Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zHV2g0gyTsE6L5gDdzkEOn0vR68.roa
File: zHV2g0gyTsE6L5gDdzkEOn0vR68.roa (raw, json)
Hash identifier: o/w62PdDplZCXJY9JjJzd7OiLLTjaV8OFzpEoAC054A=
Subject key identifier: CC:75:76:83:48:32:4E:C1:3A:2F:98:03:77:39:04:3A:7D:2F:47:AF
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA3263D0C235EC68D44A6CDAC0364C
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zHV2g0gyTsE6L5gDdzkEOn0vR68.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34847
IP address blocks: 86.107.76.0/24 maxlen: 24
89.33.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:32:63:d0:c2:35:ec:68:d4:4a:6c:da:c0:36:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc75768348324ec13a2f98037739043a7d2f47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:77:fd:30:a3:69:38:a3:0d:78:7b:80:ef:
d9:83:cc:e3:f4:e5:cc:79:2d:27:d4:9f:8b:cf:4f:
f8:90:43:07:89:72:71:0e:94:69:7f:23:fd:41:cf:
af:1a:bb:e1:7f:e7:a3:6e:da:ef:3c:60:ce:88:ac:
b9:8c:e5:7a:15:4e:08:d8:5a:ec:90:11:03:38:08:
14:ba:cf:87:0a:af:48:be:f9:dc:10:e6:69:34:e2:
b8:c2:c9:b8:8a:35:c3:81:aa:e4:b7:90:31:c3:db:
ce:12:ea:36:a9:15:bb:19:8e:31:2d:23:86:c6:31:
50:4c:45:4c:04:4d:5a:a6:64:72:d2:e8:e8:c3:0f:
f8:64:46:71:9e:a7:38:be:9f:5f:ba:9f:6f:f7:64:
93:80:3e:52:34:f9:93:2a:c7:1d:e0:bb:6f:bc:5a:
97:0b:86:5b:86:c7:db:c1:e5:a5:dc:16:d9:56:0e:
b6:25:23:ff:65:f7:61:c8:2f:a9:ea:d3:ae:fc:6c:
48:3c:dc:7a:b5:98:be:ad:b7:11:d7:a5:d1:7f:27:
ee:1a:c3:63:e5:6c:38:92:50:8d:87:ae:f4:e6:0f:
2a:da:a9:08:85:3a:1b:06:d7:3c:ac:a4:a8:35:df:
1a:f5:00:5f:32:7e:c5:d0:de:e1:cc:8a:ad:21:03:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:75:76:83:48:32:4E:C1:3A:2F:98:03:77:39:04:3A:7D:2F:47:AF
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zHV2g0gyTsE6L5gDdzkEOn0vR68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.76.0/24
89.33.119.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8b:e2:17:58:f2:14:b6:e3:c3:a9:68:94:3d:0b:18:90:87:
07:44:e4:8b:45:79:ca:30:91:03:be:e1:d7:93:22:37:6a:44:
a6:5b:4d:14:e5:61:98:d9:d8:56:6c:44:24:ef:0e:e5:8b:8d:
6b:7d:d0:37:bd:25:81:6c:b8:45:9d:3c:ca:b7:66:97:f4:a3:
5f:30:43:4a:84:5e:3d:c4:ba:2f:5d:bc:ee:a6:98:45:bf:93:
db:41:c8:79:d6:3e:3e:23:8c:6b:ef:8a:88:6b:e0:fc:a8:68:
5f:9c:ca:99:26:bd:a3:44:5f:b9:21:60:f8:a9:bb:97:2e:88:
e8:f8:5b:45:0a:64:ec:7b:3c:76:28:64:27:1c:8b:19:e7:4f:
97:2b:a7:69:f9:5a:c3:38:30:33:1e:7c:03:2b:36:68:a8:b1:
8c:63:e3:69:c3:17:41:a5:e7:3c:41:aa:9a:a6:59:eb:e5:65:
38:e0:cc:cb:69:e1:a1:1a:12:aa:38:ab:f0:5b:da:5b:b5:fb:
ed:8a:3c:bb:d8:20:01:57:7e:d7:66:9e:b7:ae:0c:1a:1c:10:
14:8e:30:85:44:34:d8:23:e8:66:65:ff:09:80:69:f0:fc:7d:
b7:29:2a:80:e6:3b:06:d2:1b:d2:92:d8:95:a4:04:a6:4c:57:
d5:bb:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:55 2025 by rpki-client