Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/pz3qvvC6VDwzMJ0FqwtqMkozzjE.roa
File: pz3qvvC6VDwzMJ0FqwtqMkozzjE.roa (raw, json)
Hash identifier: khhKZcUTofj5nkJVw+mN0B8jECR493vjlhy9BYx8E/o=
Subject key identifier: A7:3D:EA:BE:F0:BA:54:3C:33:30:9D:05:AB:0B:6A:32:4A:33:CE:31
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 0194985925CF5DB2C75D5E666B7891F7A111
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/pz3qvvC6VDwzMJ0FqwtqMkozzjE.roa
Signing time: Fri 24 Jan 2025 12:46:06 +0000
ROA not before: Fri 24 Jan 2025 12:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51713
IP address blocks: 77.95.113.0/24 maxlen: 24
185.181.252.0/24 maxlen: 24
192.250.224.0/24 maxlen: 24
192.250.234.0/24 maxlen: 24
192.250.239.0/24 maxlen: 24
195.250.23.0/24 maxlen: 24
198.38.80.0/24 maxlen: 24
198.38.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:59:25:cf:5d:b2:c7:5d:5e:66:6b:78:91:f7:a1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 24 12:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73deabef0ba543c33309d05ab0b6a324a33ce31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:9d:f7:f2:4e:8b:c9:25:ea:98:f7:39:7b:
2b:e0:81:74:92:c0:d1:25:97:4f:ff:0f:18:55:8c:
36:cb:63:15:c7:36:6d:22:08:6c:c6:62:a4:c2:e5:
9e:02:89:0f:8c:63:a6:76:d8:73:b5:46:da:68:69:
c8:84:bc:f6:a5:7c:8f:07:3a:c6:04:c7:29:17:4e:
22:52:bd:ad:bb:c4:06:11:3c:9e:4e:d7:24:af:da:
a9:88:6f:9f:41:ef:79:ed:fe:f0:31:ba:c1:86:f9:
dd:15:03:a1:8f:44:49:3e:6f:7e:a1:aa:78:ed:1a:
d1:07:5f:30:9e:2d:d3:53:b6:2d:05:01:83:5b:c6:
71:4d:fc:12:4e:bc:c3:22:a7:4d:78:9f:0c:8a:e5:
0a:50:10:98:3a:23:05:41:b7:1a:60:37:d9:59:20:
55:cf:65:61:60:d2:96:73:cf:2a:82:06:15:0f:4b:
b5:9a:a7:9f:7c:63:09:7a:32:55:9a:c6:9f:15:11:
21:5d:cb:09:a1:a8:fc:b3:92:13:7c:24:0a:2a:94:
fd:0e:c8:6e:af:aa:70:c3:19:ee:9b:87:cc:9e:14:
fc:89:a1:d2:dc:e8:26:be:3c:64:d4:fc:a3:08:aa:
99:cd:58:b8:5c:b2:50:49:38:a1:d9:34:5f:f0:4a:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:EA:BE:F0:BA:54:3C:33:30:9D:05:AB:0B:6A:32:4A:33:CE:31
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/pz3qvvC6VDwzMJ0FqwtqMkozzjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.113.0/24
185.181.252.0/24
192.250.224.0/24
192.250.234.0/24
192.250.239.0/24
195.250.23.0/24
198.38.80.0/24
198.38.82.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e6:1c:40:60:65:a0:b6:77:64:46:2e:50:28:e7:09:d0:f9:
f4:d1:66:d7:89:4f:45:4e:58:9a:7e:aa:5d:21:cb:bb:17:f5:
52:a0:67:7d:89:c8:b9:9b:c5:36:58:84:6d:18:9e:5f:a5:1f:
a6:5b:e9:81:d7:d3:26:60:3a:eb:65:f6:0b:6e:e2:2b:1c:ea:
c7:92:33:45:45:69:28:e8:40:34:e8:93:4c:a3:f3:a7:10:8d:
fc:83:94:e7:bb:3f:41:33:5f:a2:e6:33:85:6c:13:d0:f6:37:
b2:cb:5c:2d:1b:26:03:b8:85:59:41:c7:a1:c1:c8:eb:9b:5c:
0d:2c:a0:3e:26:73:1c:4e:80:b8:14:ff:67:39:48:4d:b4:e6:
80:6c:c2:c3:76:37:6f:10:3a:df:86:29:eb:54:89:11:ff:2f:
5a:5a:be:89:db:f1:e0:24:df:9d:f9:a4:d2:6e:51:c0:37:0a:
1b:ba:85:c3:c9:5e:79:0e:42:a9:9d:22:66:a1:46:ea:1f:50:
68:f4:44:2a:3c:b6:9f:f6:90:eb:fa:e6:99:c0:63:10:0c:a7:
49:4a:9a:35:46:5f:8b:f0:ae:aa:a6:e2:84:70:07:68:b1:96:
bd:d4:1a:00:b1:f4:b5:42:26:69:df:24:91:07:f9:c8:0a:f2:
d8:4c:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:13 2025 by rpki-client