Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZHca5QKMKPLraYZVun3AAPuRips.roa
File: ZHca5QKMKPLraYZVun3AAPuRips.roa (raw, json)
Hash identifier: R79mgEs6ca71bpFhHwDY4qssoj4nMNksBjThsS8onp0=
Subject key identifier: 64:77:1A:E5:02:8C:28:F2:EB:69:86:55:BA:7D:C0:00:FB:91:8A:9B
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01963E7226EAF76CFE6586B605E84B24F7D8
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZHca5QKMKPLraYZVun3AAPuRips.roa
Signing time: Wed 16 Apr 2025 11:53:10 +0000
ROA not before: Wed 16 Apr 2025 11:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60873
IP address blocks: 188.130.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:72:26:ea:f7:6c:fe:65:86:b6:05:e8:4b:24:f7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Apr 16 11:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64771ae5028c28f2eb698655ba7dc000fb918a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:e3:97:02:91:be:a8:60:67:70:43:fa:fb:
54:2d:ad:89:78:1e:f2:b0:e9:6b:5a:29:5c:7c:cc:
94:05:ba:cc:e3:bd:dd:7a:18:5f:45:98:d7:e6:a6:
c8:9b:1f:de:6b:cf:66:51:7e:20:11:7f:8f:e6:b3:
1f:5b:b9:d4:3f:12:b9:72:ba:dc:bc:a3:67:6d:25:
2a:ee:73:58:e5:7f:1e:bb:93:76:e7:6f:c4:3f:e0:
a5:2b:a9:f9:89:40:a8:77:87:57:b3:ed:9e:bd:64:
94:01:6f:94:43:52:cc:3e:93:59:b1:16:6a:26:79:
76:13:e1:3a:08:2a:e8:8a:59:83:bf:5c:ed:49:b8:
3e:7d:3f:e1:3f:b9:e8:17:40:2a:37:95:80:a1:aa:
62:2c:83:62:7e:99:08:06:92:07:2e:54:b0:0e:a3:
f9:ab:10:78:df:94:bf:0f:c5:af:c1:b4:71:6d:be:
2a:c1:64:4a:11:96:c9:ca:a8:08:f8:91:f7:80:02:
fd:f0:91:6f:0b:d6:eb:dd:64:c6:28:3e:c8:4d:7a:
c7:14:8a:b9:c5:93:cb:0b:ea:f5:aa:20:61:61:8f:
73:1d:b0:76:16:05:83:ab:0e:10:35:a6:83:c6:a8:
e5:70:b4:f8:d5:99:e2:1b:90:e6:46:21:70:24:ad:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:1A:E5:02:8C:28:F2:EB:69:86:55:BA:7D:C0:00:FB:91:8A:9B
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ZHca5QKMKPLraYZVun3AAPuRips.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:39:f6:6d:42:30:66:12:a0:3d:8f:2d:67:d7:47:a9:54:c8:
6c:e7:9a:fb:7d:14:c8:a0:d8:c0:84:05:41:f8:e8:7d:60:ae:
29:23:81:87:5d:b1:6c:1e:3a:d9:20:f4:d9:76:87:60:0a:ce:
1d:cf:ed:12:6a:a7:a7:5f:51:3d:8e:cf:cc:ba:77:e5:4e:9f:
9c:e8:4b:2f:c7:0c:0b:50:91:0c:a6:bb:fe:a3:ec:31:b8:44:
85:8b:7f:7b:2a:11:70:c1:8f:0c:17:1d:92:3a:3a:f5:8e:88:
93:b8:02:ed:e5:50:0a:79:7c:1e:7d:5a:cd:38:41:c0:a6:ca:
fc:05:1a:80:92:c6:d1:3d:71:08:9b:ae:9d:80:67:2a:65:31:
9f:05:6e:08:0b:77:a6:65:05:88:1b:e7:f4:e9:a0:89:dc:94:
52:47:7a:de:29:98:dc:74:a3:59:aa:ae:dc:6e:02:e8:c9:73:
a9:90:f5:70:dc:4d:fc:5b:21:84:e1:59:d8:5a:cc:d0:4b:bf:
64:8e:db:03:cf:46:62:bc:c8:ea:fd:58:8f:05:c5:05:f9:0a:
de:c2:4f:c1:49:77:5d:d8:b4:6f:c7:c1:4b:7b:c7:9c:06:29:
e9:88:fe:3e:e5:85:13:45:35:0b:7c:63:ac:f0:9d:df:e0:d4:
db:8b:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:26:09 2025 by rpki-client