:c0:1f:2c:
f7:3e:77:05:f5:85:e0:e4:43:ae:76:56:0f:43:fa:
37:7a:5f:90:68:11:07:2d:15:a2:d6:dc:23:e6:45:
5c:46:ab:3e:5d:76:57:ac:e9:17:ba:68:81:fa:3e:
a1:c9:83:5d:ed:47:f9:1e:d8:20:77:93:ea:0d:e6:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:52:46:E4:1F:4C:B7:A7:A5:B9:35:82:8C:C4:6A:6E:B4:FD:6F:96
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/Z1JG5B9Mt6eluTWCjMRqbrT9b5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.120.0-185.104.122.255
IPv6:
2a06:3000::/29
Signature Algorithm: sha256WithRSAEncryption
2b:08:31:33:36:c3:1a:f8:53:3d:ca:73:a3:e3:b3:bb:02:dc:
73:14:36:2c:4e:cc:46:12:71:6c:79:96:30:c1:fc:ed:1b:ad:
b5:45:75:3b:4d:58:b5:3d:7b:1f:5c:28:ce:58:a5:a8:55:fa:
01:31:31:3a:f9:2e:88:7f:ed:35:a1:40:59:f5:fa:64:84:1f:
02:dc:a9:04:86:3c:78:12:c5:87:aa:64:bc:46:0a:59:53:32:
01:a9:13:30:10:a8:d0:d1:65:93:14:51:f6:01:e3:0e:0c:77:
fe:5b:ff:5d:74:8f:33:79:3a:04:b3:19:fd:73:4a:fa:3c:86:
ec:b9:a7:c5:91:f6:d5:87:94:88:f8:20:c2:d9:92:a6:89:84:
b2:0c:25:14:bd:ce:36:f7:84:96:01:a1:59:90:7a:16:7a:52:
fa:cc:d2:21:21:0c:26:77:9e:3c:4a:96:3d:e0:07:30:6a:1d:
a7:c0:dc:13:b8:c5:76:b2:d4:e9:ec:13:2b:60:b7:e9:1a:21:
61:af:5a:d4:72:14:af:68:86:4d:fa:37:64:02:38:86:d0:a9:
e9:08:60:08:cf:c4:9b:de:5d:ab:e4:3f:30:a1:f5:e0:11:13:
08:a4:32:1e:6b:f3:a4:19:d5:48:19:7a:80:11:8f:b9:76:bf:
d0:4c:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:48:44 2025 by rpki-client