Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rzvnurtViaMdkP6fk8ExKqXmmXk.roa
File: rzvnurtViaMdkP6fk8ExKqXmmXk.roa (raw, json)
Hash identifier: eaNS5ckKEK5MtFd5/iikJB9iDkLdnmSIThj5fOYmZ98=
Subject key identifier: AF:3B:E7:BA:BB:55:89:A3:1D:90:FE:9F:93:C1:31:2A:A5:E6:99:79
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274863BA6B95999B2BB179ABF8F8C8A1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rzvnurtViaMdkP6fk8ExKqXmmXk.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57630
IP address blocks: 192.71.0.0/24 maxlen: 24
192.165.3.0/24 maxlen: 24
192.165.134.0/23 maxlen: 23
192.165.152.0/22 maxlen: 24
192.165.157.0/24 maxlen: 24
193.180.92.0/24 maxlen: 24
193.181.34.0/24 maxlen: 24
193.183.20.0/24 maxlen: 24
193.183.49.0/24 maxlen: 24
193.183.59.0/24 maxlen: 24
193.234.3.0/24 maxlen: 24
193.234.94.0/24 maxlen: 24
193.234.116.0/22 maxlen: 22
193.234.144.0/24 maxlen: 24
193.234.205.0/24 maxlen: 24
194.14.57.0/24 maxlen: 24
194.68.181.0/24 maxlen: 24
194.71.0.0/23 maxlen: 23
194.71.219.0/24 maxlen: 24
194.103.3.0/24 maxlen: 24
194.103.16.0/23 maxlen: 24
194.103.95.0/24 maxlen: 24
194.103.145.0/24 maxlen: 24
194.103.197.0/24 maxlen: 24
194.132.120.0/24 maxlen: 24
194.132.164.0/24 maxlen: 24
194.132.166.0/24 maxlen: 24
194.132.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:63:ba:6b:95:99:9b:2b:b1:79:ab:f8:f8:c8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af3be7babb5589a31d90fe9f93c1312aa5e69979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:04:1a:59:f6:2c:00:8b:65:ab:b5:0c:25:
55:cb:bc:e1:28:0e:1b:d5:91:93:13:63:9e:5d:a1:
9c:1d:22:fb:42:3f:ca:27:12:0f:00:6c:5f:46:c8:
04:22:bd:9a:14:08:1c:d3:11:a9:41:41:05:9a:84:
a8:39:51:12:54:30:79:e7:06:8c:a8:a0:0e:34:58:
a8:83:ab:21:b7:e3:97:df:30:9c:d0:60:65:c2:99:
a1:11:60:05:eb:15:2f:fc:1f:9b:22:5e:13:1a:1b:
f8:79:d9:c6:b3:4d:9f:8f:05:4e:40:0c:bb:77:a8:
23:a4:b9:78:26:12:af:cb:64:7b:cb:34:1e:25:d6:
fa:6a:92:9f:fc:4e:03:c2:5d:d7:06:1b:61:e5:94:
d0:22:c2:4b:ce:b3:2a:07:d8:1b:eb:62:d1:96:cd:
27:f5:55:ea:90:3e:88:c7:01:2b:3c:0b:67:8f:36:
ca:39:7d:2d:37:98:df:ab:81:dd:81:12:92:4e:70:
92:5f:08:ad:9a:0f:d7:a7:b5:a5:45:e9:ec:a0:f8:
40:a1:44:3d:de:b5:01:8e:9b:1f:d9:02:5b:69:62:
12:31:09:8e:59:28:4a:f6:93:71:a0:e1:ed:32:86:
74:bf:b5:f5:57:18:80:23:52:77:e3:a7:a6:e1:be:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:E7:BA:BB:55:89:A3:1D:90:FE:9F:93:C1:31:2A:A5:E6:99:79
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rzvnurtViaMdkP6fk8ExKqXmmXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.0.0/24
192.165.3.0/24
192.165.134.0/23
192.165.152.0/22
192.165.157.0/24
193.180.92.0/24
193.181.34.0/24
193.183.20.0/24
193.183.49.0/24
193.183.59.0/24
193.234.3.0/24
193.234.94.0/24
193.234.116.0/22
193.234.144.0/24
193.234.205.0/24
194.14.57.0/24
194.68.181.0/24
194.71.0.0/23
194.71.219.0/24
194.103.3.0/24
194.103.16.0/23
194.103.95.0/24
194.103.145.0/24
194.103.197.0/24
194.132.120.0/24
194.132.164.0/24
194.132.166.0/24
194.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
79:16:22:8c:ee:eb:fe:38:93:6c:2f:f3:28:57:bc:ae:16:48:
89:23:63:53:94:1a:b1:d0:fa:75:79:48:79:d6:cc:f9:d9:1a:
50:20:d4:50:7f:47:00:8b:1a:4e:33:2f:5c:44:56:87:dd:d2:
f2:cc:af:c1:01:ca:a7:de:1e:e8:a7:03:df:33:25:9e:e2:eb:
95:15:fe:5e:1c:98:e3:36:98:dc:39:89:e8:28:72:dc:a5:d0:
f9:81:5e:a5:85:3a:85:c1:33:6d:52:28:d4:f5:99:f7:1f:d3:
02:a1:2d:a9:fe:ff:cb:52:45:96:e4:c1:96:7f:3d:6a:95:c9:
5f:26:3e:39:24:34:1a:2e:28:96:4e:02:1a:fb:2d:6d:4b:d1:
83:f1:d7:aa:18:c1:c4:c9:6c:80:eb:25:b7:c3:e8:d6:dd:a6:
70:f2:0d:67:70:84:70:25:87:db:a2:66:60:b4:d0:e2:07:28:
44:64:f6:b1:59:88:4f:0a:71:b5:b3:75:53:01:78:77:7f:a7:
01:92:55:73:85:91:9c:55:51:d7:5c:6a:f9:ae:6c:b2:28:de:
3b:8b:7e:ab:b5:02:50:2d:4f:66:94:79:aa:86:ab:c4:7a:98:
c7:3f:5b:1e:51:24:e1:9e:d5:48:89:63:14:74:94:04:24:03:
da:63:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:51 2025 by rpki-client