Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/rZbNK2xJ4XhKao8afy4CimeXVSk.roa
File: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (raw, json)
Hash identifier: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=
Subject key identifier: AD:96:CD:2B:6C:49:E1:78:4A:6A:8F:1A:7F:2E:02:8A:67:97:55:29
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 0194258E55CDE1E126E5BF14C56EDFB1175E
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/rZbNK2xJ4XhKao8afy4CimeXVSk.roa
Signing time: Thu 02 Jan 2025 05:47:52 +0000
ROA not before: Thu 02 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12496
IP address blocks: 91.135.0.0/20 maxlen: 20
93.89.128.0/20 maxlen: 20
212.69.32.0/19 maxlen: 19
217.144.80.0/20 maxlen: 20
2a02:390::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:55:cd:e1:e1:26:e5:bf:14:c5:6e:df:b1:17:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Jan 2 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad96cd2b6c49e1784a6a8f1a7f2e028a67975529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:31:a4:65:36:39:ae:36:75:96:0f:08:27:
cb:af:1d:4a:fe:9a:83:3c:89:fa:a3:dc:47:9f:d0:
41:03:89:c8:aa:3d:41:1e:90:5f:64:0e:be:e9:33:
c1:6c:6b:11:4e:ef:93:b6:51:18:e1:94:e3:a0:fa:
02:a2:f6:e6:d9:7b:64:3b:71:59:ed:db:b9:1e:47:
6c:c7:56:f9:c2:28:3a:2e:89:0e:6e:d2:22:92:69:
6d:3c:be:bf:b4:8d:a1:23:ed:ad:bc:66:02:90:39:
44:55:d2:75:f6:67:b9:fa:82:e2:5c:20:4e:34:85:
fd:e1:60:88:96:21:65:77:22:e2:75:d3:f5:e3:5c:
ea:20:16:ab:84:ff:b2:ed:2d:c7:9d:3a:43:a9:a7:
99:b0:b5:79:ba:a9:f5:bf:50:4c:50:5a:1d:99:bc:
57:3d:68:dc:0f:29:08:c3:69:41:d6:61:ae:b0:37:
8f:db:14:8c:25:0b:e3:ab:a5:85:34:b6:f7:e7:df:
5c:3a:92:8a:de:c8:3e:03:30:64:f7:e1:d3:08:1b:
2d:ae:63:13:60:87:3f:62:ba:b4:91:54:44:4c:8f:
89:e4:67:bf:23:74:96:2c:64:39:64:3b:0c:18:ab:
a2:64:3d:64:fc:c7:a7:47:f9:17:4a:ed:f7:45:1f:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:CD:2B:6C:49:E1:78:4A:6A:8F:1A:7F:2E:02:8A:67:97:55:29
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/rZbNK2xJ4XhKao8afy4CimeXVSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.0.0/20
93.89.128.0/20
212.69.32.0/19
217.144.80.0/20
IPv6:
2a02:390::/32
Signature Algorithm: sha256WithRSAEncryption
77:66:08:0e:81:f6:84:70:03:c4:df:41:82:ea:85:e8:25:34:
ba:66:87:e8:18:78:23:26:be:e2:9f:0e:42:51:f0:d9:34:a8:
c1:cc:77:87:13:28:bf:c2:89:8d:37:3b:b9:8a:af:72:88:70:
c0:a6:fd:47:f8:90:05:08:3e:d6:68:fb:64:47:f6:b0:e7:02:
7c:5f:6a:7a:9f:14:41:03:dc:2e:52:86:10:13:03:2d:f9:14:
cf:ca:4c:f2:76:f6:5a:55:16:12:50:23:da:a6:52:98:61:43:
95:9f:72:d2:3a:f6:53:44:09:61:90:b4:90:02:e6:d8:e4:6a:
0b:3a:2a:f5:17:4a:1d:4b:3f:ca:51:71:50:ea:2c:b1:f9:79:
80:4a:24:f4:bc:b3:ae:60:26:ac:5e:77:73:c7:36:5d:a7:d7:
d1:35:5a:cf:bd:1c:2a:02:5b:03:77:83:20:e4:68:53:92:6a:
0f:53:52:01:32:83:d4:aa:15:82:bc:4c:76:79:ec:58:67:1f:
2d:3c:2f:55:aa:d8:1f:2d:46:d2:a0:4e:cc:47:a7:5b:71:40:
e8:e9:75:87:0a:76:43:c5:d6:be:f6:fb:f8:53:94:86:19:6b:
be:d0:d5:16:34:57:e1:b3:49:07:85:b5:82:f4:61:83:28:3a:
0b:fb:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:43:17 2025 by rpki-client