Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/Z26jB8MmkVPCobutKSYkZRRffSw.roa
File: Z26jB8MmkVPCobutKSYkZRRffSw.roa (raw, json)
Hash identifier: jtYR3qZJ5WEi/+pEZva2m9kUb9g5HMevovBDi8SuUfU=
Subject key identifier: 67:6E:A3:07:C3:26:91:53:C2:A1:BB:AD:29:26:24:65:14:5F:7D:2C
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 019421B20F799116F5B958980C11EA277B8B
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/Z26jB8MmkVPCobutKSYkZRRffSw.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5580
IP address blocks: 185.168.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0f:79:91:16:f5:b9:58:98:0c:11:ea:27:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=676ea307c3269153c2a1bbad29262465145f7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:57:68:f5:8c:31:a6:4c:7f:41:45:e7:ff:
6a:32:b9:27:4a:7c:41:ec:2b:cd:cc:5e:df:48:97:
c0:98:4b:76:c7:57:fc:01:8f:07:99:9f:bb:d5:e5:
8e:30:a5:7b:1c:a3:b4:9f:90:79:9d:97:2e:d8:17:
d4:b4:57:7d:6e:0b:20:ff:29:1b:cb:ba:d4:bc:19:
b0:61:f5:40:2b:c5:36:9f:ad:e9:61:0d:9d:0b:e0:
4b:7c:cb:4c:a4:6a:ab:b5:7d:35:01:33:4c:7e:5b:
ed:ce:f7:fc:ba:4d:05:df:2c:49:c7:77:f8:53:fd:
ca:d5:ee:ed:33:e7:c9:54:6e:36:c0:d8:01:07:87:
b0:13:5b:d0:84:51:ae:88:cb:30:fe:b6:bf:34:30:
03:d7:7d:e5:42:2a:41:a5:cf:e3:07:12:a8:6e:84:
69:90:5a:6a:cb:a4:76:13:26:50:b3:83:ad:a1:56:
38:67:ac:1b:d7:2d:5a:ea:ec:c2:51:60:ca:5f:4c:
09:5a:6e:c1:e3:af:94:ec:72:19:d1:3c:e7:98:19:
d8:3a:de:86:65:af:7c:06:1c:3c:53:46:07:2d:e6:
e4:0f:cc:2b:af:54:66:a1:6b:da:2b:2d:04:4f:d1:
3b:48:3e:49:59:51:dd:b6:93:35:a7:8f:80:64:ed:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:A3:07:C3:26:91:53:C2:A1:BB:AD:29:26:24:65:14:5F:7D:2C
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/Z26jB8MmkVPCobutKSYkZRRffSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.160.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ff:c8:c7:09:b2:95:da:8f:17:58:21:9b:13:f5:ac:bd:be:
84:4b:b6:d2:48:d1:a3:b3:0d:4d:62:ac:e9:d2:0d:8e:2d:35:
91:27:b2:f1:23:b5:33:f7:36:d2:53:07:2f:3e:ae:19:f8:e4:
b9:38:41:10:8b:f8:38:d0:f6:78:08:66:82:70:64:f5:54:68:
a4:eb:2f:d8:47:bd:58:a9:74:b2:05:4d:28:ef:7a:d7:8b:b1:
5c:ff:a6:87:6d:dd:ec:74:de:ad:79:f6:db:67:a0:9b:02:52:
d0:d8:fb:ca:7d:5f:f1:e0:cc:4e:4f:88:a5:4b:51:90:66:34:
bf:6d:13:6a:34:32:73:26:e1:82:65:4d:35:31:06:82:f5:45:
96:e9:a0:2c:08:97:07:16:33:19:9c:c1:41:7f:62:19:00:16:
e6:11:f6:ff:e7:6c:9d:e4:36:00:ee:82:48:de:20:e3:89:8c:
65:a8:91:1d:02:46:16:65:6a:b1:92:2b:13:8c:71:1b:fc:73:
69:85:be:6c:80:55:6a:fb:ca:56:69:d8:b5:de:2e:b1:88:2b:
e9:d0:3a:96:d2:b3:cb:bf:d2:f2:98:a8:61:85:58:5c:74:b5:
b3:5b:f7:59:a5:64:cb:ed:6f:52:ab:ab:ab:dd:0d:b8:83:11:
6f:97:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:53:04 2025 by rpki-client