Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/zoiZaQy1X6uA_fb18sRqVooSN48.roa
File: zoiZaQy1X6uA_fb18sRqVooSN48.roa (raw, json)
Hash identifier: +vAm2rSORgkYs00N65eNpRyENjf55QylaufRqfKzfJ0=
Subject key identifier: CE:88:99:69:0C:B5:5F:AB:80:FD:F6:F5:F2:C4:6A:56:8A:12:37:8F
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 01942067CDA78B017A3C3C025F48D24ED560
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/zoiZaQy1X6uA_fb18sRqVooSN48.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49524
IP address blocks: 185.82.224.0/22 maxlen: 22
2a05:9540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cd:a7:8b:01:7a:3c:3c:02:5f:48:d2:4e:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce8899690cb55fab80fdf6f5f2c46a568a12378f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:d6:f4:b3:f7:04:81:b2:96:3c:c8:ff:7e:
e2:dd:ff:45:df:37:ab:31:18:72:7b:88:22:f0:a5:
85:27:e6:25:88:cd:5f:f0:52:f4:7f:a8:37:f7:11:
42:d7:32:6e:90:ff:e3:2c:47:4f:3a:cc:bf:6d:24:
ea:64:0f:37:9b:90:01:3c:e1:b6:7a:2c:97:f8:15:
31:30:70:00:07:7f:9e:89:d9:df:10:df:7b:28:f1:
be:ce:b6:6e:45:81:af:f0:42:6c:8e:c2:37:42:9c:
34:46:62:6f:72:fe:d7:cf:67:72:64:44:f3:8c:b3:
98:7e:85:6e:a4:d6:51:1f:f2:c9:14:62:01:4d:44:
32:45:e7:59:d4:7b:d4:76:a3:81:7d:7a:64:f0:66:
a8:da:1f:0e:13:e0:69:29:01:25:56:d1:12:21:b2:
c6:92:0d:6f:91:2f:ee:a7:cd:0f:35:23:df:e1:54:
96:01:a6:67:dd:ae:0a:46:4f:a7:1e:6f:38:22:ba:
ac:9a:a3:92:8d:72:10:d2:1a:2d:ed:ad:ef:a1:0b:
8a:11:fa:fc:2c:a6:f9:52:e9:29:8a:c7:69:6c:a7:
7c:db:dc:fd:2f:2b:cb:88:62:d3:2e:da:06:e4:fe:
3e:b9:2a:38:cd:b0:cf:e7:ba:de:64:07:60:6f:74:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:88:99:69:0C:B5:5F:AB:80:FD:F6:F5:F2:C4:6A:56:8A:12:37:8F
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/zoiZaQy1X6uA_fb18sRqVooSN48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.224.0/22
IPv6:
2a05:9540::/29
Signature Algorithm: sha256WithRSAEncryption
76:8f:c0:48:73:85:6a:7d:5d:4d:8e:68:f6:fb:d8:b3:6a:df:
9e:7f:dc:ec:6d:9d:b4:6d:30:ee:d1:29:68:dd:ee:5a:90:c3:
b0:2e:8b:60:df:72:11:f8:67:31:b8:3a:30:75:41:ea:35:1d:
33:26:91:35:dc:fc:ae:ec:ba:50:e9:fc:81:55:c2:79:b1:75:
6b:5e:a5:84:26:c3:a8:12:35:3f:d9:87:78:1e:0e:d0:24:86:
7a:b7:cd:13:33:72:40:d0:e7:62:d5:f7:cb:77:30:ee:d3:b0:
47:43:79:11:ee:14:6c:dd:33:d8:24:05:79:ad:23:eb:13:30:
69:af:46:5b:25:d1:ec:41:0f:e9:91:b0:37:41:99:34:90:00:
a8:7b:4e:4b:1b:a2:73:fc:b7:86:bd:23:c2:f1:44:f9:7f:b7:
c3:64:cd:28:c8:73:aa:b4:0d:33:0f:81:67:7b:7d:ff:58:9d:
b1:50:75:0a:ef:5d:2d:0e:cb:25:5a:ee:f4:95:dc:00:77:1e:
35:c8:2f:8d:73:29:92:b7:d0:af:ad:4a:e7:bd:dd:93:62:dc:
9e:cd:a6:18:f9:b5:a1:8b:76:52:51:be:09:d6:e9:f5:4e:06:
de:f7:27:c2:df:48:b9:28:31:f3:3b:60:6e:b4:82:cb:cf:e2:
0a:d8:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:57:59 2025 by rpki-client