Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa
File: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (raw, json)
Hash identifier: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=
Subject key identifier: 64:ED:F0:65:F2:E8:DD:8B:31:20:58:E9:60:5D:E5:11:ED:46:57:2E
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 01941F8CA159101800B00C9B871BBF6F1D8F
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39737
IP address blocks: 193.142.205.0/24 maxlen: 24
193.142.223.0/24 maxlen: 24
193.142.234.0/24 maxlen: 24
193.142.241.0/24 maxlen: 24
195.64.152.0/23 maxlen: 23
195.64.168.0/24 maxlen: 24
195.64.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a1:59:10:18:00:b0:0c:9b:87:1b:bf:6f:1d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64edf065f2e8dd8b312058e9605de511ed46572e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:f9:43:b0:7b:08:31:4c:14:dc:df:eb:d4:
0f:3a:07:8a:81:1b:8c:f2:a8:43:ce:a2:c8:f8:39:
62:39:4c:bf:34:75:eb:27:7a:1f:18:8f:05:ac:8a:
8b:27:09:a9:22:a8:63:dd:7d:83:01:89:46:32:89:
46:c9:78:55:f3:cd:cf:ee:61:68:c8:ce:e1:80:6c:
ee:34:1b:b1:69:e9:f9:a4:98:0b:6c:0e:ba:8b:d2:
d6:97:63:62:bf:8b:3f:80:93:dd:35:d8:5f:c6:0d:
72:61:3d:6f:91:ed:b3:cb:e3:59:4f:1a:a5:6a:51:
ba:11:3a:58:26:ca:f0:57:04:60:e9:38:b1:04:70:
f2:cf:83:24:48:ab:52:0a:d4:3f:5c:a5:1a:e3:6a:
4e:9f:34:39:c0:52:1a:2b:63:31:34:25:db:d0:d5:
39:eb:d8:ed:29:9d:fb:a0:e9:94:57:5f:5f:0a:36:
8e:42:ed:6a:8e:91:05:5e:d6:8b:a5:7a:51:6d:4c:
7e:48:df:f1:c6:22:6a:c6:2c:72:6f:c6:f8:65:e0:
4d:15:32:68:9d:57:03:62:1f:9d:03:0d:ba:48:76:
98:0e:c7:84:c6:c4:ff:6d:b1:1b:87:93:7e:38:a0:
fc:0d:c8:ff:17:18:b5:73:41:36:df:c7:af:d7:88:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:ED:F0:65:F2:E8:DD:8B:31:20:58:E9:60:5D:E5:11:ED:46:57:2E
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.205.0/24
193.142.223.0/24
193.142.234.0/24
193.142.241.0/24
195.64.152.0/23
195.64.168.0/23
Signature Algorithm: sha256WithRSAEncryption
66:13:14:29:7e:49:d6:1c:81:f4:68:03:29:0a:a7:3a:d2:63:
b6:2c:a0:29:02:46:c1:e7:af:b2:ef:3a:3c:b4:c8:20:c4:79:
00:c5:37:39:b2:c3:b5:d6:18:b7:81:67:3f:43:67:03:69:e3:
cc:28:a0:dc:a6:f0:3a:e3:8c:3a:7c:73:8c:28:3b:22:ad:d2:
48:b3:fa:d4:ce:c5:31:49:38:77:13:9e:2e:87:6f:6f:9a:b1:
32:33:23:ac:da:6f:19:56:f8:f1:fc:d9:a4:a7:cf:d9:c0:59:
b9:82:28:b7:40:0b:fc:77:e7:7d:e7:4d:2e:44:16:5b:03:e3:
29:e5:11:0e:14:cc:6c:09:1d:85:ab:6c:6e:5d:9e:65:2b:f6:
53:ad:6f:0d:70:9a:6a:b6:f9:c2:4c:89:71:08:b0:c0:6c:bf:
f9:6c:f8:d9:fe:06:45:e1:d2:08:78:b6:11:7b:65:34:0a:3d:
b2:ca:52:58:9f:49:b8:99:2a:8f:33:cb:96:5d:84:c5:af:95:
7f:7a:2a:ed:10:62:1a:e7:15:35:33:dd:cf:08:8c:bb:24:b9:
e0:78:43:51:a0:9c:a8:3c:62:e9:91:35:67:45:0b:76:9c:f3:
60:88:70:72:39:d3:22:95:f4:f2:a7:29:d0:8a:ae:5e:ae:16:
cb:20:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:35:49 2025 by rpki-client