Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa
File: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (raw, json)
Hash identifier: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=
Subject key identifier: 67:97:DC:17:95:BB:29:74:CF:37:61:EE:C5:24:1D:F1:94:07:E1:A4
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 01941F8C3306DC612599F208379171A1C318
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204176
IP address blocks: 185.112.60.0/24 maxlen: 24
185.112.61.0/24 maxlen: 24
185.112.62.0/24 maxlen: 24
185.112.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:33:06:dc:61:25:99:f2:08:37:91:71:a1:c3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6797dc1795bb2974cf3761eec5241df19407e1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:da:a5:27:da:2f:63:a1:ef:e6:b4:64:00:
67:c0:a7:2f:0f:60:c4:cd:0d:75:85:b2:62:b1:ad:
e1:b6:b6:3b:2e:40:77:24:2d:2f:7f:97:0d:8c:e3:
2d:d8:c9:e2:00:53:06:de:a7:f8:17:c2:50:bc:f1:
3e:d2:19:4f:ac:cf:92:6a:ec:10:85:98:fc:3b:3b:
32:ff:e7:ce:8d:db:f9:5e:57:07:e9:84:ef:8c:ac:
d9:58:5b:16:d5:b7:01:9a:1f:51:89:83:ec:08:60:
63:fa:f5:08:bb:7e:09:55:44:30:ca:83:48:16:07:
b1:db:bb:5e:3a:f1:34:da:15:fe:46:00:74:e3:55:
b1:1b:f1:0a:4b:2d:45:d6:17:7c:38:b9:c8:ee:3b:
29:77:74:bc:c1:5f:97:32:7b:0f:0d:74:10:4b:a7:
48:41:cd:e7:10:d8:70:2b:e6:b4:df:b4:15:7a:14:
a0:01:6e:10:d3:82:46:7b:33:b3:21:4e:1e:f0:8c:
75:5d:b5:8c:7d:16:af:4e:d9:89:78:d3:f4:44:cc:
f5:74:32:58:a6:85:6a:fb:d2:a0:94:b4:b3:1f:64:
57:41:f3:48:a3:2c:35:04:c0:d0:bc:80:9d:63:b0:
a9:c4:55:ca:89:01:13:95:a0:ce:83:fe:a6:93:06:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:97:DC:17:95:BB:29:74:CF:37:61:EE:C5:24:1D:F1:94:07:E1:A4
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.60.0/22
Signature Algorithm: sha256WithRSAEncryption
60:33:7d:94:4a:e0:55:2c:e8:ba:1c:a7:04:ac:f5:8e:d9:aa:
55:54:82:cc:f9:93:05:5d:b6:58:9c:21:d9:a1:21:b9:00:33:
f1:01:cf:67:c9:8b:19:09:ea:a6:85:c8:17:08:1a:06:e2:33:
ce:06:9a:be:5c:9e:aa:57:dc:7a:62:2f:30:7f:12:f7:04:b5:
19:7f:5f:42:5f:19:ea:3a:d8:85:6e:57:08:fa:22:36:94:b4:
33:86:d0:3b:a9:09:fa:68:a4:99:f8:0b:b6:f7:3d:5d:72:62:
24:8c:13:21:79:e0:0c:64:1c:b5:c6:ee:2a:14:bd:f2:7c:0c:
b3:34:4e:f0:bf:34:1d:8b:df:4d:31:98:a2:d0:05:dd:3f:0b:
79:9d:3d:fd:13:5a:80:b2:03:4d:b4:e2:9a:25:3e:f7:80:03:
c7:44:59:a2:ef:27:60:d6:9a:07:1d:1a:84:12:00:ac:85:cc:
d3:ae:00:4a:23:ff:7b:ad:e5:bb:8d:0d:9f:95:83:11:8b:5e:
bf:0b:0e:71:d7:f6:99:05:73:19:a9:90:61:b7:e4:f7:d2:df:
20:ce:9f:ac:cf:79:28:ba:0e:d9:72:6d:72:de:d1:a2:ea:8b:
a3:f9:ce:69:a2:52:9f:50:c6:98:a9:8a:40:71:3d:fa:1c:1e:
77:85:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:06:24 2025 by rpki-client