Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/ZZhPPwqLkt0i32K3myspkarpm7w.roa
File: ZZhPPwqLkt0i32K3myspkarpm7w.roa (raw, json)
Hash identifier: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=
Subject key identifier: 65:98:4F:3F:0A:8B:92:DD:22:DF:62:B7:9B:2B:29:91:AA:E9:9B:BC
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 01942369AE66450B7276B97084C9F18B8B76
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/ZZhPPwqLkt0i32K3myspkarpm7w.roa
Signing time: Wed 01 Jan 2025 19:48:35 +0000
ROA not before: Wed 01 Jan 2025 19:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.239.92.0/22 maxlen: 24
185.239.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ae:66:45:0b:72:76:b9:70:84:c9:f1:8b:8b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Jan 1 19:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65984f3f0a8b92dd22df62b79b2b2991aae99bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:5a:29:74:d3:a3:66:89:5a:97:9a:0f:c7:
30:3f:83:4c:16:82:84:a7:ef:50:3b:9c:77:fc:1a:
2d:13:c2:92:7d:ee:9e:0c:9b:29:fe:f7:56:b5:46:
a2:f3:df:86:e1:83:0e:bc:e2:12:df:af:63:1c:6e:
54:cd:2a:2e:79:2d:3e:c0:7e:0a:39:1d:79:99:47:
90:36:1e:13:27:06:23:5b:e3:20:05:09:00:f5:05:
4f:97:d2:60:a4:39:ab:78:4f:c3:ab:d5:69:51:e4:
ed:26:71:ad:cb:6f:7f:df:c6:41:50:0f:54:ab:e3:
a8:c7:53:67:7e:fc:ee:af:4c:6e:05:a5:f6:11:9c:
7a:6c:cd:09:71:ad:9a:88:0f:4e:ab:83:b4:18:7e:
f4:e2:94:0e:df:75:61:2c:df:aa:e2:62:43:36:dc:
89:89:ab:48:ec:0e:6c:ec:7e:5c:ca:48:b2:d7:c7:
31:8f:40:17:4d:9b:b1:0a:a7:4a:cd:bd:7e:a5:f9:
0f:c5:36:01:77:0c:8d:f7:47:a3:d3:40:76:47:85:
a4:64:55:6c:3a:b4:59:62:c1:ab:33:91:b0:2d:f7:
92:43:f1:b7:ba:1b:5c:3e:c4:6e:92:81:79:50:f3:
c9:bb:80:1f:0c:a7:cc:ec:fe:d5:3f:d4:63:e7:ed:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:98:4F:3F:0A:8B:92:DD:22:DF:62:B7:9B:2B:29:91:AA:E9:9B:BC
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/ZZhPPwqLkt0i32K3myspkarpm7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.92.0/22
Signature Algorithm: sha256WithRSAEncryption
62:38:8d:b1:0c:b3:f8:4a:8c:db:a0:a2:30:14:41:27:a2:fa:
0f:0f:d1:08:3c:4f:f5:03:e3:c9:85:92:a3:41:23:60:54:69:
1c:db:2f:88:67:15:8f:75:28:15:fa:c6:9d:4f:4c:c3:00:46:
a5:5d:22:34:59:10:a4:e8:5f:3d:9a:40:4e:00:ab:ef:f5:f7:
b7:0a:2a:1a:84:59:4c:5c:fc:de:b8:02:d6:06:5b:28:86:34:
57:1b:e6:7e:45:8e:f0:36:26:c8:eb:b2:44:f5:b8:14:07:a4:
44:fe:b5:3c:fb:ea:49:66:56:7c:02:32:80:33:36:12:9e:2e:
e1:84:03:29:64:e1:b4:4e:b0:a1:ee:11:6b:5b:76:f8:53:7e:
7c:bd:22:53:89:7f:8b:82:21:f7:5e:9d:e0:8b:eb:a6:bd:24:
17:28:46:e5:d3:0f:0a:d3:af:cb:c0:d3:15:9e:37:54:b4:bd:
61:95:cc:5d:13:38:14:e9:44:41:26:6e:39:49:85:55:89:6e:
c2:4b:68:04:6f:92:fd:72:46:ac:12:09:57:fb:a3:f4:99:27:
de:95:65:ae:ff:6d:86:a1:7d:92:b2:71:41:d3:20:dd:bb:bc:
1c:a8:6c:79:6d:a5:b2:d1:53:1e:7f:17:23:08:9c:3d:61:46:
09:56:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:12:54 2025 by rpki-client