Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ZnDO_rePAntHP4QbrCH1ZMUFU88.roa
File: ZnDO_rePAntHP4QbrCH1ZMUFU88.roa (raw, json)
Hash identifier: 1CLa3f+zgWechWD7s3i+GnMCuHYkW66e1IkcJJq2REw=
Subject key identifier: 66:70:CE:FE:B7:8F:02:7B:47:3F:84:1B:AC:21:F5:64:C5:05:53:CF
Certificate issuer: /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Certificate serial: 0194B074F088A80BE3870783C6E75FB18C90
Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ZnDO_rePAntHP4QbrCH1ZMUFU88.roa
Signing time: Wed 29 Jan 2025 05:07:21 +0000
ROA not before: Wed 29 Jan 2025 05:07:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51292
IP address blocks: 91.230.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:74:f0:88:a8:0b:e3:87:07:83:c6:e7:5f:b1:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Validity
Not Before: Jan 29 05:07:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6670cefeb78f027b473f841bac21f564c50553cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:ff:63:e2:b0:7a:c7:0f:cf:9f:e4:1b:b6:
9f:cc:0f:7c:9b:9c:49:aa:9a:50:af:d4:14:11:f5:
ff:da:4a:2c:ca:14:b7:c2:ea:51:f6:eb:a7:de:93:
91:63:81:af:d7:ac:86:b6:fa:64:57:86:60:65:78:
b2:ce:02:ae:f2:ff:ff:11:68:34:2b:6e:96:77:8d:
0e:3c:65:05:ae:48:a2:fc:55:d3:55:e1:db:19:c3:
ea:99:78:92:09:cc:1c:3c:50:40:b7:4f:42:bf:60:
ab:76:3c:23:c4:8b:b2:0a:47:e5:0f:65:5a:b5:9b:
9f:96:c0:48:f5:19:d7:e6:4d:a3:77:c0:6b:eb:99:
9a:71:3c:b6:9c:c4:57:ab:e0:29:23:a1:8b:8c:e7:
9a:ca:b8:6d:ab:9d:10:e5:03:f7:26:a3:72:f0:fd:
54:6a:64:b6:4c:ff:f7:56:0e:dc:71:c0:6d:2c:f3:
d1:4c:43:de:0f:0f:f7:79:64:fc:d6:ab:8f:a5:22:
e0:03:54:22:28:30:c6:0e:fe:b6:49:15:0b:25:41:
cd:f0:3c:e7:90:7c:a7:1d:2f:af:98:7c:09:9f:fa:
c4:bc:8e:de:2f:b4:4f:2f:ab:f2:29:04:29:50:81:
51:64:ce:d0:e0:f2:c2:25:fb:0c:cd:ed:e9:19:82:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:70:CE:FE:B7:8F:02:7B:47:3F:84:1B:AC:21:F5:64:C5:05:53:CF
X509v3 Authority Key Identifier:
keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ZnDO_rePAntHP4QbrCH1ZMUFU88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.26.0/24
Signature Algorithm: sha256WithRSAEncryption
28:88:fc:8f:86:25:98:04:44:bb:72:1e:51:bc:e6:4f:22:77:
b8:44:65:65:72:05:86:64:32:be:e3:a0:13:a0:49:cf:a0:89:
e8:2e:f7:9d:00:0a:15:d1:f9:5b:40:55:3e:f1:39:48:62:66:
10:8d:5d:1f:e3:dc:d0:e1:0f:b6:a8:f5:2d:7c:e1:18:9c:f1:
34:e7:b4:db:26:5c:46:f6:60:87:28:76:ee:57:a9:b9:08:c9:
cc:ef:44:09:43:d5:fd:50:e4:20:62:09:d6:a7:04:de:a7:00:
7a:81:6e:49:66:6a:13:ce:58:54:a5:d2:36:06:ea:1d:70:39:
82:23:24:e3:39:d7:3a:ca:27:c6:09:0d:db:17:d9:90:9b:3a:
4d:a1:59:fb:e1:b5:b3:fd:5f:04:05:03:8c:9d:55:19:e9:b1:
39:e1:e1:d6:e0:e2:8a:f3:d5:95:bb:5e:17:c6:0d:34:aa:12:
bb:62:ef:f0:b1:be:50:b3:09:3a:66:cf:64:d5:ba:f0:e3:38:
ef:38:c1:68:b4:cc:f9:25:51:f9:e3:d9:9b:89:88:f7:80:c2:
88:2a:83:77:0b:41:2d:f7:c2:dc:8a:d0:48:a2:c9:b9:62:65:
2b:d1:b5:e9:b7:a7:7f:2b:f7:1f:fc:17:9f:26:85:00:4d:64:
a8:ae:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:07 2025 by rpki-client