Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa
File: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (raw, json)
Hash identifier: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=
Subject key identifier: 65:FD:C0:9F:70:59:D2:D9:33:83:32:C5:DD:86:6E:37:34:6A:71:A4
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0194228E204D7E9975FCE2DDB18C550A6455
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203425
IP address blocks: 185.105.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:20:4d:7e:99:75:fc:e2:dd:b1:8c:55:0a:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65fdc09f7059d2d9338332c5dd866e37346a71a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:f2:d6:8f:ee:f8:36:08:9a:f7:0b:8f:f4:
c8:33:33:c8:fe:68:29:5a:ec:5b:45:c6:40:b0:08:
78:1f:e6:e4:6d:5c:0d:8a:08:f4:5f:48:cf:48:11:
d4:d4:13:12:57:d1:96:a9:ca:f4:b5:6a:32:24:b2:
c8:12:2c:3d:a4:cb:3b:b3:bf:15:94:7e:dd:80:3f:
04:cb:00:92:bc:44:80:1a:e1:ee:c9:02:ae:74:e6:
c7:0d:5e:17:35:0a:16:22:b1:85:7b:f2:81:ee:fe:
be:98:18:b5:5e:f9:93:26:ae:de:73:94:fe:57:7d:
16:b1:13:88:31:3e:f6:d4:51:2a:29:1d:be:2a:46:
e7:0e:e7:11:25:b2:e1:ab:3c:70:03:a0:7d:2d:d4:
e9:d1:5d:d7:6f:73:8c:91:5a:e9:37:88:fc:a4:c3:
a3:ea:e0:ed:26:76:a7:d5:a8:b1:9c:73:7a:71:cc:
98:85:9a:59:f0:6a:0c:f4:2a:9a:b4:ea:53:97:2a:
f6:97:ff:56:dd:8a:ec:50:44:38:f1:87:f0:2b:3e:
f8:07:a6:d6:13:16:6e:14:64:d8:62:51:f9:9e:fa:
6b:c1:fc:1f:77:9f:74:97:0f:cd:7d:9b:d0:9d:7c:
b6:1e:3e:c8:3f:d6:61:a9:40:8d:34:36:8d:40:2c:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:C0:9F:70:59:D2:D9:33:83:32:C5:DD:86:6E:37:34:6A:71:A4
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:81:7c:bc:4c:fa:1e:1f:cf:22:06:5e:b1:80:4c:0a:3c:08:
88:c3:53:b2:fe:82:58:15:67:ee:d2:30:dd:2e:49:81:7a:eb:
9c:2a:5a:0e:fe:08:9f:09:d8:9a:fe:61:d6:6e:3f:44:5b:14:
b4:19:29:2d:ea:9c:f1:c7:02:59:8c:a1:94:a1:40:65:73:34:
c8:6f:4e:dd:b8:3e:00:f2:3d:2a:33:1f:3a:50:04:b3:7a:46:
9a:b2:25:ac:43:86:fe:ae:fb:cb:d5:f6:3f:c6:d3:3c:70:be:
99:cd:a2:c5:df:a3:5b:ca:1e:8a:fb:42:a6:62:12:07:b7:ef:
73:31:53:c6:5e:fa:6e:71:3a:7b:03:a8:5e:61:67:27:e9:e2:
85:77:57:9c:db:b9:5e:ae:14:5c:d0:8d:c4:53:49:a8:41:ce:
3f:6c:32:c1:dd:21:24:82:fb:c6:00:2d:e6:14:51:e3:2e:61:
fd:c3:c2:3b:0c:76:42:77:7b:95:af:10:2b:cf:47:1b:9d:42:
83:f0:44:00:ed:d4:3b:b0:f3:06:75:14:61:48:ee:e8:67:45:
4c:41:47:bf:99:c0:1c:07:fa:6b:5f:8b:97:59:db:47:73:ab:
69:22:2b:fd:e7:bd:01:f6:6b:13:8e:8b:e3:5f:b7:08:91:2a:
fb:59:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:00:17 2025 by rpki-client