Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa
File: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (raw, json)
Hash identifier: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=
Subject key identifier: 64:EF:66:9E:07:57:34:89:7F:54:F0:36:32:7D:BC:97:EB:15:CC:8D
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 01941FFA402FC5692D8CEC2755E9DBDDD94F
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203339
IP address blocks: 84.38.128.0/24 maxlen: 24
185.220.116.0/24 maxlen: 24
185.220.117.0/24 maxlen: 24
185.220.118.0/24 maxlen: 24
2a0b:f6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:40:2f:c5:69:2d:8c:ec:27:55:e9:db:dd:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64ef669e075734897f54f036327dbc97eb15cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6f:11:38:18:36:46:14:68:c9:a8:d3:6a:72:
61:06:61:5a:09:1f:89:c8:84:26:16:23:a6:da:aa:
f4:35:5e:d4:19:84:59:ef:3b:ce:4d:a5:65:1c:8f:
ad:75:c9:b5:1b:ef:10:88:35:5c:2c:c7:3c:81:2d:
5b:db:e8:88:84:bb:f4:74:97:98:d6:4e:1f:7c:64:
d0:62:f9:6e:d9:f9:c5:a8:3f:b3:85:de:69:5a:bc:
26:a7:4c:af:ad:b4:16:04:c4:1a:ce:94:09:ea:93:
81:98:55:dd:ec:98:41:34:a9:26:9f:be:f4:e4:92:
61:46:eb:0d:a0:b7:6c:c3:99:2f:70:0c:d7:e8:fe:
6c:c0:cd:08:70:e7:95:7c:a6:03:f5:b4:f1:c6:09:
62:a6:ad:53:ba:e3:68:b3:2b:4f:f0:da:21:6d:02:
aa:1e:58:cc:ff:21:7b:db:77:bc:90:84:b4:15:b2:
b6:34:ed:a0:6f:16:50:82:8c:42:34:d9:fd:d7:76:
16:1f:81:ff:f9:17:31:86:d8:1a:98:4a:eb:11:36:
48:fa:d7:29:07:f5:9c:4a:37:24:43:88:d5:6a:4a:
99:28:2d:f8:95:22:39:75:94:cb:e7:9b:d0:01:4a:
36:b5:8c:17:78:09:a4:b6:ee:64:a7:5f:9e:af:f1:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EF:66:9E:07:57:34:89:7F:54:F0:36:32:7D:BC:97:EB:15:CC:8D
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.128.0/24
185.220.116.0-185.220.118.255
IPv6:
2a0b:f6c0::/48
Signature Algorithm: sha256WithRSAEncryption
15:34:0f:d3:e7:bc:7a:5e:95:32:7c:d3:db:95:b7:60:5c:8a:
42:01:47:29:da:8e:83:a2:46:5a:0d:5c:9d:45:ad:2b:b2:d8:
23:c4:26:3d:87:7b:93:e1:88:29:d3:16:16:29:4e:c7:9d:2e:
64:66:d8:bf:1b:6d:3b:c9:39:88:f4:47:c6:7e:e2:6c:e2:e2:
5d:d7:72:a3:97:26:20:88:cd:b0:ea:ac:ff:90:02:60:ad:2d:
f3:a2:c9:6e:8d:7e:de:23:a1:41:28:f0:e6:b5:09:ef:7e:ff:
32:1a:3d:79:82:73:a1:fa:8f:b7:31:e2:0d:ff:da:6a:d9:57:
61:28:73:62:05:14:7a:c4:3c:96:65:b1:87:c8:7a:03:3a:e3:
88:4d:e3:1a:3e:26:74:ca:ed:4a:4d:19:5a:0d:3b:7b:ab:a9:
af:d5:ec:60:58:ff:7a:24:41:7e:f6:9c:42:ea:4c:b3:2e:0a:
72:7b:01:11:e5:e1:07:70:2e:bd:82:c7:01:9d:fb:94:ea:7b:
28:56:ab:b6:dc:89:9a:4d:a3:b7:20:9e:e5:21:a6:24:1c:65:
ff:e9:47:77:61:26:35:26:ff:78:46:27:d1:06:7b:14:1a:5c:
e3:e4:b5:16:39:38:c4:99:b1:79:1d:45:fd:9d:e9:67:d7:d4:
1e:97:c8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:51 2025 by rpki-client