Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa
File: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (raw, json)
Hash identifier: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=
Subject key identifier: 64:69:9F:F5:8A:80:93:84:33:96:7B:93:CD:A2:D2:50:5D:3A:66:65
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01966B2BBD778D919CB8AEDD3614F1596346
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa
Signing time: Fri 25 Apr 2025 04:19:10 +0000
ROA not before: Fri 25 Apr 2025 04:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 84.55.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:2b:bd:77:8d:91:9c:b8:ae:dd:36:14:f1:59:63:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Apr 25 04:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64699ff58a80938433967b93cda2d2505d3a6665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:c4:03:3e:5d:c9:65:2f:ae:df:e2:2f:78:
f3:82:1d:7d:29:77:b7:4b:b5:7c:39:08:9b:07:42:
8c:ba:a2:ad:34:0f:21:e0:2c:99:55:af:1b:e0:1a:
4d:7a:8b:11:3f:4e:88:2f:e6:d4:3c:49:d7:2a:fb:
84:59:6c:7f:9f:6a:7a:db:84:75:bf:50:8a:5e:c5:
2e:fb:4b:a7:f7:f1:78:67:0f:f2:1c:3c:f4:4b:3b:
df:6f:6b:ce:76:94:83:e8:14:fc:48:7d:fe:50:f4:
02:52:09:a1:19:30:f5:77:1d:0d:5a:f6:ed:68:18:
f8:52:fb:9a:e1:96:79:bf:66:38:1c:92:73:e5:7a:
7c:da:91:92:3a:e0:fc:0b:a5:ce:fa:be:c7:da:7c:
80:20:9d:3e:7f:6d:f1:df:87:c0:93:ad:2f:e7:4e:
6e:fd:61:aa:6d:50:c8:bc:9d:a1:b8:8c:62:bc:eb:
03:79:f0:e2:d9:75:20:e5:65:97:4a:56:4a:51:67:
d5:89:4d:72:2f:68:5a:40:c5:d0:e1:47:26:45:09:
8a:65:31:db:1c:2b:a4:70:ed:f5:23:ac:f0:68:32:
16:2a:09:fd:59:af:35:99:86:ff:63:f9:b6:88:09:
6f:62:9f:b0:5f:20:bf:7c:4d:af:ec:f6:36:34:76:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:9F:F5:8A:80:93:84:33:96:7B:93:CD:A2:D2:50:5D:3A:66:65
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:91:eb:92:a4:7c:10:4b:3d:49:18:f8:11:8a:60:d9:8e:36:
b1:28:3b:8d:fe:ff:ef:39:f7:87:1f:4e:9b:00:26:6a:a6:14:
90:0f:fa:bb:d7:0f:3e:8f:be:53:c0:c1:43:93:80:be:33:57:
e8:3e:2d:56:43:d9:7e:50:98:23:40:3c:de:3d:0a:35:70:76:
16:2e:f5:9f:07:79:77:e9:e1:aa:c5:04:01:7e:f2:89:d5:e5:
2b:9e:60:23:e6:db:44:34:17:ef:d6:9b:54:d7:15:88:c9:93:
85:18:f0:3f:87:1d:4d:7a:2e:07:2f:b4:56:0d:0a:cb:50:4d:
02:b2:00:c9:ba:62:ef:9a:d2:8a:9d:22:1a:2b:ac:53:24:df:
e8:cd:bc:b9:aa:96:e9:07:53:76:29:86:b1:6e:0c:26:ab:b3:
fc:f7:43:18:23:d2:0f:0c:7b:a5:de:af:cf:e5:03:dc:7e:c4:
db:96:9a:da:2e:36:1c:a0:b8:61:3a:e0:66:b9:6b:93:19:4d:
3c:c0:61:b0:f6:a0:85:dd:45:e0:f2:3d:98:ad:88:b6:6f:05:
59:57:09:fa:2b:b9:7b:05:c4:10:92:6e:bf:6b:cc:4a:c9:07:
86:69:ba:60:ed:9f:b8:00:b0:c9:fa:f8:78:5b:0d:2c:d2:c0:
35:6f:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:14:18 2025 by rpki-client