Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/z3cpAcwzNwvV9AKvmRvNJG_LZnE.roa
File: z3cpAcwzNwvV9AKvmRvNJG_LZnE.roa (raw, json)
Hash identifier: 7Vpbgk+uh3xjUDJDPkW52/aM1co/xcHFVzxeA+KZtTM=
Subject key identifier: CF:77:29:01:CC:33:37:0B:D5:F4:02:AF:99:1B:CD:24:6F:CB:66:71
Certificate issuer: /CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
Certificate serial: 019425FC49F154F15CB9C97DC5BA26408FB3
Authority key identifier: BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/z3cpAcwzNwvV9AKvmRvNJG_LZnE.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57990
IP address blocks: 176.112.160.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:49:f1:54:f1:5c:b9:c9:7d:c5:ba:26:40:8f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf772901cc33370bd5f402af991bcd246fcb6671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:ff:4d:b0:51:48:1f:a8:ab:66:9c:32:16:
59:62:e0:0c:7e:00:9c:d0:fd:4c:24:30:b5:02:3c:
57:1f:c2:49:a6:f2:18:db:33:27:ee:05:b3:e6:c0:
31:64:67:1a:c6:0a:e5:0d:f1:24:33:4b:4e:6c:8f:
30:cb:08:f6:f4:52:7d:92:2c:3a:f1:d5:30:b8:0c:
7e:7c:b1:e3:a6:06:8c:81:84:b2:5f:cf:85:50:f7:
3e:2c:cd:b3:65:3c:89:94:b4:64:04:19:99:3b:7d:
72:08:1d:cb:a3:12:1b:88:03:2c:4b:d0:00:69:f0:
3d:95:e4:b4:32:f1:5a:6a:64:ba:87:9b:b7:a5:7b:
55:df:58:62:58:66:87:b0:3f:23:3d:a0:d0:6e:ca:
19:3a:20:94:2f:1a:e7:5c:62:fb:1d:68:ae:b5:05:
bf:a2:2c:ab:00:01:ae:72:06:f1:2f:7b:c1:ca:a3:
d5:63:cd:b2:80:9e:90:d4:1e:c8:9a:d0:fb:86:bf:
5f:b0:58:5c:f5:ad:78:dd:9c:30:1c:01:26:ae:d2:
f7:b3:df:38:07:13:db:07:e7:31:ac:01:2c:84:76:
8c:7f:c3:db:47:57:19:15:51:33:4f:62:bb:ed:c2:
9b:e3:bc:c8:ee:2f:07:e9:c4:84:d6:ee:0d:e2:c8:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:29:01:CC:33:37:0B:D5:F4:02:AF:99:1B:CD:24:6F:CB:66:71
X509v3 Authority Key Identifier:
keyid:BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/z3cpAcwzNwvV9AKvmRvNJG_LZnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.112.160.0/21
Signature Algorithm: sha256WithRSAEncryption
07:2b:57:98:dc:1a:37:f7:20:ac:1e:0c:7e:e4:56:2c:da:5d:
9f:14:b5:30:ee:d0:41:67:84:b4:50:b2:2b:77:54:8f:3d:6e:
0f:16:a4:e2:d1:4e:88:50:ad:d6:24:44:98:8c:00:eb:31:ab:
ed:80:c8:27:28:6d:bf:45:bc:f3:53:6b:f6:56:02:a9:7d:6e:
e3:6b:74:e1:09:78:1d:38:a4:81:17:ba:0f:19:a3:ba:70:5d:
04:e7:da:af:9b:38:8f:c4:eb:91:a6:eb:b7:23:f2:93:b0:63:
31:75:c6:80:02:80:6f:ac:51:6f:53:fd:85:2a:97:c2:0a:85:
eb:64:7d:8a:fe:38:cf:8a:12:95:6b:b1:db:e4:f4:75:2c:9d:
41:87:5e:7b:f5:40:92:93:2c:d9:26:a6:97:1e:a9:8f:58:0f:
b5:c3:87:8c:06:79:c3:45:bb:0e:2f:9d:6f:40:25:90:9c:ca:
13:8c:9d:2d:1c:be:8c:9b:bf:33:b1:18:d7:75:65:22:c7:09:
9e:3d:d3:d6:5a:b6:7e:df:f5:71:82:d1:25:43:c1:48:9f:01:
ee:33:ba:04:02:40:22:27:0d:5e:e7:33:95:68:34:8d:90:b5:
0d:a7:15:73:b5:55:be:26:ad:56:9a:d4:ca:13:34:60:65:bf:
51:13:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 20:00:18 2025 by rpki-client