Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/zfevDRWTI9ElP_0JFPWcB5eiL-A.roa
File: zfevDRWTI9ElP_0JFPWcB5eiL-A.roa (raw, json)
Hash identifier: xu09TmX2/se2qxFKlwHjNcmA2dSMzqNt9raj3MmhER4=
Subject key identifier: CD:F7:AF:0D:15:93:23:D1:25:3F:FD:09:14:F5:9C:07:97:A2:2F:E0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 01980A1CAEAB4F12A9B3B10B1B6C8C2131DA
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/zfevDRWTI9ElP_0JFPWcB5eiL-A.roa
Signing time: Mon 14 Jul 2025 18:05:08 +0000
ROA not before: Mon 14 Jul 2025 18:05:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57479
IP address blocks: 176.124.228.0/24 maxlen: 24
176.124.229.0/24 maxlen: 24
176.124.230.0/24 maxlen: 24
194.60.252.0/23 maxlen: 23
2001:67c:11a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:1c:ae:ab:4f:12:a9:b3:b1:0b:1b:6c:8c:21:31:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Jul 14 18:05:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdf7af0d159323d1253ffd0914f59c0797a22fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:8c:28:41:01:87:d2:f5:da:1d:30:bd:70:
55:b4:9e:53:2a:c2:d8:cc:74:6a:1e:57:51:29:28:
29:d0:37:28:c4:ca:21:21:87:05:ae:03:ab:4b:1e:
95:1f:7a:38:13:61:99:02:1c:b6:ad:b6:42:59:30:
bc:49:7e:2d:a6:58:72:b4:cf:ea:fa:9e:a7:c7:6a:
c2:35:e3:20:b7:32:bb:86:a8:11:1c:c5:91:73:03:
62:b7:c5:8f:85:8a:f8:eb:5a:28:86:05:bf:69:15:
3d:22:c9:c2:b9:64:78:5c:50:1f:99:39:b0:5f:23:
88:66:49:0b:db:be:84:d2:bb:b9:e8:e1:75:ee:93:
64:ff:7d:2d:e2:6c:a0:77:5d:0f:39:83:02:a0:ee:
59:e4:e0:36:b7:3a:16:54:41:86:8c:68:93:29:9d:
0a:b0:e6:38:c1:04:2c:27:16:53:14:2b:28:e3:d7:
f4:63:61:4b:53:fd:56:e3:06:3f:05:53:f8:84:5f:
d7:a9:d1:26:72:63:44:6a:84:d2:53:39:c4:58:d5:
81:01:d6:ca:b4:c5:0b:b5:d6:15:a0:eb:10:65:37:
6f:25:d0:90:8a:54:e3:e0:18:ea:87:3a:4b:6f:da:
28:12:45:86:bd:eb:14:b2:f0:a7:74:1e:f6:61:27:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:AF:0D:15:93:23:D1:25:3F:FD:09:14:F5:9C:07:97:A2:2F:E0
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/zfevDRWTI9ElP_0JFPWcB5eiL-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.228.0-176.124.230.255
194.60.252.0/23
IPv6:
2001:67c:11a0::/48
Signature Algorithm: sha256WithRSAEncryption
31:10:fd:f1:3c:4d:dc:fd:9d:33:ea:75:f9:01:7e:b3:8d:3e:
bc:3c:9b:f9:a2:06:67:af:dd:36:a0:35:81:22:5c:5e:88:c5:
dd:8e:97:88:36:73:22:d9:1b:10:6a:53:fb:3b:ac:5e:8c:91:
15:34:23:34:13:8b:4c:39:92:5f:0c:2e:ed:20:52:2a:7c:f1:
24:4c:23:04:64:33:ca:c5:b8:fa:96:c9:a9:18:6c:d1:fe:da:
b2:91:e3:cb:ed:b1:10:c9:59:40:e4:42:df:6e:30:64:76:07:
f9:0b:ac:ec:14:fe:ad:82:fd:94:d6:aa:17:2d:83:05:29:7b:
2a:c9:d6:a3:31:bf:29:45:ff:4a:c3:cc:b5:cd:ad:bd:89:3b:
99:0d:af:0c:b4:39:b0:a7:aa:ca:b0:f9:51:45:6b:58:cc:f9:
7e:7a:93:dc:80:22:1d:c0:33:a9:04:1d:5e:c0:2c:9c:5d:aa:
53:8b:be:9a:2c:83:bb:2b:f8:ef:6e:6a:c5:03:bb:b9:db:18:
8b:74:df:ab:b9:41:ac:7c:f4:b3:d2:be:c2:63:a6:71:58:27:
cd:6a:42:3a:5f:de:ca:b5:b7:25:2a:d5:2c:ac:38:af:52:b5:
64:f4:60:42:34:01:3b:44:bd:d7:d6:37:29:bf:08:6b:9e:73:
22:41:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:04 2025 by rpki-client