Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/zUIN-vPBSWAo7u0peNQbk111_tY.roa
File: zUIN-vPBSWAo7u0peNQbk111_tY.roa (raw, json)
Hash identifier: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=
Subject key identifier: CD:42:0D:FA:F3:C1:49:60:28:EE:ED:29:78:D4:1B:93:5D:75:FE:D6
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 01942369A43B7C59A1E55A95DF7FD9911436
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/zUIN-vPBSWAo7u0peNQbk111_tY.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 202.61.192.0/20 maxlen: 22
202.61.224.0/20 maxlen: 24
202.61.240.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a4:3b:7c:59:a1:e5:5a:95:df:7f:d9:91:14:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd420dfaf3c1496028eeed2978d41b935d75fed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:53:a8:ce:44:2a:46:e0:0c:c3:e7:0a:dc:
99:f4:97:65:03:b5:ff:c7:5e:f4:35:c7:3a:0d:4c:
03:e7:17:b5:01:f7:d8:df:b7:c8:7d:5e:4e:d6:66:
24:66:86:d5:bb:41:dc:12:10:07:02:5e:29:99:a0:
8e:3c:61:22:1d:03:91:11:7e:f0:01:cb:47:eb:87:
40:fa:d0:92:1a:1c:01:01:e8:70:42:c6:93:d9:12:
80:72:f1:fb:3e:4c:bf:39:34:fb:46:ed:ca:2e:0a:
b8:74:7e:18:a1:b0:42:bb:fb:00:6b:aa:a6:4c:7c:
9e:35:f7:41:91:6f:16:9f:65:a1:b5:de:a3:5a:34:
d8:8c:3c:a5:36:5a:2e:e1:d7:e5:5c:dd:fa:e8:1b:
9c:76:e4:11:38:d6:b3:e2:4c:81:a2:32:f8:83:c2:
0a:e8:0d:3a:76:dc:f7:38:80:6c:fe:13:46:da:4c:
93:eb:22:fa:60:30:71:9a:6c:6b:03:86:a5:1f:3c:
e2:fe:ee:43:07:80:12:e8:59:f6:67:76:26:a5:0f:
1a:dd:38:cf:3c:91:84:0f:3d:65:3b:2b:fd:f8:88:
2b:24:14:cb:7c:60:6a:71:b5:ac:ee:b3:81:2a:f9:
ae:5c:d0:e3:46:33:4d:fa:d4:0a:5f:00:3d:9d:26:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:42:0D:FA:F3:C1:49:60:28:EE:ED:29:78:D4:1B:93:5D:75:FE:D6
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/zUIN-vPBSWAo7u0peNQbk111_tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.61.192.0/20
202.61.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:1b:7a:b2:bd:ba:f2:e6:f4:61:c0:a1:6f:46:88:ed:32:75:
52:36:c9:ff:b1:32:8d:3b:d9:9c:35:20:c0:9f:33:9a:9e:6b:
80:67:95:04:be:b7:74:8f:08:42:ed:4a:32:c4:51:a9:49:a3:
74:0e:59:be:83:07:eb:c3:24:32:25:7f:46:36:d8:0a:08:57:
08:22:5b:e2:a9:be:30:73:41:f3:9b:3f:01:4c:e0:65:fc:f0:
43:5a:de:8b:8a:d3:bc:e7:7c:4b:56:07:84:fe:1e:2f:e5:80:
a5:ea:ef:16:ac:d6:9b:c7:b9:f7:35:d2:7a:0c:af:50:7c:c4:
a1:3b:78:f2:13:16:93:7d:1f:a3:bd:d5:0e:34:5b:a7:8d:42:
9a:71:be:a6:a1:2d:06:54:e5:99:ba:58:95:a2:2b:ff:0a:70:
f8:51:25:92:c6:41:82:71:d7:a8:76:0d:49:14:04:c0:4a:c4:
3f:a9:98:55:dc:0b:3b:5b:de:a1:6f:fd:dd:1b:6c:0f:e3:d5:
d1:70:74:6b:a5:b1:0b:5b:7e:a5:62:f7:62:fe:1e:1d:c2:6a:
20:d4:fd:2c:42:a3:30:10:0d:5f:6b:8e:ce:78:83:ab:43:c6:
ed:8f:b3:01:dc:d9:72:9f:32:a3:9b:ed:bd:13:25:b7:63:5d:
99:25:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:36 2025 by rpki-client