Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa
File: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (raw, json)
Hash identifier: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=
Subject key identifier: 65:BB:45:D7:2E:AA:AA:23:4D:17:D2:A7:E3:FA:30:90:95:E1:F1:B5
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 0194935972D1AC50695462EA6EEF2EC6869B
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa
Signing time: Thu 23 Jan 2025 13:28:20 +0000
ROA not before: Thu 23 Jan 2025 13:28:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 193.192.54.0/24 maxlen: 24
193.192.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:59:72:d1:ac:50:69:54:62:ea:6e:ef:2e:c6:86:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 23 13:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65bb45d72eaaaa234d17d2a7e3fa309095e1f1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:ec:8a:33:fa:c7:c3:f0:51:f6:a8:b8:35:
c3:96:d0:c8:8a:49:a0:bd:62:04:24:be:e4:48:46:
b5:39:54:c6:1f:55:2c:fb:92:0c:aa:bf:de:38:03:
9c:6a:ae:ba:de:8b:c6:48:99:70:00:cb:83:8c:0f:
08:fe:d5:24:b7:a2:c3:32:20:91:20:97:7f:a3:38:
e5:f8:17:fa:d5:e7:cc:a9:64:8d:c7:6f:4a:7b:57:
c2:e5:c0:92:80:21:cf:1e:24:09:9f:0f:ab:69:42:
24:a1:f2:43:d3:ba:f9:87:55:50:fc:2e:6e:e4:6b:
57:f3:c8:9c:fb:76:88:65:e5:28:f3:88:99:2f:49:
02:d9:72:f3:a5:88:78:3b:a0:ef:c1:0a:fe:90:45:
22:86:eb:b5:8c:92:59:3b:b8:0d:5b:b1:e8:1d:7a:
d0:ec:f3:f5:ae:13:79:15:06:a1:39:11:c7:8d:22:
a0:b4:44:15:5c:77:c7:36:95:6c:10:60:1e:5f:e3:
8f:28:d8:a6:48:9e:5e:5e:9e:46:03:98:7d:21:b5:
d5:1f:60:2b:6c:ce:91:17:2f:08:40:7f:26:f7:58:
f6:72:90:51:78:2a:da:77:c6:72:da:e5:64:c8:04:
4b:eb:b0:79:12:d5:f1:5d:fe:25:35:15:e9:68:43:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BB:45:D7:2E:AA:AA:23:4D:17:D2:A7:E3:FA:30:90:95:E1:F1:B5
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.54.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:bd:20:ca:b5:37:58:b9:6c:e5:bb:2e:15:cd:ed:cb:3e:a4:
b3:a6:c6:df:68:65:cb:0b:d4:ef:5f:f7:0d:61:ee:48:2b:bc:
10:47:c6:db:43:e6:a9:ef:78:54:12:09:9d:9e:1a:8d:20:77:
3a:26:ae:af:66:76:c6:f6:bb:71:e2:08:35:af:a0:56:74:93:
0f:74:25:de:d6:02:55:81:05:38:9c:7b:1d:28:22:5a:eb:0b:
24:1f:a3:49:5d:80:5b:51:e2:bd:d9:f8:40:73:30:4a:ed:22:
96:9b:9c:88:2e:3c:f8:b2:67:75:b3:ad:d3:dc:c8:06:02:07:
c3:e4:e6:4a:d3:fc:e0:9d:c3:cf:d8:dc:ca:16:82:27:50:d8:
85:d8:a9:f4:38:3b:67:65:40:90:bd:7b:67:ec:98:d8:8f:58:
b7:3e:e3:46:89:65:7a:77:22:fa:ac:d3:09:76:8f:ad:ef:0a:
a9:37:a0:b7:d1:3e:d9:75:e1:d5:d8:92:5e:3b:28:b0:2c:52:
4a:34:be:48:8f:03:e4:51:91:86:37:2c:e8:e5:23:b7:28:ca:
c6:87:05:fc:b1:e7:d0:71:c8:22:9b:6c:eb:83:d1:62:4c:73:
53:e1:06:d8:ad:d0:2d:fb:c0:57:2d:2a:31:fd:6b:2c:31:fa:
d3:3d:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:51 2025 by rpki-client