Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZPmPziQ8ew5JbXls8OZAF9GBIfc.roa
File: ZPmPziQ8ew5JbXls8OZAF9GBIfc.roa (raw, json)
Hash identifier: zr+zBbkvUoGcJMpiXl6E29xOQwyNq97xZFqZZtegU/Q=
Subject key identifier: 64:F9:8F:CE:24:3C:7B:0E:49:6D:79:6C:F0:E6:40:17:D1:81:21:F7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422201A4141F736CCA2F26860403FBCA0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZPmPziQ8ew5JbXls8OZAF9GBIfc.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42874
IP address blocks: 171.22.102.0/24 maxlen: 24
171.22.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1a:41:41:f7:36:cc:a2:f2:68:60:40:3f:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64f98fce243c7b0e496d796cf0e64017d18121f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:dc:83:b1:bb:b1:97:de:3f:25:ab:bf:b2:
12:32:d2:95:a0:19:aa:f2:31:90:6e:61:39:ce:e0:
22:df:b2:c4:ae:b3:72:46:ea:3f:3d:fd:76:72:f7:
1d:6a:e8:4c:31:5d:3d:00:0f:38:51:cc:07:c6:40:
e4:e6:53:b2:b6:1e:2f:78:e5:07:8c:c5:be:67:76:
e2:28:cd:fc:3f:9b:f4:5d:ef:02:54:5c:08:15:e8:
4b:94:01:2a:c3:7e:6a:00:4e:78:f9:df:1c:0b:02:
59:89:34:ce:0e:ec:2a:19:01:38:60:9e:ca:77:25:
48:78:bd:37:82:f1:0f:8c:cc:8e:31:41:dc:05:79:
fc:dd:af:bb:60:71:14:66:95:2f:9f:b0:8f:34:42:
a9:7f:87:6b:da:28:62:b6:f2:66:a0:3e:50:40:2b:
31:88:2a:1b:c9:0d:ac:2a:00:c5:2d:b5:23:95:0f:
ca:87:95:11:cd:3f:9a:5c:f3:28:49:b8:74:26:92:
23:5f:fe:04:30:ad:88:fa:1d:02:9e:2f:77:71:d8:
0f:10:59:95:15:34:6d:b1:55:50:64:d4:25:18:94:
32:da:ea:87:89:07:cb:85:f5:0e:5d:e8:58:0b:21:
e4:fd:2d:57:b7:53:70:0c:c4:58:74:81:97:dc:85:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F9:8F:CE:24:3C:7B:0E:49:6D:79:6C:F0:E6:40:17:D1:81:21:F7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZPmPziQ8ew5JbXls8OZAF9GBIfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.102.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ee:4d:41:a0:1f:c6:7a:1e:0f:63:8c:21:27:88:a9:3c:f7:
e3:cb:bb:62:cd:03:7f:e6:06:58:b1:0e:aa:f3:39:b9:f2:38:
1d:ce:dd:67:d6:92:7e:60:f8:99:65:f8:d9:82:d1:e4:07:30:
e6:3f:44:03:44:c9:16:7f:04:d2:d8:d3:30:47:ac:12:a9:91:
fc:f0:f2:f0:7b:10:7d:c8:65:b8:e9:e5:0e:56:c0:10:a8:be:
4b:d5:ef:24:d0:a3:e2:df:91:aa:72:32:d4:97:24:22:8d:f3:
90:fd:f4:90:fe:d1:a3:b5:43:e1:ea:e3:36:84:c6:1b:de:8a:
54:32:17:e4:78:35:d3:50:4e:7a:92:da:54:55:75:8b:b0:9f:
e4:c9:24:0e:2b:7f:cf:64:e9:83:bb:1c:2e:1d:59:00:2c:19:
0c:bf:18:f8:bc:cd:6f:33:46:88:39:eb:e5:95:e2:e5:29:83:
b6:1b:51:d4:70:ba:ed:9e:a4:d0:c2:47:af:d7:78:de:bf:79:
d7:86:7c:b7:e9:f1:45:7f:7e:9c:5b:b2:02:e3:71:38:bb:55:
b3:46:25:8d:e4:a6:ab:ac:49:33:84:65:9d:0c:a6:1d:52:c6:
5e:a0:18:a4:8e:89:9d:a0:44:7d:1c:c0:12:ff:23:75:d9:4c:
50:10:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:56 2025 by rpki-client