Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zvof_ZogmSmedgFzIsdnhl6DS58.roa
File: zvof_ZogmSmedgFzIsdnhl6DS58.roa (raw, json)
Hash identifier: U0NjkUFg1nXin633cy0WvNupP3XNaEjXOuvMqotPTcs=
Subject key identifier: CE:FA:1F:FD:9A:20:99:29:9E:76:01:73:22:C7:67:86:5E:83:4B:9F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C0BF700EC31F0323C96179783B8E2
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zvof_ZogmSmedgFzIsdnhl6DS58.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5606
IP address blocks: 85.120.16.0/24 maxlen: 24
85.120.17.0/24 maxlen: 24
85.120.18.0/24 maxlen: 24
85.120.19.0/24 maxlen: 24
193.226.68.0/24 maxlen: 24
193.226.69.0/24 maxlen: 24
193.226.70.0/24 maxlen: 24
193.226.71.0/24 maxlen: 24
194.102.91.0/24 maxlen: 24
217.156.46.0/24 maxlen: 24
217.156.47.0/24 maxlen: 24
217.156.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0b:f7:00:ec:31:f0:32:3c:96:17:97:83:b8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cefa1ffd9a2099299e76017322c767865e834b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:a3:5f:a2:ca:97:97:52:a9:45:65:76:05:
ac:43:24:8c:8a:49:c6:51:29:d5:87:23:65:02:10:
da:2e:3a:85:b7:5a:d1:b3:dd:ef:ff:10:90:86:e5:
17:d5:47:32:4d:de:98:d3:0c:7c:3b:8c:8f:62:63:
b5:9a:31:6e:78:71:4f:76:ae:45:a3:0a:0f:91:aa:
19:94:1e:17:8c:8d:21:be:37:f1:88:17:0a:45:f8:
b5:2a:2d:c7:23:54:09:73:0f:a3:48:a9:bb:88:74:
33:a4:7c:2d:fa:f1:2e:86:fa:a4:9d:d2:f7:ee:73:
a5:77:68:24:24:b9:c2:0b:b6:ba:db:b5:5e:ab:e1:
b9:df:ae:5f:47:82:1d:bd:08:95:2d:1d:83:2c:11:
7b:e7:0f:0c:33:41:ae:85:9c:c9:b4:eb:03:2d:38:
f6:bd:cd:2c:b1:52:72:14:d2:05:00:84:d8:56:0d:
00:e1:cc:65:36:02:7d:a6:77:43:d6:18:01:8f:90:
ed:24:17:fc:61:1d:86:b2:89:7b:91:98:59:fd:4a:
f8:0b:b9:04:57:fc:3e:ef:7e:b5:e9:9a:75:24:b5:
f1:4a:d8:9f:d9:46:cf:56:f1:3d:1b:37:fa:06:88:
43:8e:78:6b:8b:17:d8:5f:b6:c2:0b:b6:24:b4:62:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FA:1F:FD:9A:20:99:29:9E:76:01:73:22:C7:67:86:5E:83:4B:9F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zvof_ZogmSmedgFzIsdnhl6DS58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.16.0/22
193.226.68.0/22
194.102.91.0/24
217.156.46.0/23
217.156.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c1:fb:c4:4b:49:25:bd:eb:1f:e9:20:55:0f:0e:94:0d:99:
27:77:80:8e:17:b4:d6:1a:71:96:67:ac:5a:3b:40:64:0f:1a:
cb:a0:b4:09:4f:af:51:74:23:8c:ef:cf:39:b3:a2:a8:d9:f8:
8a:ea:9c:8d:f8:5f:be:8a:59:7a:45:c1:99:72:2d:fa:ac:df:
dd:78:79:58:a9:2f:79:50:20:70:56:0f:a3:3d:ed:3e:72:b1:
22:f8:f0:23:80:8f:12:b9:d3:2c:8f:9e:fc:aa:e0:f1:77:5e:
e0:93:06:b7:bc:14:64:8c:50:e1:71:b8:21:49:fe:ac:e9:20:
94:e9:fb:b4:9e:2f:1c:ee:ad:1d:c2:bc:af:7c:23:55:a2:1e:
a9:49:55:b2:0d:d2:ba:cf:41:14:1e:63:8e:a5:4d:f6:bf:a8:
30:08:f5:50:fc:9c:f1:cc:50:54:6b:d6:04:d0:91:aa:d2:e9:
71:24:30:09:83:a3:f6:3f:65:82:3d:23:b2:3d:c8:1f:82:25:
8d:a7:09:02:df:43:5f:29:48:66:b9:3f:cf:f7:62:31:20:df:
4e:b3:5a:50:7f:75:2a:d1:59:2b:33:3c:f6:79:7c:58:35:6a:
53:d1:54:f6:b3:ba:0a:2c:4b:10:96:31:33:27:cd:e6:15:ba:
16:89:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:25 2025 by rpki-client