Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/nz0zNU_fBq73BHptpznw6advDzo.roa
File: nz0zNU_fBq73BHptpznw6advDzo.roa (raw, json)
Hash identifier: 0C2SqHmcbAjiy/O+OBAPzaEZ28ZqtJabC+l8WC5HbPg=
Subject key identifier: 9F:3D:33:35:4F:DF:06:AE:F7:04:7A:6D:A7:39:F0:E9:A7:6F:0F:3A
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 01941F8C9549F015B07ABC09ECA4DA6220DE
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/nz0zNU_fBq73BHptpznw6advDzo.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207281
IP address blocks: 185.63.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:95:49:f0:15:b0:7a:bc:09:ec:a4:da:62:20:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f3d33354fdf06aef7047a6da739f0e9a76f0f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:7e:14:c9:e3:f8:f9:73:3c:52:67:b1:c1:
6d:0e:28:67:e5:66:73:2f:de:3e:c3:9d:33:7a:ed:
d8:77:13:78:27:df:d1:b8:2e:2a:98:4f:31:e9:50:
b6:ab:35:76:98:e0:45:17:f7:4a:a1:e4:c0:b6:3e:
46:c7:1e:80:e2:09:f7:e8:dd:49:99:91:65:d0:33:
55:19:ea:9c:d7:aa:79:48:d8:c2:d9:71:26:ef:1b:
c5:09:91:0b:8d:6b:91:a0:0f:9a:8e:f7:d8:0d:82:
47:ee:65:b3:01:b3:f0:fc:b4:a9:de:b0:f8:5d:37:
0e:42:d1:3d:e5:fc:c0:be:b2:8d:5a:ff:fc:e8:0a:
a6:a0:ef:09:03:7b:3d:0c:85:62:60:e1:75:b6:9f:
af:5e:a2:a4:52:5a:19:cc:75:6c:33:ea:c2:23:8b:
eb:64:ba:a4:8a:5f:1c:7d:1e:eb:66:79:92:a8:de:
ac:d7:e4:13:6a:d4:f4:b5:9f:63:70:fe:94:3a:44:
d9:01:99:36:f3:23:43:9b:16:0b:59:ff:99:31:52:
5d:ac:f9:30:eb:d0:aa:dc:97:11:f0:ed:6b:e4:35:
ed:52:89:c4:54:cd:a9:81:50:66:b2:61:65:ac:83:
07:f8:30:71:c8:87:a5:03:29:71:41:34:0d:e2:13:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3D:33:35:4F:DF:06:AE:F7:04:7A:6D:A7:39:F0:E9:A7:6F:0F:3A
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/nz0zNU_fBq73BHptpznw6advDzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.85.0/24
Signature Algorithm: sha256WithRSAEncryption
41:12:19:6c:e4:b5:87:da:36:a9:87:2b:b2:4d:23:fc:02:f8:
71:ce:a3:b2:37:e5:5a:99:94:1b:59:d9:28:68:5e:61:d1:20:
76:31:0e:50:a7:cd:98:5d:e4:81:90:65:4c:b8:e1:a9:a7:c6:
96:87:48:35:be:be:80:e1:5f:b9:5a:e2:9d:eb:39:c6:b2:ac:
42:75:74:5d:c8:57:e2:47:42:22:e4:27:ea:70:7d:f4:36:18:
3b:1d:05:7a:fd:21:bc:40:1d:84:49:65:d7:e3:97:63:8f:54:
60:9f:4b:4f:da:9c:0d:b3:6b:b5:3c:06:67:61:f3:7d:12:d3:
ab:d2:cb:a5:16:d0:d8:7d:d9:00:b6:81:a5:d7:92:fb:93:16:
1e:fd:65:4d:f0:fe:31:7e:6a:06:c5:b8:b9:76:79:f4:06:31:
e2:e5:a3:62:d4:ad:34:cf:2e:03:bd:59:f7:c6:df:b5:d6:a8:
09:2e:c4:29:cf:ab:6f:95:10:93:10:b5:e9:86:6a:f5:8b:75:
13:f2:45:07:86:f7:0f:ec:10:d5:26:c6:bb:24:4f:12:45:b0:
cb:81:2b:70:37:e6:42:d2:0e:50:36:f3:3d:c5:2c:00:5d:61:
16:41:d8:fa:a0:5c:96:2d:a0:2c:a8:0a:ee:8c:c5:e4:cd:e5:
c9:94:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:23:03 2025 by rpki-client