Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zSRL-iApvQnhBb81oI0aTTUSRrg.roa
File: zSRL-iApvQnhBb81oI0aTTUSRrg.roa (raw, json)
Hash identifier: aZjcTiaDeUVhuwWv6ruf4uOqiJEnRtH08CYNWeq057U=
Subject key identifier: CD:24:4B:FA:20:29:BD:09:E1:05:BF:35:A0:8D:1A:4D:35:12:46:B8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01967CED54D45550F1FAE982AA8CAE5C30AC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zSRL-iApvQnhBb81oI0aTTUSRrg.roa
Signing time: Mon 28 Apr 2025 15:04:10 +0000
ROA not before: Mon 28 Apr 2025 15:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 194.87.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ed:54:d4:55:50:f1:fa:e9:82:aa:8c:ae:5c:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 28 15:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd244bfa2029bd09e105bf35a08d1a4d351246b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:37:b1:b9:30:70:bf:d4:ab:45:77:31:d1:
7c:cb:71:d7:d9:88:85:c3:1f:ea:f9:91:a0:a3:e6:
98:a2:da:83:74:77:28:c1:7e:a4:cf:37:44:0f:c4:
97:da:73:b0:b4:78:47:91:64:77:c7:5a:9c:25:f7:
70:40:09:a6:70:b0:05:46:57:fb:d2:55:2f:38:54:
a0:67:d1:c7:4a:ff:56:e5:86:0a:39:19:6f:73:10:
86:07:2d:80:f8:d8:5f:f7:c7:86:73:5a:fa:7a:19:
3a:64:29:c5:6f:4b:72:13:45:d6:00:7b:4f:a0:07:
cb:cf:9d:33:7f:01:2f:dd:83:06:50:4d:01:f2:bf:
1a:4c:cc:1c:68:cb:c1:ca:a5:fd:1f:e4:ef:eb:b9:
43:4b:ec:da:54:7d:75:01:6f:17:92:0b:d7:1f:89:
3d:76:54:bd:48:5c:dc:cc:66:f1:47:4a:00:2f:1a:
39:f8:f0:a3:a3:79:f2:71:6b:a7:df:b1:4b:d3:c3:
8a:bb:1e:df:f8:08:82:ae:bd:e0:68:5a:c1:20:64:
87:94:33:44:e8:44:79:3e:cc:9c:8a:e3:f6:e3:af:
d3:9b:9a:f7:4e:45:99:c6:dd:7b:91:f9:a6:50:b2:
dd:aa:b1:54:79:ea:53:48:8c:24:a8:92:9a:77:c3:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:24:4B:FA:20:29:BD:09:E1:05:BF:35:A0:8D:1A:4D:35:12:46:B8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zSRL-iApvQnhBb81oI0aTTUSRrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:58:81:f9:10:d1:fd:f9:a5:ec:ba:64:70:34:14:27:21:05:
95:97:6f:1c:f7:b3:04:ff:12:12:ed:8d:92:2a:a6:61:fc:a6:
0b:ef:1d:dc:3c:42:f3:94:6c:97:a9:4d:d0:96:76:b0:9e:4b:
58:23:3a:3c:18:88:7a:c7:6a:cf:b7:3b:54:0e:23:c8:80:4b:
db:3b:ab:b7:12:b7:d6:5c:ce:7d:3c:45:e6:ec:00:2d:17:80:
4a:7b:f0:a7:14:c8:a0:6f:75:11:7e:76:b5:e9:9c:3a:16:d8:
d9:c9:b7:dd:5a:b9:87:f3:dc:d5:0f:02:6c:b5:1b:7e:71:13:
15:1a:a4:ab:a3:40:e8:b4:6a:51:ed:8e:92:5d:55:58:ed:85:
97:53:4c:ff:38:3f:62:b0:d0:d7:df:d7:b3:4d:1e:80:08:7e:
36:f0:40:5b:1a:37:0e:6d:dc:7c:02:15:fc:ad:62:ea:7d:5e:
9a:4a:5e:0a:ba:79:9d:c0:0d:14:f9:12:31:72:52:92:31:c6:
bd:89:44:aa:ad:b3:f9:b5:21:e2:ed:8d:31:79:da:c4:04:3a:
68:ca:45:15:12:ca:22:18:30:6f:b0:ea:ba:4c:09:35:58:28:
84:ee:55:5c:50:1c:e9:28:66:0b:f0:a3:6e:9d:3a:17:4e:9c:
35:69:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:18:39 2025 by rpki-client