Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa
File: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (raw, json)
Hash identifier: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=
Subject key identifier: CF:6D:6E:2C:10:25:EC:9E:6A:35:EB:BB:FF:04:E7:7E:BD:60:37:74
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 01954294307952E662213DF24384F6F4AD1F
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa
Signing time: Wed 26 Feb 2025 14:06:02 +0000
ROA not before: Wed 26 Feb 2025 14:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44193
IP address blocks: 91.223.19.0/24 maxlen: 24
185.158.208.0/22 maxlen: 24
194.110.204.0/24 maxlen: 24
195.234.112.0/22 maxlen: 24
2a02:2278:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:94:30:79:52:e6:62:21:3d:f2:43:84:f6:f4:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Feb 26 14:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf6d6e2c1025ec9e6a35ebbbff04e77ebd603774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:ed:e9:87:b6:e7:04:c8:3a:32:a4:db:e8:
16:0b:df:f6:95:72:02:b9:2b:37:c0:a4:05:e9:26:
50:7b:dd:17:50:b5:30:84:86:44:f5:f7:cf:20:18:
34:44:66:e4:37:bf:38:4d:4b:9f:e9:47:d7:bb:16:
4f:1f:17:a4:39:d4:e9:ec:32:57:23:35:5e:e1:36:
e4:89:d5:df:f0:2c:18:f9:07:57:ab:9a:e1:9f:1f:
14:43:20:6c:a9:d9:4a:f0:36:47:d9:61:a8:e7:af:
04:f7:92:5b:3d:c4:e6:3f:81:de:51:9e:05:87:d3:
86:ca:94:80:84:07:62:e3:f3:f8:e1:ff:5f:32:09:
86:92:8e:4f:f3:a3:2c:60:63:74:43:49:32:6c:48:
ac:dd:cc:ff:6c:50:26:a9:66:f4:bd:df:8f:a7:83:
3b:f8:37:6f:7a:12:1c:c6:65:e0:f6:50:b9:4f:4e:
e7:a0:0b:cf:ce:1f:c7:e5:34:52:d3:2a:4c:7f:0e:
ed:8f:51:1d:4f:f0:54:71:f6:63:78:86:eb:06:cf:
1b:b3:d6:79:1a:9f:e5:7b:82:78:9b:db:7b:3f:06:
93:f0:d6:7f:ca:31:99:f8:38:9f:45:5c:17:fb:ff:
46:15:3b:4e:1d:37:9c:da:32:7c:8c:bd:33:7a:90:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6D:6E:2C:10:25:EC:9E:6A:35:EB:BB:FF:04:E7:7E:BD:60:37:74
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.19.0/24
185.158.208.0/22
194.110.204.0/24
195.234.112.0/22
IPv6:
2a02:2278:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
d8:28:90:d4:97:94:88:1f:25:95:69:eb:0a:95:87:2f:c4:12:
f9:28:73:74:b8:3d:b8:c5:7f:3a:1c:bc:eb:38:2b:24:8a:b3:
c6:bb:4e:1d:dc:79:65:dd:01:4c:45:94:e8:16:f5:71:6f:55:
52:9c:90:27:6f:7b:5f:d9:75:a3:59:77:17:32:d0:41:81:33:
fb:64:57:eb:24:94:d5:fe:54:cc:58:5a:86:dd:e6:4a:99:f5:
af:a2:9c:72:40:4b:f0:0a:45:2d:59:28:45:6e:c2:de:9c:ea:
ea:4a:ab:b7:33:02:04:08:9e:9a:ee:6f:1b:05:d0:fc:de:69:
a4:ce:33:7e:bc:5d:94:49:f8:d3:53:02:7c:97:93:63:f6:22:
65:21:48:7d:62:f3:b7:17:43:6c:d4:c1:51:fb:46:fe:1d:95:
67:62:83:79:8e:36:54:a3:b4:80:7d:a1:9c:a7:1b:03:10:e3:
ac:2d:bd:68:a8:37:0a:db:35:b4:e3:50:41:b9:f1:25:26:2f:
2f:b7:50:d6:94:f7:05:c7:15:4e:23:72:06:ae:8b:9e:27:7c:
66:02:d9:b1:2e:21:14:e3:9f:3e:ae:e5:c9:7d:62:72:b3:ec:
01:f8:2e:3b:f5:2d:16:18:fa:01:aa:e0:b9:3a:e2:92:62:a4:
b8:7a:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:58:45 2025 by rpki-client