Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ZSwUyar539Tgh3DD_ChSbyxZ5_w.roa
File: ZSwUyar539Tgh3DD_ChSbyxZ5_w.roa (raw, json)
Hash identifier: 89oHeVP2XQ40BKPFhkQWZhzqVhK5bwn7r6u2KRDIc8o=
Subject key identifier: 65:2C:14:C9:AA:F9:DF:D4:E0:87:70:C3:FC:28:52:6F:2C:59:E7:FC
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D1626A7B4A029D80AA4DE7B0907D
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ZSwUyar539Tgh3DD_ChSbyxZ5_w.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.90.144.0/24 maxlen: 24
83.143.118.0/24 maxlen: 24
193.221.193.0/24 maxlen: 24
193.221.194.0/24 maxlen: 24
212.107.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d1:62:6a:7b:4a:02:9d:80:aa:4d:e7:b0:90:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=652c14c9aaf9dfd4e08770c3fc28526f2c59e7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:82:92:1c:f8:c8:7f:88:e1:6f:cf:17:3f:
64:07:6c:b5:b4:54:2b:da:45:96:13:f3:0f:98:45:
55:d7:29:c1:88:8c:ef:54:12:5e:f9:e0:ea:92:8e:
2c:56:d9:30:a9:60:c4:13:34:88:2f:f8:48:d5:67:
15:e7:95:33:f0:44:0e:a0:8c:9b:c9:9b:59:2c:97:
ef:73:6b:ae:21:e8:fe:cd:35:a3:d9:9c:ff:a8:bf:
3a:41:32:14:13:53:fc:0e:fe:98:91:fc:c4:47:09:
41:75:b5:0c:4f:bc:8d:03:63:f7:e3:c8:33:db:a7:
f6:24:4d:3a:73:72:a0:57:12:d0:c5:3c:dc:67:48:
05:36:79:9c:90:f4:27:b9:18:c7:70:21:9e:d0:03:
90:cb:c1:56:5d:a0:ca:b7:f7:f7:c6:76:be:38:25:
ee:d3:1f:19:e2:55:56:f7:fb:e2:d7:d9:10:a8:fc:
69:57:a3:8c:14:dc:96:fe:c1:c0:3c:25:ce:75:7c:
50:0a:cd:13:4b:20:18:7a:4f:30:da:ab:50:1f:ca:
b2:8c:1a:b7:1d:40:ec:1f:ad:dd:98:a4:51:38:20:
a8:ec:b7:43:35:0a:db:1a:30:0e:c6:6a:0f:2f:b0:
ce:5f:c7:8a:09:c2:56:1d:f4:60:5c:ed:3b:13:d3:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2C:14:C9:AA:F9:DF:D4:E0:87:70:C3:FC:28:52:6F:2C:59:E7:FC
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ZSwUyar539Tgh3DD_ChSbyxZ5_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.144.0/24
83.143.118.0/24
193.221.193.0-193.221.194.255
212.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c8:27:0e:0b:c6:14:ea:75:ab:10:e0:56:ed:dc:5c:14:bf:
e1:37:83:a9:bc:70:a3:58:dd:db:6c:ae:05:ae:89:2c:1c:fd:
81:36:1d:65:ee:0c:70:3a:61:f3:b3:7b:8f:56:83:b5:51:18:
4d:23:49:40:4b:c0:ef:25:c6:ca:1a:34:ca:c7:05:c8:b7:59:
83:4e:7d:12:ce:5e:82:e7:12:ef:78:7a:e8:2d:13:70:bb:1f:
46:40:86:d6:b9:fa:76:24:74:a4:4e:bf:e6:e2:f1:ea:63:d3:
7c:a1:7f:e6:02:b6:e6:37:9c:c3:2a:1f:b1:64:18:0d:de:10:
99:ce:8e:70:2b:0d:9a:b8:0d:96:19:d1:4c:27:ea:11:52:89:
31:48:6d:fe:27:5b:97:1d:da:67:3c:7a:4e:68:ec:24:74:5a:
5f:70:37:22:d0:30:fc:0b:9a:c4:2c:2e:b1:e6:04:18:02:56:
ab:84:95:30:04:34:aa:f2:6e:01:7e:0a:12:45:68:de:56:7c:
70:fb:4d:81:df:f2:d4:16:f3:80:e7:77:9d:ae:e4:01:8f:2b:
7e:f8:ab:ff:1b:b9:03:f7:49:80:3e:69:03:b1:7f:7a:71:fd:
ea:16:47:68:e1:30:dc:3f:78:05:38:f8:2b:5c:cb:7a:c3:2c:
13:67:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:42 2025 by rpki-client