Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/ZzRb0bQEgazL7HxVYHs8-oAp0ls.roa
File: ZzRb0bQEgazL7HxVYHs8-oAp0ls.roa (raw, json)
Hash identifier: oc13tf5lv2iUwPb0W8XfA1fFyqRxMCHq6DS/PUWkQrk=
Subject key identifier: 67:34:5B:D1:B4:04:81:AC:CB:EC:7C:55:60:7B:3C:FA:80:29:D2:5B
Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial: 0194228D44855C0F1F9AA2AA4AEE8277858B
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/ZzRb0bQEgazL7HxVYHs8-oAp0ls.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39275
IP address blocks: 80.79.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:44:85:5c:0f:1f:9a:a2:aa:4a:ee:82:77:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67345bd1b40481accbec7c55607b3cfa8029d25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:90:91:6e:9e:cd:3d:aa:9c:22:ba:10:a8:
98:af:c6:8b:4f:9f:64:f8:fd:be:c6:e8:1f:9b:c1:
e7:2c:6e:05:a9:54:f2:46:68:ab:f8:36:29:32:56:
71:ec:82:42:87:79:db:ea:cc:f9:01:2a:d2:d1:7d:
20:e3:dd:7a:d4:94:fa:51:2b:de:f0:22:71:d5:be:
ad:56:18:4d:59:13:e2:63:ed:9a:e1:ee:79:4a:7d:
d8:46:71:a9:7b:2b:db:ba:e3:15:2b:f7:7e:7d:6b:
fd:98:c8:fc:7c:57:7f:f0:67:8e:0c:72:ce:28:11:
50:2e:74:27:58:b3:30:b1:1e:75:1e:12:5b:8e:99:
54:cf:58:f6:17:8c:13:e2:11:43:09:e6:ff:f0:06:
ab:20:00:de:a3:df:75:45:4e:c2:08:4e:32:ad:0e:
30:05:03:fd:98:9b:c9:00:05:50:d0:51:2e:1d:a9:
1d:0f:75:38:b0:b0:e8:7b:f6:f4:79:49:06:77:c9:
aa:c8:99:e4:8f:08:53:fa:91:0f:d3:39:b6:a3:ce:
2c:b4:78:67:87:c1:23:09:ca:3f:07:f2:0a:49:e1:
7f:1f:8a:77:09:5f:af:94:5a:dd:f2:b0:86:06:12:
b2:0d:72:a8:74:58:15:42:19:4b:13:d5:62:0d:30:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:34:5B:D1:B4:04:81:AC:CB:EC:7C:55:60:7B:3C:FA:80:29:D2:5B
X509v3 Authority Key Identifier:
keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/ZzRb0bQEgazL7HxVYHs8-oAp0ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.153.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:ac:b7:f2:62:20:73:48:26:9f:31:44:69:bb:49:b3:3d:e8:
33:92:91:25:f9:46:e0:7f:b5:9a:e1:a7:5a:a4:a8:20:96:fe:
35:5b:bf:a1:ee:7c:52:20:a8:99:2d:02:83:92:46:54:38:bf:
7a:52:ef:43:fb:1f:1d:13:b5:8a:4f:72:01:52:a6:27:48:1a:
46:9f:15:0d:87:75:61:eb:a7:b0:d4:8d:d4:4b:91:eb:f7:f1:
71:8a:16:aa:db:46:09:81:e1:d8:e8:53:91:49:a9:6a:df:6e:
1a:ea:46:55:b8:19:23:e0:2e:50:38:55:bf:3f:16:a1:29:60:
fc:5e:89:a7:72:5a:d8:ad:51:d6:5b:fb:78:e8:3a:7a:2c:d0:
86:a6:d7:1e:cc:ab:f6:f4:63:ab:a2:ef:0e:f6:10:3b:4b:05:
d8:22:1b:ee:a3:b8:82:96:1c:6a:a0:18:c1:a9:ea:9a:3f:c5:
82:45:5c:46:8c:62:94:76:00:cf:1a:b4:b5:af:c9:04:76:06:
d7:b3:cf:b5:7f:90:a6:16:a1:ef:e3:1c:b0:e3:e5:fd:6f:ae:
6c:31:52:9d:f4:dd:da:ed:6e:05:be:6f:b1:b8:52:a8:76:37:
f6:25:97:d5:63:dd:2a:b2:ba:62:bd:ef:e1:04:8e:5f:6f:8e:
a7:d1:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:55:35 2025 by rpki-client