Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/zTObV0m25qLongdbMc1UK5cdDfM.roa
File: zTObV0m25qLongdbMc1UK5cdDfM.roa (raw, json)
Hash identifier: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=
Subject key identifier: CD:33:9B:57:49:B6:E6:A2:E8:9E:07:5B:31:CD:54:2B:97:1D:0D:F3
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 0194236A4245954943C554D9D606DC764498
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/zTObV0m25qLongdbMc1UK5cdDfM.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210789
IP address blocks: 212.6.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:42:45:95:49:43:c5:54:d9:d6:06:dc:76:44:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd339b5749b6e6a2e89e075b31cd542b971d0df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:63:23:88:32:4f:3b:c5:5b:c2:d5:bc:ba:
c6:c3:05:f9:fd:3a:e5:a1:42:08:e1:a7:c0:21:65:
da:17:ce:15:0b:8a:97:d1:0a:0a:d5:52:2f:7b:c6:
3f:0e:3d:0c:54:90:38:ae:90:db:0b:c5:52:63:b5:
0d:f1:cb:cf:07:d6:c9:0e:4e:e8:b4:ae:a8:76:44:
fd:8a:6d:b3:8a:8b:26:df:bc:cf:45:b3:e0:6e:1b:
7f:03:d6:4f:be:e5:51:03:89:2e:04:67:30:88:ce:
aa:90:3b:ef:aa:cf:ee:b1:6c:68:1e:cf:91:c7:aa:
60:0a:3f:79:9b:d7:5f:9f:e2:92:03:9a:62:68:5c:
2d:c5:39:d6:4a:0c:4f:5e:cd:2f:5a:0d:db:aa:5f:
0d:68:1f:f3:ba:a3:1b:41:12:52:a3:1e:03:20:f3:
1c:df:f6:6b:a4:1b:ef:16:6f:6a:f2:44:d7:d8:16:
b3:7f:95:65:0e:4f:36:03:18:89:f4:00:20:ca:b9:
3b:19:e9:26:b6:3a:5f:62:60:52:10:40:b9:3d:9f:
dd:08:49:0e:0c:38:ca:c9:94:3b:fd:9e:49:eb:5a:
40:ce:66:30:c7:01:ad:56:9f:ab:af:99:25:5c:e2:
4c:d4:a2:ba:81:5e:ee:0f:87:de:96:83:3f:ac:b6:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:33:9B:57:49:B6:E6:A2:E8:9E:07:5B:31:CD:54:2B:97:1D:0D:F3
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/zTObV0m25qLongdbMc1UK5cdDfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6c:ec:08:92:45:77:95:1c:7c:66:d5:e2:5d:98:22:10:8e:
6a:bb:08:bf:47:7b:32:8e:27:95:60:6e:95:1c:51:5e:a8:2e:
67:2f:c4:94:9b:3a:6a:6a:a3:a5:03:3a:93:9f:13:26:55:55:
89:79:2c:89:fd:c5:99:ef:84:5d:6c:10:78:a4:a8:0f:6b:eb:
fe:8d:83:06:26:82:b1:9d:6e:2c:01:90:9b:30:0f:87:23:6f:
c0:70:a5:44:f0:02:e3:ce:75:1a:6b:b2:5a:d7:7a:86:b1:86:
b7:f5:cc:3b:66:b0:6d:38:fe:50:e1:3c:52:42:23:07:90:4e:
6b:e8:34:f1:4f:81:03:34:18:92:f8:49:11:79:41:f7:a0:4f:
ef:c1:ab:16:8c:c0:41:12:a8:b1:d4:8b:7f:79:b1:b6:93:a9:
41:3d:3e:c0:31:86:f3:a0:a7:0a:01:66:3c:8d:ad:67:ea:a5:
77:d6:4a:d7:4d:4c:aa:45:fc:82:33:a2:8d:87:ae:f3:47:d0:
5e:91:b3:e0:97:d1:b4:c1:bc:60:a5:10:35:4d:45:5e:c7:3e:
3e:d0:fc:76:a4:8b:87:11:09:45:47:10:d7:b0:53:ff:6d:09:
ba:5d:bd:c5:e1:84:39:61:39:d9:77:aa:14:42:06:31:eb:8c:
9b:54:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:09 2025 by rpki-client