Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/Zp_o_Avy64dimsDN37AJZ_vsvNw.roa
File: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (raw, json)
Hash identifier: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=
Subject key identifier: 66:9F:E8:FC:0B:F2:EB:87:62:9A:C0:CD:DF:B0:09:67:FB:EC:BC:DC
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 0194228D851B8F646DE90235A13583270F5B
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/Zp_o_Avy64dimsDN37AJZ_vsvNw.roa
Signing time: Wed 01 Jan 2025 15:48:07 +0000
ROA not before: Wed 01 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202526
IP address blocks: 185.161.152.0/22 maxlen: 22
2a07:c5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:85:1b:8f:64:6d:e9:02:35:a1:35:83:27:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=669fe8fc0bf2eb87629ac0cddfb00967fbecbcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:59:c4:04:8b:0b:70:ec:13:11:12:f8:7a:
ba:79:c6:e3:bd:b4:87:a4:32:7a:b9:6f:51:83:10:
6a:1f:20:a0:e9:18:8d:0e:2f:39:f0:3f:e0:4f:ab:
49:b3:b5:9a:6c:db:40:af:32:4f:94:04:52:99:2f:
ff:78:e2:27:08:2a:61:03:ab:54:e8:4b:a4:53:d8:
87:59:50:ce:2c:e9:5e:18:89:ed:af:13:fd:40:76:
27:fc:f7:89:b3:6e:ef:7a:30:de:a5:84:8c:98:6c:
c2:da:9b:21:46:04:89:8b:98:0a:39:73:cf:33:6d:
c3:d1:66:c6:fb:04:8f:50:18:c4:30:a9:ab:75:c6:
f9:50:91:81:f1:7b:6e:b0:19:82:c8:65:e3:76:4c:
ad:d8:9d:0f:34:1d:b1:c5:86:ec:6f:82:ab:4f:f1:
86:dc:94:9d:56:9e:7a:06:28:ea:03:c2:df:1b:d6:
94:70:e4:50:b1:6a:bf:11:09:35:ce:0a:f4:ff:ba:
d8:22:df:d6:f4:d7:b5:b0:32:ff:e2:6a:67:bc:e2:
52:7d:1c:b5:f9:2d:72:8b:fc:7e:75:af:de:7f:86:
40:2f:cc:4a:d8:6b:6e:0a:06:10:8c:af:24:4e:c9:
82:75:6f:3d:78:51:9b:29:c3:52:4c:bc:03:7c:61:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:E8:FC:0B:F2:EB:87:62:9A:C0:CD:DF:B0:09:67:FB:EC:BC:DC
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/Zp_o_Avy64dimsDN37AJZ_vsvNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.152.0/22
IPv6:
2a07:c5c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:36:42:93:b0:db:14:00:7e:0f:14:db:d4:36:1e:b0:ad:f9:
35:fb:27:0c:74:9b:2b:68:de:e3:0a:3b:5f:d7:f6:6f:0a:cc:
5e:b4:88:eb:8b:77:ee:28:15:db:b2:52:91:28:c3:0c:2d:35:
12:7f:0c:1f:5f:f9:29:e1:2c:21:de:54:47:3b:90:a5:71:cc:
8d:d7:87:61:48:6d:0b:28:5d:09:01:a5:27:92:31:45:c6:09:
51:68:e4:84:c0:f0:21:26:8e:39:7c:29:09:bf:a1:3d:0c:fc:
b3:4c:9d:d4:35:1c:c0:ee:6c:df:4a:1a:b1:7f:b9:d9:51:21:
3f:99:b2:ad:84:e6:77:5a:59:fd:62:76:a9:99:4a:17:15:a3:
35:ba:2e:a4:ab:b8:ac:20:05:e7:0f:c7:71:2e:2a:ea:22:3c:
7b:30:92:bf:c7:da:11:d9:ca:b5:b2:39:38:b5:28:45:da:7d:
61:6d:1e:57:4b:58:c6:3d:2f:6c:93:32:90:e7:10:02:b1:94:
f3:41:9e:de:98:a2:46:fd:18:39:fb:12:aa:cf:08:73:6f:ea:
7d:a5:6b:4a:cd:c6:65:3a:e7:39:43:a9:3c:38:3a:f5:cc:77:
88:69:a2:ab:41:3b:29:69:7a:bd:05:e8:80:4b:b5:e1:31:fd:
61:64:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:29:47 2025 by rpki-client