Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa
File: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (raw, json)
Hash identifier: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=
Subject key identifier: CC:11:A7:1C:F0:14:11:65:82:9B:FB:B7:8E:D1:93:46:AA:7D:C4:7B
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 0194214457C84D86EAB9BBDF18E208AA3DAC
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2830
IP address blocks: 185.106.226.0/24 maxlen: 24
194.126.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:57:c8:4d:86:ea:b9:bb:df:18:e2:08:aa:3d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc11a71cf0141165829bfbb78ed19346aa7dc47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:78:e0:61:33:7b:ee:c2:66:4f:04:1e:b7:
a8:dd:ff:02:c0:12:28:62:00:83:24:6d:db:02:5a:
8f:89:f0:a4:f1:78:35:a8:05:b7:7d:af:b8:ec:a0:
ea:17:54:57:d1:da:ba:15:71:c5:10:ce:e2:68:d5:
2a:2c:b7:78:68:6a:2b:06:5d:e2:62:9d:c4:4c:2c:
46:1a:6d:37:58:42:55:2f:a6:dd:cd:34:78:cd:d8:
4e:77:2e:b6:58:86:94:94:71:fd:ee:ed:44:00:10:
0a:f5:37:a3:2d:7c:bc:d7:88:cd:02:ea:b8:cf:43:
00:3c:3d:34:34:97:e7:79:94:52:66:c9:5e:ec:f7:
d9:0a:1a:65:bb:de:44:55:7a:43:5a:e9:5e:61:e4:
9e:c5:29:d2:7b:e7:83:89:e3:53:75:45:9d:82:c1:
c4:30:ab:a2:1b:c4:6f:01:19:15:ad:1f:13:3a:02:
a0:62:0c:19:7d:e3:cb:18:2a:cf:fc:ec:c1:19:b8:
58:6b:18:04:5c:bb:c6:7d:6e:35:29:57:10:57:cc:
d2:13:b5:04:ab:af:aa:95:2b:84:66:54:cf:91:79:
0b:f9:4d:22:19:fb:35:ba:89:11:05:6f:83:85:a6:
19:71:00:28:b2:42:d5:d9:b4:24:3c:d5:ce:ef:a2:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:A7:1C:F0:14:11:65:82:9B:FB:B7:8E:D1:93:46:AA:7D:C4:7B
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.226.0/24
194.126.130.0/24
Signature Algorithm: sha256WithRSAEncryption
93:14:59:d3:4b:d7:9c:66:00:24:a3:9a:1b:d3:2e:81:d3:8f:
e8:aa:43:db:74:f1:ac:39:89:cc:77:bd:4e:ee:60:e4:bd:65:
3f:9d:d9:e1:1f:36:6f:cc:0a:33:a1:1e:0e:20:31:c0:90:50:
bf:d9:67:9b:f2:18:59:e8:9c:62:fa:a1:02:8c:f7:fc:31:43:
ff:c1:85:fd:cd:83:9b:eb:ac:e2:a9:0e:2e:b4:53:b1:b7:2b:
3c:18:d2:bd:6a:f6:00:53:12:cb:ef:41:55:d2:f8:ec:c7:54:
3b:7f:44:be:fc:42:4c:cf:93:f1:6e:37:45:97:1d:a6:6f:af:
80:75:8d:08:d3:b4:99:cf:1e:66:6c:e0:08:dc:13:c0:2d:72:
8c:c7:55:07:16:6f:10:82:63:65:e2:d5:d1:e9:cd:a2:33:0c:
c0:3d:8a:0b:96:39:9f:a4:02:df:c0:c9:d3:ea:90:c3:ba:9f:
c3:4c:4b:c9:4a:30:7d:ef:21:e9:9b:41:5b:c9:67:cd:e1:a1:
ba:fc:10:f1:a3:74:0a:26:b0:ca:fc:cd:b0:a0:fa:a3:36:a4:
6b:d7:22:75:5b:32:dc:a9:c2:a8:ec:97:e0:af:11:06:53:2c:
f7:10:ef:b7:9c:ec:74:ea:05:e1:f1:a5:34:a5:4c:85:a1:3b:
5b:bf:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:04:55 2025 by rpki-client